This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
File:                     PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json)
Hash identifier:          RKSYSwEWR+T6gAQaW+pXagrFCU+aSb/29kf0CGzWW70=
Subject key identifier:   5B:7F:1D:65:9C:D6:3D:DD:A4:2C:E8:D8:87:02:F3:37:CC:90:81:B3
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Certificate issuer:       /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
Manifest number:          0210
Signing time:             Sun 25 Jan 2026 01:41:59 +0000
Manifest this update:     Sun 25 Jan 2026 01:41:59 +0000
Manifest next update:     Sun 01 Feb 2026 01:41:59 +0000
Files and hashes:         1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: uf6Xxn1uvYIP+onEDiL++GYWhg4KnKqg9aCG76BKwoM=)
                          2: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=)
                          3: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
                          rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
        Validity
            Not Before: Jan 25 01:41:59 2026 GMT
            Not After : Feb  1 01:41:59 2026 GMT
        Subject: CN=697574e7-6adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:f2:74:b7:f0:6b:27:f3:88:0d:1b:78:dd:
                    a1:84:7a:cd:8f:be:7f:16:20:ad:90:bd:7a:d8:27:
                    93:81:0a:60:65:94:e7:25:64:63:b9:9c:24:97:73:
                    47:a9:c4:28:1d:d5:45:07:e3:b4:b5:db:a1:79:63:
                    9f:b3:fe:86:57:dd:e2:4e:53:95:78:27:d1:91:d5:
                    c9:ce:b3:13:8c:3d:5e:0e:c3:62:01:1f:14:ca:85:
                    da:f7:7f:72:41:b0:10:85:0b:61:10:08:5c:1a:66:
                    2d:e0:77:2d:14:61:f0:80:3a:36:0c:79:b7:bf:35:
                    e6:be:31:b2:7a:ab:1f:02:3f:39:a7:a2:78:87:f9:
                    0d:d2:65:c6:ab:d0:81:1d:66:b4:26:0b:f1:bc:f0:
                    cb:b5:f3:8d:46:d7:64:5f:1d:40:1f:52:0f:aa:23:
                    bf:d6:bc:e0:4c:35:cc:1c:fc:d0:58:18:56:a2:ca:
                    db:0e:b1:38:4b:2e:ef:8f:b2:f3:8d:7d:da:e9:04:
                    24:c2:a4:45:ad:db:5e:60:f4:7c:9f:26:d5:a4:c3:
                    d8:2c:f1:05:a7:3e:96:8b:70:ee:95:79:3d:e6:3b:
                    c6:05:f1:de:af:35:30:e5:33:5a:05:f4:51:23:fb:
                    be:d3:f6:f0:c3:f3:49:e1:50:6e:15:50:08:26:c4:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:1D:65:9C:D6:3D:DD:A4:2C:E8:D8:87:02:F3:37:CC:90:81:B3
            X509v3 Authority Key Identifier:
                keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:04:ae:9a:4d:61:ca:93:38:8c:c8:f6:08:0c:3e:42:13:
         3a:6b:65:bc:d3:d5:7f:2a:ac:4d:4b:b1:6a:ad:d6:36:69:3b:
         2e:1e:d7:07:ee:f8:67:e9:4e:62:27:20:8f:dc:32:e4:21:f0:
         02:84:72:d2:aa:74:8a:13:8a:57:97:e9:71:0c:e4:df:02:af:
         2b:31:e7:d9:fd:23:d2:30:1a:0a:e8:72:09:a1:80:14:c9:d5:
         33:b6:98:12:54:bb:88:cf:af:3c:81:55:94:69:5b:85:03:dd:
         63:74:bd:9c:13:0e:b3:4e:4c:c9:f7:05:92:82:c1:6e:54:e9:
         da:c5:28:c1:b4:2e:4a:5a:84:7a:19:34:72:2f:86:5b:ac:f5:
         68:72:a0:ea:59:8a:80:f8:94:26:54:70:88:c4:e5:8f:92:2e:
         c2:a4:c8:51:6d:7e:25:a1:b1:1d:4a:65:e1:d4:b8:f2:ba:29:
         32:42:50:d8:37:69:ee:56:25:b2:b6:fb:ce:8d:e9:d7:2f:02:
         e8:e9:d2:bb:4b:92:07:81:46:eb:3f:d8:ca:a9:14:5f:5e:62:
         88:03:e2:44:63:33:9e:08:fd:04:fa:b4:fe:7e:cf:cb:fb:c8:
         ce:41:ad:a4:0d:65:c7:96:66:52:b4:41:16:65:15:5a:4d:36:
         a6:51:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:35:56 2026 by rpki-client