This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File:                     4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier:          L6hiej/RJZ8PxQPfuAPaDdINeUZrOFLqiJ/c3ORHd84=
Subject key identifier:   B1:55:4A:20:99:0B:9D:0B:E2:60:0F:49:C6:FC:80:CE:2E:22:A0:B2
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer:       /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial:       2247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number:          2226
Signing time:             Sat 24 Jan 2026 15:42:36 +0000
Manifest this update:     Sat 24 Jan 2026 15:42:36 +0000
Manifest next update:     Sat 31 Jan 2026 15:42:36 +0000
Files and hashes:         1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: rr3tkFV1N4UcfRZvGlPFW4mZUFywJUt0wYIVZYySA1Y=)
                          2: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: nu+MmRVMelFZBsdSEFhVpeJliAcHe14e7veTklAJkjc=)
                          3: B72206B4554B11E791BA5861C4F9AE02.roa (hash: Si+Xx28szHe9Iv7W1YtcZoNp90VlP5RP91wUGl6kx/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
                          rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8775 (0x2247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
        Validity
            Not Before: Jan 24 15:42:36 2026 GMT
            Not After : Jan 31 15:42:36 2026 GMT
        Subject: CN=6974e86c-798a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:db:b6:87:05:9a:99:80:9a:e0:60:b0:6e:
                    cd:2d:f8:94:fa:3f:b2:51:8a:6a:43:4e:23:c3:3b:
                    c7:6c:52:b7:d0:61:11:7d:2d:ed:22:d2:5d:0a:54:
                    c3:b7:52:1c:68:b6:d5:51:c9:10:d2:ec:7d:50:c3:
                    71:3a:12:4b:5f:2d:fa:6c:18:bd:2b:d0:26:20:d4:
                    47:9c:67:f9:2b:89:8a:f8:80:59:90:5c:87:97:7a:
                    ab:12:ea:93:8d:97:d0:23:37:1b:58:d4:fe:be:3f:
                    64:5d:41:cf:3e:ab:fd:6f:54:f4:66:0a:b6:cf:58:
                    6f:4d:f3:10:b7:21:dc:80:ab:b4:16:cb:ec:97:dd:
                    71:e0:5f:b7:6b:3e:4b:8e:5e:46:f3:0f:5e:12:09:
                    06:7a:b2:23:0c:33:cb:a3:f4:87:39:0d:50:60:20:
                    da:f0:6b:d9:d0:f7:cd:53:93:ed:97:6f:42:ba:f4:
                    e2:ea:a3:5b:08:6c:eb:04:93:d0:2f:48:c4:28:04:
                    8e:24:59:e9:18:75:49:64:31:b2:48:39:2f:4c:d8:
                    26:f4:95:bc:e6:d9:f5:51:9e:5b:87:b8:c0:69:24:
                    62:06:fc:54:b5:05:0e:59:49:ed:ea:86:0e:65:70:
                    2e:72:4d:63:34:87:eb:51:8b:d7:be:4b:b2:12:54:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:55:4A:20:99:0B:9D:0B:E2:60:0F:49:C6:FC:80:CE:2E:22:A0:B2
            X509v3 Authority Key Identifier:
                keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:35:b4:05:17:7c:f6:05:05:da:22:91:5c:61:45:08:10:66:
         75:6c:c9:a5:01:58:e8:94:fd:6c:f2:98:a6:9d:af:4e:49:30:
         14:71:cc:fa:87:8f:4f:85:c2:85:a4:3d:51:98:41:ff:bb:28:
         90:9d:c3:5e:3f:2d:af:36:c6:6d:e9:50:a8:48:e8:2d:4f:cc:
         eb:42:69:e7:8d:cd:83:c4:ec:b2:c7:76:83:34:e1:01:e1:8b:
         b5:09:81:05:31:9b:a3:04:bc:12:48:38:c6:8d:0b:42:b3:2d:
         dd:4e:53:d6:40:2d:f2:71:5e:39:6c:3c:50:fe:95:66:c1:97:
         20:ca:cb:0a:23:58:a9:4a:0f:e2:78:12:af:28:d1:24:fb:ad:
         2f:25:20:5d:26:80:9c:ec:80:fa:0f:f5:94:28:d7:92:c1:fe:
         fb:59:88:2b:f3:30:87:69:52:c4:f8:bf:81:ac:3c:99:80:04:
         cc:a3:3e:d6:76:2b:4b:fa:ac:53:dd:ff:43:32:0d:3e:92:64:
         c6:39:f8:d7:7a:86:bc:91:b0:a3:f8:29:d3:21:b1:fa:1b:7c:
         98:45:6f:db:a5:28:2f:3d:6e:d0:42:dc:63:63:15:22:22:40:
         a1:38:bc:b1:5d:79:16:d9:11:cc:45:bc:28:b0:b3:e6:ce:0a:
         66:2d:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:09:24 2026 by rpki-client