This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File:                     9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier:          UyzyrbbxeKEO7WsTvajVxT0autNcdfBfX/gR+F+kxw0=
Subject key identifier:   EC:36:4B:5C:3B:3A:40:06:76:0C:E0:62:A8:76:3D:8E:49:62:4F:70
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number:          0257
Signing time:             Sun 25 Jan 2026 00:56:27 +0000
Manifest this update:     Sun 25 Jan 2026 00:56:26 +0000
Manifest next update:     Sun 01 Feb 2026 00:56:26 +0000
Files and hashes:         1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: KToiIKile4HFTCjiBFTC3g9/Q08yyi81WS7VpgZQP3s=)
                          2: 642AEE6EB3FF11F0A569692DC4F9AE02.roa (hash: 06OWDIqMBpACeuE4oEOzcbVBDwiweM8yZ9MBzLlKdEk=)
                          3: 38C8C2E6B3FF11F0B056312DC4F9AE02.roa (hash: eGvi9ehXeYJN73mQ/IC0/2k5dRBhN6mtIFIP3LLFsyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Jan 25 00:56:26 2026 GMT
            Not After : Feb  1 00:56:26 2026 GMT
        Subject: CN=69756a3b-2774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:ce:f2:f7:70:59:eb:6a:11:e8:8f:c4:51:
                    b1:12:20:7d:44:85:4b:70:4b:aa:8a:ef:97:3d:bf:
                    61:24:a8:f0:2a:38:84:8b:2e:05:a3:66:28:91:75:
                    b7:4f:be:73:bd:97:42:5a:56:34:5b:e0:1f:1a:bc:
                    40:39:c6:ad:f1:b9:96:4a:33:62:f3:b9:ad:ce:91:
                    bd:e3:bd:f0:2c:ee:d9:10:f4:e6:19:da:a5:a7:70:
                    a1:e5:3e:dc:a0:41:5d:ae:d7:9c:63:d6:d8:a3:69:
                    44:ac:ed:a9:40:35:3b:9e:ae:f0:1a:0b:8d:b2:fb:
                    4c:f6:9d:5e:7b:d0:b9:c0:1b:b8:a5:32:c9:9b:46:
                    a3:9f:ab:e5:7e:f1:04:fd:9c:05:29:b2:43:b5:6f:
                    a2:94:4d:bb:51:2c:1e:0f:68:ad:aa:5f:67:44:d7:
                    90:73:fa:ad:bc:f6:3f:54:9f:06:e2:a7:7c:00:75:
                    53:e7:e5:51:39:9f:13:3a:ca:42:21:d6:82:ff:76:
                    96:f5:aa:85:62:ab:38:0e:db:81:80:44:df:ed:bd:
                    5f:47:3f:8a:b9:b1:b1:67:58:dd:15:bb:ed:63:25:
                    40:be:43:7d:16:9f:06:c2:85:d2:04:7e:d7:38:60:
                    d4:47:09:f8:25:2b:c4:5f:4c:89:06:25:89:47:2f:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:36:4B:5C:3B:3A:40:06:76:0C:E0:62:A8:76:3D:8E:49:62:4F:70
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:0f:67:0c:2c:de:e3:db:7b:d1:69:15:5e:25:cf:e6:c1:
         29:31:93:bf:6c:c4:a1:41:df:7f:d2:c3:da:26:a7:07:43:43:
         b1:c6:8b:59:7e:05:c9:57:62:96:27:da:b4:0b:77:0f:63:ef:
         90:6e:3f:c5:07:a4:cb:59:9d:cd:c1:5d:12:fb:ed:c2:57:2f:
         e8:8a:ba:0d:86:c1:d5:83:fc:40:d5:0c:ad:a9:6e:e6:3e:01:
         be:33:50:26:e9:e1:0d:e2:76:44:9d:b2:0d:cd:24:6f:e2:15:
         91:b9:dd:fc:32:19:01:4f:b5:92:ca:4b:46:33:e2:0b:b6:47:
         3d:bf:35:60:f0:ce:d5:4e:52:0b:18:1e:93:7e:d8:84:54:27:
         c4:23:5c:5d:ea:10:b8:64:29:98:7b:df:04:dc:b4:7c:61:d5:
         4e:1c:c6:57:a4:ac:2d:42:d2:49:6f:2b:49:88:da:11:97:a5:
         32:58:17:b0:3e:13:d4:82:b9:1d:29:9e:f1:96:be:a0:74:21:
         ba:16:79:e7:df:c3:40:d9:81:d9:33:23:b2:70:c2:8b:ab:38:
         22:d7:ac:52:85:c7:97:13:fe:70:52:92:62:71:d9:e9:18:80:
         da:a7:79:b0:9a:a6:b4:60:5f:51:dc:4f:10:cd:f4:99:7f:08:
         11:a2:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:26 2026 by rpki-client