This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
File:                     i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft (raw, json)
Hash identifier:          JPwpBebfarg1n6OI+DS9duftLVg33SSxDOYJ0DuH0Z4=
Subject key identifier:   63:70:63:5E:17:F6:20:C6:59:CD:E6:59:6E:09:BF:DA:51:57:35:DA
Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
Certificate issuer:       /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
Manifest number:          0180
Signing time:             Sun 25 Jan 2026 02:57:19 +0000
Manifest this update:     Sun 25 Jan 2026 02:57:18 +0000
Manifest next update:     Sun 01 Feb 2026 02:57:18 +0000
Files and hashes:         1: i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl (hash: cz3Xq166EZZizw7+t5Kzz9j2YOW3H9iRYXwpees2lnI=)
                          2: 2601A296AE1011EE92B7161BC4F9AE02.roa (hash: ruTuAI8tCOCbFuPP+2u83Ib06u3MS/nsClPmyXw7xNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
                          rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
        Validity
            Not Before: Jan 25 02:57:18 2026 GMT
            Not After : Feb  1 02:57:18 2026 GMT
        Subject: CN=6975868f-2fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:cf:90:31:08:c9:77:6b:4e:c1:51:b7:a7:
                    29:f2:a0:d5:92:7a:03:66:fa:3a:5a:4f:d9:0e:1d:
                    26:98:c1:cd:42:ce:89:7b:1d:3c:5f:92:0c:40:1b:
                    98:d7:bc:4f:ef:26:62:b4:a4:28:c6:38:5a:bc:f9:
                    c4:a9:59:05:0d:d2:e4:b0:7f:0b:bf:19:cf:53:4f:
                    8f:bc:db:b6:4c:45:f6:6b:fd:11:72:54:10:b7:46:
                    a2:ff:75:d3:e1:a5:05:33:22:17:36:31:b2:9c:d2:
                    11:bb:c1:a9:f7:2d:35:02:91:4d:7a:74:79:f2:65:
                    4b:f4:e9:d3:8e:00:9e:c7:43:2f:f3:d3:34:96:5d:
                    2b:e3:a9:9f:3d:f2:90:35:3a:23:7f:31:e4:13:42:
                    7e:a5:df:e9:e9:39:2c:ec:ba:fb:db:6d:12:7e:18:
                    9f:42:c8:94:d5:ab:8c:cd:2b:3d:34:87:a8:9e:98:
                    cf:6a:83:09:56:db:7c:8f:c7:85:7a:65:a5:67:85:
                    e5:ca:d7:2a:fd:68:89:0a:29:09:16:2e:0c:2a:bf:
                    53:0c:02:23:af:4c:31:2a:75:4f:e4:5c:02:62:e2:
                    95:98:0f:64:b7:44:9b:d1:73:7e:e2:9c:56:a3:27:
                    8f:d1:c8:cb:11:d8:c7:2e:89:40:a9:53:17:c9:58:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:63:5E:17:F6:20:C6:59:CD:E6:59:6E:09:BF:DA:51:57:35:DA
            X509v3 Authority Key Identifier:
                keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:72:be:5f:4f:b2:eb:a0:87:48:cd:84:5d:9c:28:63:cf:61:
         ed:24:85:f1:35:1c:fe:0c:3e:13:98:0a:a1:3e:6d:f1:2a:4a:
         68:b4:8b:17:d5:ce:5b:ff:b8:ba:96:fe:00:f2:64:2c:1a:e2:
         55:6b:eb:bc:58:f7:e0:20:cd:88:b7:79:ac:31:49:94:7c:de:
         19:36:0a:5d:41:0b:ce:25:2f:bc:47:b7:9a:a6:6b:ca:78:d3:
         17:74:50:af:c9:73:b5:50:11:b4:a4:60:11:f1:ef:c3:dd:12:
         f8:0a:02:67:5b:6c:28:bc:87:a8:8d:b4:db:1b:ee:e8:48:d7:
         00:fc:34:da:98:1a:9b:d5:f5:2f:7a:38:ce:4f:d1:a8:18:a9:
         8f:28:5f:95:3b:32:4a:51:f1:51:99:5e:32:04:63:d1:04:cd:
         4c:3d:09:b7:3c:c3:e5:b4:3a:bf:03:c8:ed:c5:50:85:5e:96:
         89:c5:3c:24:59:96:0d:ed:9c:42:71:50:dd:cf:bb:c6:72:63:
         e1:4c:5b:c4:7c:b4:05:67:ed:5a:2b:b7:c2:d4:a5:65:1a:00:
         45:24:be:bf:68:54:b7:d1:e0:ea:7a:f9:6a:64:58:ae:68:26:
         2e:f7:3b:49:9a:c2:08:f7:61:3a:87:3b:3a:07:1a:2d:b2:9e:
         7f:81:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:21 2026 by rpki-client