This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
File:                     aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json)
Hash identifier:          eaUqlWqwDIHd1fSRMEdPBA7frAi+yTwhtTBAJ/oO7cI=
Subject key identifier:   3A:0A:54:5D:FD:35:01:2E:10:F6:8A:88:47:07:1B:20:C6:E3:CE:18
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Certificate issuer:       /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial:       2338
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
Manifest number:          22F4
Signing time:             Sat 24 Jan 2026 15:41:00 +0000
Manifest this update:     Sat 24 Jan 2026 15:40:59 +0000
Manifest next update:     Sat 31 Jan 2026 15:40:59 +0000
Files and hashes:         1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: 0If0JK1ral8bpGH0cGFH7iMvQ+NcBZb2EYUq0n/wxsY=)
                          2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=)
                          3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA=)
                          4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: OQTqW8pXrnZ75U98rmAzOs9tNk2NfK8jTdXd75zvE4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
                          rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9016 (0x2338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
        Validity
            Not Before: Jan 24 15:40:59 2026 GMT
            Not After : Jan 31 15:40:59 2026 GMT
        Subject: CN=6974e80b-8e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0a:d3:b7:3b:9f:e2:bc:bd:3f:6e:d1:c0:a1:
                    6e:9e:51:45:7b:27:3a:5b:e4:b3:3c:87:5c:e1:a1:
                    e5:4b:ff:db:07:e4:f8:93:d1:cb:b0:32:f6:27:fe:
                    5b:fc:f3:a4:38:73:26:4b:0e:8b:71:32:7a:47:6e:
                    47:15:0e:01:9d:1a:20:d1:26:6d:e0:79:22:ae:e1:
                    3d:dc:79:b0:e1:85:e5:fd:5f:5b:08:c4:9a:61:64:
                    69:f8:64:67:db:0d:83:67:91:9d:4c:62:c7:ed:74:
                    51:05:8c:01:8a:29:9a:b2:dc:87:f0:39:e2:73:60:
                    3d:24:e8:84:db:65:32:81:6a:93:aa:1f:25:98:c1:
                    6f:38:7a:1d:dc:23:b5:1c:b5:65:d2:5e:79:2c:0f:
                    9e:ab:cd:9b:e4:8a:0c:0f:e3:ed:df:df:95:24:87:
                    a3:c7:b2:ad:e8:88:89:d4:51:35:0f:65:ae:8f:5b:
                    32:fc:b2:45:ee:6c:78:f6:46:e4:c5:9f:c9:7f:53:
                    17:ab:5c:b9:d1:dd:3a:a7:b8:39:1d:7b:8c:a1:4c:
                    93:bf:49:94:c0:0e:e6:c2:cd:a4:12:40:50:50:f3:
                    75:f8:a7:de:3b:0b:08:92:9c:64:df:44:7b:5f:45:
                    b9:82:e4:d3:19:30:0b:fd:77:39:c5:33:4a:87:c0:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0A:54:5D:FD:35:01:2E:10:F6:8A:88:47:07:1B:20:C6:E3:CE:18
            X509v3 Authority Key Identifier:
                keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fe:5e:fc:21:ea:60:cf:f2:63:8d:d5:5b:d0:8a:c2:0e:a6:
         c0:3a:eb:a7:fe:2b:0b:71:d3:03:5a:41:3d:4e:4a:50:e8:42:
         13:fe:23:66:49:27:45:05:d2:09:63:86:7b:6c:2c:3d:b0:b5:
         55:ef:fa:02:ad:a7:21:48:49:62:49:3f:85:82:cb:ed:13:6b:
         9b:ed:7d:7a:81:19:35:d8:22:55:bd:03:12:f1:d1:c4:c1:c6:
         05:94:9b:45:b8:32:1a:5f:48:a9:7b:f5:ed:c1:cb:c5:56:28:
         9d:28:21:c9:63:c5:17:98:37:0a:ae:c3:dc:78:76:cd:b4:75:
         1c:d4:bc:5a:27:05:00:8f:11:87:a7:90:ee:ee:63:2f:8a:33:
         74:b5:64:21:5f:65:c1:4b:aa:31:d2:bd:40:6e:9a:92:6b:4f:
         d0:42:4a:f4:45:5d:19:42:5d:7f:91:00:2d:9e:48:9b:36:25:
         78:b7:fa:8d:75:8e:43:64:05:27:ef:eb:54:63:36:72:cd:de:
         7c:3a:8f:22:be:d1:88:14:c3:66:6e:17:88:b2:33:1c:ec:b5:
         c7:8d:bb:ef:e8:ba:25:da:40:2a:83:16:2e:7c:95:4d:8a:5f:
         bb:d2:f7:63:47:98:a8:0c:c6:81:e1:49:2f:93:c0:a6:dc:a5:
         dd:6d:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:18 2026 by rpki-client