This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File:                     N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier:          k1fTaSMjNBqNp5aG2yJITECJ/pkv0WRLb7Ac6Ggjd+w=
Subject key identifier:   F9:38:4D:80:81:9A:5D:9A:D5:FC:FC:01:66:07:14:17:9E:3A:66:5B
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       05C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number:          05AD
Signing time:             Sat 24 Jan 2026 22:25:30 +0000
Manifest this update:     Sat 24 Jan 2026 22:25:29 +0000
Manifest next update:     Sat 31 Jan 2026 22:25:29 +0000
Files and hashes:         1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: T1NsFgDzAibzHKs0V+BonoIbZ5Ylyr0EBkA3bKts+mU=)
                          2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: 68fiXxDRInABMZSnArOz5po2YH5/5mLBsvEHG5ANoNk=)
                          3: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: bqDWaQrEnfW4Yr6xAJ8NbzXfe/Eoz2cTSijNep764D8=)
                          4: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: ZIQc9K7qsEFy9TotgtpdHjpKJ2lZutFq7FE8iTx18Nc=)
                          5: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: ZIpPhxn3ZcCbFE5Pdx2VemD1MQNZXD0fX/y2N95QY8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Jan 24 22:25:29 2026 GMT
            Not After : Jan 31 22:25:29 2026 GMT
        Subject: CN=697546d9-4893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:3c:ec:4f:36:a0:a9:70:5c:89:96:9d:0c:
                    44:d3:da:79:7a:4f:3e:5a:88:83:76:e5:7b:54:d2:
                    75:14:d3:e8:9f:ae:a3:2f:1c:1a:d3:cf:bf:c9:ba:
                    69:4d:85:c8:c9:81:c4:e2:e5:62:aa:19:c3:ac:2a:
                    ef:ac:4c:25:21:11:56:47:10:02:63:60:6f:b1:0e:
                    d9:f7:d1:04:e1:b6:72:28:67:45:0c:1c:c2:2a:84:
                    c3:eb:ac:4a:61:1f:88:39:81:40:fa:7b:db:d0:15:
                    dc:2a:9b:a5:1b:c1:48:91:94:4c:47:41:7a:a0:85:
                    25:b7:37:cc:83:7d:74:d1:e9:07:94:43:56:f1:ef:
                    02:71:0d:42:30:5e:ed:24:34:b2:6d:13:24:a8:8e:
                    c1:03:8e:8c:04:33:1f:ab:d7:67:41:ad:0b:94:02:
                    39:cd:01:7f:6d:24:7c:f2:48:5b:90:ea:31:b5:58:
                    7f:26:f1:f2:c2:43:c7:f4:ac:5f:cb:d1:a0:0c:af:
                    e2:51:69:f7:26:d4:f1:f4:75:48:13:ba:1b:d6:0c:
                    73:a2:57:37:28:61:ca:d1:58:02:28:86:be:fe:74:
                    3f:70:78:7e:2e:d6:9e:ed:d9:04:f7:a4:1e:9b:3e:
                    95:9e:61:6e:b4:b4:c6:85:72:82:3b:1f:4b:21:d2:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:38:4D:80:81:9A:5D:9A:D5:FC:FC:01:66:07:14:17:9E:3A:66:5B
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:56:fc:c9:25:1c:f2:68:a0:71:b4:95:c0:ce:45:34:33:1e:
         83:5d:ad:99:99:02:79:33:f0:01:5e:d0:48:3c:31:3d:50:2d:
         f1:31:7b:55:e9:76:bd:5f:b2:f0:ba:6c:e1:bb:da:fd:ae:f9:
         c4:d0:63:cc:40:eb:5c:a9:f1:89:26:63:57:ee:be:f1:e2:98:
         33:fd:68:a2:5d:8b:68:4f:c6:0b:07:58:f2:c7:5c:88:ea:3d:
         25:5c:37:6d:17:4a:59:72:a7:fb:94:a0:40:5a:17:ae:2a:96:
         89:38:81:62:1e:95:31:05:03:92:25:6a:68:09:c7:1b:62:29:
         c8:f4:81:ff:a3:bd:3c:23:b1:f4:11:00:87:24:f9:85:d5:f8:
         78:fe:63:d0:3a:60:ec:22:79:3c:3e:8a:f3:71:76:d4:f6:2f:
         73:8a:b1:15:06:c1:c7:94:c9:a1:46:ad:dc:94:93:ea:fd:7a:
         9d:70:f2:b9:c8:1b:5e:fa:aa:88:ea:2a:6d:82:7f:42:b0:3d:
         fb:0e:f8:e3:ba:74:0c:ab:ac:5d:29:34:9f:d2:bb:df:86:ad:
         3e:e4:44:22:e9:5c:9e:c6:46:b7:da:dd:33:7e:69:9f:1e:a6:
         a0:a5:a3:76:1f:97:0d:91:b5:50:b8:9e:81:89:d4:47:4c:c2:
         60:07:18:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:45 2026 by rpki-client