This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File:                     ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier:          exLDX/+pPfdAGBxtPzQWLqwG60ieiJgKoWpVUQPnuqc=
Subject key identifier:   E8:92:35:BB:32:82:70:6C:DD:59:69:21:12:98:DD:77:04:37:B9:94
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer:       /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial:       0870
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number:          0869
Signing time:             Sat 24 Jan 2026 20:03:57 +0000
Manifest this update:     Sat 24 Jan 2026 20:03:57 +0000
Manifest next update:     Sat 31 Jan 2026 20:03:57 +0000
Files and hashes:         1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: EuMMJ+/HP0hDCkcEGahB9NTjK44V1n+M+g5q/8KpF04=)
                          2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: fA68vPB23i/OAo2Tlmrq8T3cX2gqQgOTyj+Ul9pJg/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
        Validity
            Not Before: Jan 24 20:03:57 2026 GMT
            Not After : Jan 31 20:03:57 2026 GMT
        Subject: CN=697525ad-3a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:4c:29:66:fa:6e:da:f1:71:dc:25:5f:61:
                    0a:e6:d1:3f:54:fd:79:41:ab:a6:cb:3a:b1:68:4a:
                    bb:79:1c:27:2f:8e:00:db:d4:e6:43:80:e0:e7:c6:
                    e7:55:20:31:67:0c:e7:f9:c8:23:00:4e:9a:fc:71:
                    b2:2a:c5:a4:0e:2c:6e:2e:0a:26:98:a7:8d:6b:7c:
                    69:27:93:94:d4:ac:f7:45:bc:91:a0:bd:3a:bb:af:
                    da:ff:90:e6:1e:f3:c2:9f:78:98:bc:45:fe:8b:bb:
                    d8:93:ed:e2:31:18:c3:ca:fb:39:de:85:82:e0:0a:
                    65:c1:36:ae:b9:ed:ef:91:34:e3:d9:8e:42:88:82:
                    5b:f1:01:e9:78:76:96:01:6c:52:75:74:1d:92:31:
                    c0:30:c1:4a:a9:a5:c1:1d:3a:68:0d:27:6d:2d:78:
                    4d:e7:61:e1:20:0b:47:7f:29:d3:a2:b4:f2:4d:b9:
                    e4:be:34:9a:ba:bb:05:1e:65:d7:f2:9d:ee:3f:d2:
                    c9:fc:81:e5:ea:9b:fe:15:18:73:ff:67:1b:5a:9b:
                    9d:b6:e4:b9:f2:ad:bd:0c:ae:60:0b:7f:e4:d5:36:
                    db:8e:2d:41:c6:c9:e0:f0:1d:13:75:45:2b:e8:09:
                    c3:f2:96:1c:23:b3:be:ed:7f:71:de:1f:e5:e4:70:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:92:35:BB:32:82:70:6C:DD:59:69:21:12:98:DD:77:04:37:B9:94
            X509v3 Authority Key Identifier:
                keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1f:46:9a:e1:a0:0c:74:11:9c:54:dd:6e:33:4b:46:ba:d0:
         1e:64:d8:95:8d:d2:56:4b:f2:4e:1f:fd:6b:b5:1f:eb:b0:9f:
         76:9e:41:d3:48:de:76:d4:9a:ad:75:1c:92:0d:bb:da:59:31:
         7a:3d:a0:51:b5:33:72:79:0b:05:2d:5d:b5:aa:77:af:8a:85:
         d4:4a:16:93:d9:dd:6a:a5:98:af:76:16:28:e6:fa:00:34:7e:
         76:7a:18:42:2b:f7:4b:f7:b5:ab:9e:71:db:be:36:45:41:ad:
         d3:ac:17:4a:5e:51:09:78:7a:6f:f3:52:d1:5f:62:a6:c3:b4:
         be:cd:94:01:a0:89:55:3b:f0:88:e8:43:22:08:b0:a3:55:59:
         55:3f:fe:53:19:92:17:51:e5:b7:1a:3f:1b:98:6d:52:30:d3:
         76:e0:2e:ed:f9:30:49:ff:09:8f:dd:67:87:23:c0:c5:8c:a9:
         b3:84:ca:18:ef:d9:e5:b6:fa:b7:45:1f:5e:44:63:8b:39:3d:
         6b:62:21:ad:04:dd:b2:55:26:2f:9b:a8:83:d9:ac:de:32:c6:
         43:06:44:8e:94:ec:7f:49:88:2a:29:30:8a:66:91:67:99:15:
         11:93:10:5d:a0:55:4b:ff:d7:4c:15:cd:bb:77:c8:48:bc:fb:
         7d:eb:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:32:45 2026 by rpki-client