This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File:                     47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier:          3BPkIXTQD2lmu4CrlfAqQynGgs7sa6fOoTQLWAoVvuk=
Subject key identifier:   BB:0B:69:04:B2:A9:EE:EB:2E:8A:0C:4E:CF:C5:94:77:67:37:0E:6D
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       083E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number:          081E
Signing time:             Sat 24 Jan 2026 20:23:37 +0000
Manifest this update:     Sat 24 Jan 2026 20:23:37 +0000
Manifest next update:     Sat 31 Jan 2026 20:23:37 +0000
Files and hashes:         1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: 2x4SNloXvHQ3kRutg5lcf8PujL3F01hqSaokvsnG974=)
                          2: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: zJGjUrnbSMk5V656YwH2KxI3KNelMEHiCvbKNGT1UK4=)
                          3: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: Lh/nNMkp7Dakh/8h/m1dLHOHw1NElOjI06C5dsAO+U4=)
                          4: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: fqek4HIFKQos10FMKyssIhpsKBMQKoPNRTSA7RRJGEE=)
                          5: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: U/kq+h+lV+nolxXa+CHHccowZxB8ay+JH6QUwnSK9dA=)
                          6: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: BoJyjxigFLGu5YRz5/vCzJ9ICgVocwtUOFiWeZEgPks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110 (0x83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Jan 24 20:23:37 2026 GMT
            Not After : Jan 31 20:23:37 2026 GMT
        Subject: CN=69752a49-677e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:5c:4d:13:ad:00:5a:c5:5d:6e:8f:1c:be:
                    04:e3:d9:7e:d2:5d:7e:76:77:81:d1:92:01:3d:ed:
                    e0:50:e2:5b:d2:09:4f:de:80:17:f5:6f:65:06:3a:
                    ef:8b:fd:52:18:28:a5:4d:1c:d1:7e:d1:29:bc:00:
                    f6:c7:e6:00:80:09:4b:81:f3:0a:26:cd:54:64:86:
                    c0:24:95:63:3a:ab:3f:ff:a8:0e:dc:87:9c:9c:1e:
                    29:c3:79:25:1e:44:8c:2b:e7:1b:11:d6:24:96:82:
                    d8:06:ed:98:8e:5b:ff:73:c7:39:9a:70:75:ab:ce:
                    66:77:dc:5c:a2:84:db:6f:b8:d8:ce:5c:ff:9e:2d:
                    4b:33:cf:80:7c:29:43:98:8a:32:04:07:51:9c:64:
                    cb:2a:c5:cf:52:66:a9:4a:86:27:9d:d2:eb:22:d1:
                    7a:45:12:3f:4c:6d:05:c4:4d:d7:12:2e:44:1e:da:
                    75:76:71:66:c8:99:52:55:95:6f:c3:98:84:e1:20:
                    5e:ec:4c:da:27:cd:a7:bf:74:ce:5c:4f:1b:2f:eb:
                    17:3f:39:a6:f4:ff:ec:8b:d7:30:b9:55:ef:ba:b9:
                    06:98:14:53:72:e7:41:89:50:96:77:5d:19:99:4f:
                    75:43:0f:80:ff:b4:cf:e9:a5:35:d8:1f:9b:d4:b7:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0B:69:04:B2:A9:EE:EB:2E:8A:0C:4E:CF:C5:94:77:67:37:0E:6D
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:5b:f5:07:49:c0:66:e8:de:af:76:ab:0d:c9:c0:25:6b:
         ac:90:df:fa:a7:d3:75:24:93:98:9d:92:2f:2f:4c:4d:3f:9f:
         00:c6:1e:ca:b8:89:c3:3b:19:e7:a8:93:70:32:9c:03:a8:fa:
         80:81:02:af:15:54:4d:ec:51:06:ca:ab:b3:9a:18:7d:e0:f6:
         e3:a8:df:f1:bf:75:b1:f0:a1:87:b8:57:46:15:8a:8a:0d:e4:
         9c:6b:27:ae:14:87:f3:94:45:d8:9d:3c:5a:a9:0b:44:8d:a8:
         77:11:26:50:37:27:b5:8b:68:f8:f3:cd:c1:3c:d2:ee:7b:b9:
         4d:f3:d5:12:be:7f:4d:78:29:63:9d:8a:f9:e9:8b:86:62:ee:
         c1:da:55:d4:6b:b4:b4:09:29:27:1b:a7:57:95:56:46:6d:df:
         73:95:ea:88:a5:f6:bd:5f:6a:7e:3c:23:ea:af:d0:4d:f4:70:
         e6:8a:a6:13:dc:74:e5:5b:e0:fb:94:ed:da:b6:9c:25:65:68:
         95:4d:d0:2e:c8:0c:13:89:26:55:c7:27:16:df:be:36:21:70:
         16:9b:da:4a:6e:71:d4:ff:49:d2:39:38:b5:99:28:ae:c4:50:
         f7:2c:3f:3f:cb:11:73:03:97:d4:34:95:38:b9:7d:6b:54:f1:
         09:99:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:34:05 2026 by rpki-client