This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File:                     mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier:          DVNhKSZCRL7N9UpMeBChhaqr9a0W0OkmBY88mXMbbq4=
Subject key identifier:   D8:B8:27:40:66:37:04:D0:F9:5A:7F:4C:11:21:61:4C:07:20:F4:8B
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number:          4F
Signing time:             Sun 25 Jan 2026 06:50:07 +0000
Manifest this update:     Sun 25 Jan 2026 06:50:06 +0000
Manifest next update:     Sun 01 Feb 2026 06:50:06 +0000
Files and hashes:         1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: C/Mru6RuzfgzXc9PblKg9rkiqEQy+mHVHm1OrgJ82lw=)
                          2: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: 3apnTYZUuA7N2cNukLCN12qI42VG+eaxv1WLiU5/scg=)
                          3: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: 7etvoXAGwyYEYpaGBfDwDld33O7lKbrVTucALnOeq/Y=)
                          4: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: jJXT7Vo6Xui3neNH5mn3y9zT7Dwin+uruwOajavMv80=)
                          5: 1C2DE6A6D4A311F08D323E54C4F9AE02.roa (hash: dqDrrtigHPKnUREo4Hovs3ow0vpivipCVp2qxyLqYJ4=)
                          6: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: xTLF64HiFnl4Ua3DqFhX3rQXHABClSMIShrBUqKCQDg=)
                          7: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: 6d5n7M8pSFp7P26pMS5zNtebxU08KLIm0l23wm1+nS8=)
                          8: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: AH7IPsSFFEPRn+zV12YskMymoNAR9h6j8zf44NNZ4tM=)
                          9: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: MIjlw2AczUDY3cA2K0ShhfW4ijFo/ptiKrc7rq/4vDM=)
                          10: 576F51B8C91911F0AB974C6DC4F9AE02.roa (hash: IB2q7pBY7tiWYmmMufMjNcggqg1Dv4TLNZ3XaMRxv3I=)
                          11: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: ckqlJh190Z78TnMGe9Si/aLYThzKpCI7qGyR/k/KtyY=)
                          12: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: A0BIKZWnnoXyCWoiUzYWJD9AJntPcwDJG9Ku+oPkh0Q=)
                          13: B4B21A80C92411F099228126C4F9AE02.roa (hash: 8u4dud3avbhQgE5CopYuEjp9f5QzWDBwOaQ9kBXQeOY=)
                          14: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: ZT5u+LiwEwXLyRnjvq/L61qw+MNZgpjnIsJ8w3vDTcA=)
                          15: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: yoL3EzYooRWeprtTC3zU7L7b1cT/XHQ/zGKxRBGUmLI=)
                          16: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: j1lbvHYehq+WgCpoOKiItpNlLY8XBd6+Fc/mlE4o5Wc=)
                          17: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: +Lyza8h2/Z4uXs2d+lFs1I7p0cxofH7YS5tzMbCiLyc=)
                          18: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (hash: IVcqyVphDBj8NjJzKEcLhgljJS7gLCls1Em+kdKrq9M=)
                          19: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: DtE4Gub6HXNOtAF1R9QWTavpwFvcacPl8V38z7ZHdcg=)
                          20: 336F66ECD4C011F0A4EAFB34C4F9AE02.roa (hash: u5c87bpH/v0n77/1kuGY2HxPC8dYBbIrlXqxgYtZaD8=)
                          21: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: EYJuj7Ys2yn/Y3ogPFCOzhRA1x4eMfO+KUjbme3Rfpk=)
                          22: B2815168C92411F0B6E88126C4F9AE02.roa (hash: +uKZk71p6xoGxSkkGPJRZ/3fiUO3ZyZAyRc1mBvILaY=)
