This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File:                     6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier:          PEBNBSP6aHxmys1aZqIKTRBa7y6DMZDO7SHj7LV0xk0=
Subject key identifier:   9F:8A:FF:B4:92:B6:83:CF:BD:68:64:41:95:8B:BA:F3:A4:EE:E6:8A
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer:       /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial:       0406
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number:          03FC
Signing time:             Sat 24 Jan 2026 23:41:29 +0000
Manifest this update:     Sat 24 Jan 2026 23:41:29 +0000
Manifest next update:     Sat 31 Jan 2026 23:41:29 +0000
Files and hashes:         1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: rW6POd0Zp3/Is95TLwacKG+Jy7A3aEESzPHCHA0xBMA=)
                          2: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: AFgH6rBWprP5TXP7VnSd6WVIQBawbyHn9rZtCd/WfjM=)
                          3: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: JJotf7VpmSYaDPVQqH2CXAbFgfSH9/zhk44G7WVeO/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
                          rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
        Validity
            Not Before: Jan 24 23:41:29 2026 GMT
            Not After : Jan 31 23:41:29 2026 GMT
        Subject: CN=697558a9-9833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:2c:1f:2c:f3:50:17:08:7f:c8:13:6d:2b:
                    3b:88:19:3f:e0:5f:9e:7a:d9:47:14:e9:61:9e:ae:
                    93:f2:d8:7c:2c:f5:5d:bd:4e:70:d6:75:a1:4a:a0:
                    b8:a7:82:bf:7a:5e:8b:1b:61:9e:2f:2c:0a:22:1c:
                    2a:4f:13:d0:1c:da:d5:d0:40:ce:e1:80:97:7f:bc:
                    56:bf:93:80:3a:c6:a0:1b:a2:14:3d:a1:cf:0c:02:
                    5a:fb:85:23:ec:42:e2:16:f1:d4:8b:fd:9c:2c:fa:
                    ab:8e:32:74:ee:01:0a:d7:13:55:db:36:07:a0:3f:
                    ed:14:54:2a:d8:7e:d6:a6:65:63:6e:8f:36:61:fb:
                    2c:53:e0:54:6e:28:60:11:a8:db:54:4b:7c:b7:53:
                    9e:86:ef:94:8a:df:7e:47:a4:66:88:4d:2d:a9:22:
                    d5:99:ad:23:40:f5:4b:7e:3e:4d:7e:ab:63:32:7b:
                    1f:75:6d:3f:48:1f:19:8e:d8:61:51:d8:84:30:62:
                    51:19:66:04:a7:be:24:23:38:39:d3:31:84:46:78:
                    97:6d:1c:11:43:51:07:47:fb:58:45:0f:d7:64:51:
                    f8:6f:ba:a3:63:e5:5b:e2:43:55:76:c7:9a:92:f8:
                    16:b4:78:8e:d2:c9:76:f1:8d:5a:90:40:a2:68:f9:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8A:FF:B4:92:B6:83:CF:BD:68:64:41:95:8B:BA:F3:A4:EE:E6:8A
            X509v3 Authority Key Identifier:
                keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5a:29:c6:ac:5b:27:39:97:ba:a4:18:45:ad:60:aa:62:35:
         a7:5c:3c:5f:4f:59:11:4b:b3:01:0b:7b:1f:be:83:e0:ce:4e:
         89:7e:ae:62:26:88:ba:70:d7:dd:b0:7a:bf:d2:81:ee:91:a2:
         d8:73:57:a9:9a:6c:54:81:2c:ee:43:44:d1:07:01:03:b5:4f:
         60:50:3b:ac:fd:f0:bb:bc:92:d1:01:36:9f:43:5e:e4:ea:17:
         b5:13:8e:b1:fb:71:d0:3a:43:3d:24:c1:7e:74:7e:7b:91:5d:
         9d:b4:3b:35:f0:96:ea:e9:bd:77:b3:4b:bc:6e:74:4f:1c:4e:
         f2:b9:d0:81:5d:1a:2d:ea:37:20:1c:39:55:20:5b:55:24:36:
         b6:fd:0e:7c:c7:28:1c:5b:9b:bc:69:f0:1c:ac:2d:e4:15:04:
         e1:84:1a:45:c4:73:b0:a1:c9:73:c1:f8:f4:28:e1:4a:61:b5:
         69:58:54:62:c6:fa:e1:22:31:86:2c:65:f0:29:e9:fb:dc:1b:
         c7:34:f0:bb:10:0d:e3:2b:c3:d2:50:c9:ab:6d:b4:ea:75:b5:
         ae:76:42:28:95:e8:35:6b:89:dd:05:78:91:ce:d6:9c:1d:b4:
         74:db:15:fe:77:db:31:18:da:8f:52:b6:55:d2:95:c2:82:c6:
         45:69:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:37 2026 by rpki-client