This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File:                     PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier:          Nl/yVdDXnkwh2T7GhZ6kYFC8BI2J1WWX4rOgweIZ93I=
Subject key identifier:   F5:B8:99:05:7C:23:81:F3:D7:78:19:D7:DA:FD:86:AA:F8:72:3F:97
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer:       /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial:       081A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number:          0813
Signing time:             Sat 24 Jan 2026 20:22:08 +0000
Manifest this update:     Sat 24 Jan 2026 20:22:08 +0000
Manifest next update:     Sat 31 Jan 2026 20:22:08 +0000
Files and hashes:         1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: AKhqoqFw/ibFmxnIrmvIFYeFFZAhXTTLdjr6XfTtOLE=)
                          2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 5irZrEFk8FHbNW4pjJl+pAv8i1MZscE1joryry7BH0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
                          rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
        Validity
            Not Before: Jan 24 20:22:08 2026 GMT
            Not After : Jan 31 20:22:08 2026 GMT
        Subject: CN=697529f0-303b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:3f:31:03:61:1d:7d:97:f6:84:ca:51:d8:
                    49:35:6b:1a:cd:0a:98:b7:ae:e2:45:93:6f:5e:09:
                    12:0e:a8:0d:49:78:01:31:61:2e:0a:57:2b:d7:fb:
                    58:15:f6:62:4b:e0:9c:cd:58:52:a5:95:ca:44:c4:
                    e3:4a:30:32:37:a1:d3:3c:b8:fe:2f:82:d3:22:0e:
                    0f:64:8e:2b:9d:f5:2a:59:f6:a0:d8:07:20:49:c9:
                    2a:02:7f:0f:2e:d3:26:24:af:0a:46:c0:4d:fb:27:
                    45:29:06:54:0d:3a:ef:01:ec:51:36:57:5c:5d:8c:
                    a0:6d:f4:8f:5f:1c:fb:5b:2e:6a:fe:11:59:df:79:
                    70:d8:35:77:eb:e6:52:9a:81:fb:a3:51:b9:e7:bb:
                    83:d5:84:af:3c:13:bb:d4:88:08:68:c3:2e:37:93:
                    21:68:80:6b:4b:a0:1f:9b:d6:1e:a3:2b:f3:5b:8b:
                    2c:74:e1:60:b6:c3:a5:70:48:8e:71:fa:b0:57:9d:
                    1b:82:05:53:fe:e8:be:f0:b5:d3:3b:42:02:db:79:
                    ba:13:a5:85:32:0a:6e:00:62:d5:3f:e5:e1:82:76:
                    76:59:38:e1:47:93:d8:69:0c:02:20:a1:07:38:97:
                    bb:4f:72:7b:da:f0:e2:a8:be:5d:98:fd:69:f2:de:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B8:99:05:7C:23:81:F3:D7:78:19:D7:DA:FD:86:AA:F8:72:3F:97
            X509v3 Authority Key Identifier:
                keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:22:3d:69:2a:15:fb:4e:67:cd:ca:31:f0:a9:60:83:b1:a8:
         a8:fb:63:73:a7:ac:63:3d:9c:6f:aa:db:de:d6:07:5d:1f:43:
         61:a0:9f:3a:ab:79:b9:ae:6d:ce:31:63:e3:6c:4b:ff:e2:21:
         49:f5:7e:7d:77:d4:06:e2:b3:c2:dc:af:54:36:e3:a6:08:78:
         ff:16:1b:55:79:8b:7a:33:2e:c1:fd:1b:af:da:ea:fb:59:a6:
         bd:c3:87:09:46:56:7f:5c:bb:bd:16:98:60:95:4f:b6:c6:eb:
         15:08:fc:a5:68:9e:8c:99:7f:0b:85:4e:84:b0:1a:b0:12:2d:
         03:46:a1:ac:e0:88:90:b5:01:8c:d7:f8:65:b9:49:7b:be:e2:
         8d:92:5c:a6:eb:8f:8c:7b:fa:5c:92:5a:5a:4e:f0:0b:46:9a:
         23:c7:99:dc:c7:9a:0d:75:d7:97:7b:47:91:db:26:d6:1d:7e:
         33:51:f3:e2:bd:e3:c9:b0:73:98:00:5a:61:86:62:77:45:f6:
         f9:1a:8b:2e:cb:51:1e:fd:15:ef:97:f0:74:28:e8:c4:43:7e:
         f5:76:bd:15:02:07:c1:fe:d5:6d:f9:87:79:4f:60:2a:03:da:
         80:45:b0:95:25:b9:8e:83:6f:e6:b5:07:8c:e8:1d:a4:c6:59:
         65:2d:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:36 2026 by rpki-client