                          23: 9F9D4E9EC91A11F08745C673C4F9AE02.roa (hash: yDVSc2+F6J/qBiAoUaI9aYB4F42z0AMiAWD72TYkXo8=)
                          24: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: 4PFl+djOCvc8xGyc3NA3mOXdB4cbVSoZGtyLfcbiQvA=)
                          25: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: C9zxlmppcqgvN9kMFuhGoxlegcOeqD3KVMdKppsyxnI=)
                          26: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (hash: WydeX09AXJK7FOnKYbDAPgu5bW4zCgrdUc+W31M2Hbs=)
                          27: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (hash: PFk1mSnoqV2B8nNi8/2CP9saQFwyA5WBQtUNoxuoSj0=)
                          28: B1E31BF6C92411F087908126C4F9AE02.roa (hash: Yz3B628v+Zuwc3iSweZDybyNZNxIugyujdSDXvZHFHU=)
                          29: 56F1C6BCC91911F08B394C6DC4F9AE02.roa (hash: sq2FH3KxuzVCERwQzUbxosanTt/57fQSY7WjnEZYE9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Jan 25 06:50:06 2026 GMT
            Not After : Feb  1 06:50:06 2026 GMT
        Subject: CN=6975bd1f-153f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:ca:2f:23:bf:44:24:fd:c9:51:38:84:09:
                    65:f4:4b:14:b8:f0:52:d0:7c:99:fe:22:ae:d4:3a:
                    53:36:63:ae:75:76:a2:49:b4:8d:20:3f:4f:4d:f4:
                    a6:9b:92:1d:fa:9b:14:8e:75:5b:41:3a:cb:14:b4:
                    67:99:e4:a3:c1:4f:ba:5c:5a:0f:cf:84:f5:91:5a:
                    ce:71:8a:01:e9:6c:6d:50:61:56:d0:09:f7:13:82:
                    7a:4e:cc:42:9b:5f:a5:17:65:82:05:b7:54:8b:12:
                    36:26:29:42:2e:6c:2c:90:ae:22:08:5f:ba:da:4b:
                    e4:76:76:fa:c8:ca:91:c3:59:1f:c4:c0:e8:98:2f:
                    bf:02:2c:34:24:5d:4e:20:87:f6:5c:7f:dc:03:d9:
                    19:39:cb:49:d7:c4:40:f7:c7:94:03:03:5f:4a:d4:
                    2d:c6:1f:f6:25:c3:87:7e:da:ed:75:26:ba:8d:66:
                    25:f8:ed:43:58:c0:99:33:44:e5:07:78:54:fc:13:
                    b4:da:e8:1f:99:98:65:c6:91:27:b6:5c:75:b5:98:
                    3f:b4:e4:1b:c8:5c:80:76:9c:3b:4c:02:2d:cc:0d:
                    ff:73:ba:b7:fe:1c:8f:5a:78:19:49:e9:a6:13:ea:
                    7f:67:68:5c:21:cf:ee:2c:ac:55:b9:57:a1:2d:70:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B8:27:40:66:37:04:D0:F9:5A:7F:4C:11:21:61:4C:07:20:F4:8B
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:7c:99:69:1c:b9:f2:ff:1f:b4:77:8b:03:bd:78:6e:5e:
         78:14:e2:0b:0e:0f:97:3a:21:b4:fa:15:a1:fe:0b:e8:aa:d7:
         f0:2e:4c:81:f3:de:d7:64:93:86:f1:cd:9a:3d:72:f3:69:11:
         8e:d1:68:2c:c1:0c:2c:c5:05:63:7d:bf:c5:18:be:80:69:b2:
         75:d7:f5:aa:6f:a0:08:91:42:ef:32:5f:1d:8f:4b:e2:87:7e:
         92:7a:01:ce:16:21:6d:29:fd:1a:57:87:ae:7f:ef:4e:55:46:
         27:f3:30:f7:4d:8c:84:b8:e9:c7:e0:60:26:b4:ca:db:2a:90:
         3a:67:0f:45:8b:23:83:46:3d:09:58:42:05:ec:bf:e1:65:40:
         e2:51:71:d3:f8:e3:9e:67:59:04:4e:72:cb:12:3e:77:05:55:
         73:85:b1:c1:92:f0:a0:93:ba:3d:b7:10:5a:27:d9:7e:64:54:
         46:d3:d0:00:d5:2f:4c:46:ee:43:7a:de:91:ac:8d:c0:fc:c4:
         f2:b6:7e:f6:54:34:c7:4d:0d:24:53:24:4a:8f:95:a4:3f:7d:
         23:f7:7b:31:2a:04:6b:39:8d:48:89:03:2d:73:1d:0f:40:46:
         eb:fd:56:4b:21:17:8b:95:89:86:4e:6a:ff:d9:fd:e6:ce:13:
         15:12:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:29:20 2026 by rpki-client