This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File:                     4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier:          HHAxjxwasrk/tTdcZCJfTBztP4KMPxuSjRIBmGQBY/A=
Subject key identifier:   6E:99:97:F8:D7:03:5E:B9:78:1E:71:4F:63:BF:75:5C:32:5C:B2:BE
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number:          024E
Signing time:             Sun 25 Jan 2026 01:06:18 +0000
Manifest this update:     Sun 25 Jan 2026 01:06:17 +0000
Manifest next update:     Sun 01 Feb 2026 01:06:17 +0000
Files and hashes:         1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: eKjuXpqwpqnuzl6eMXFd80CYM3ccCHO6VJ8r9nNLLTE=)
                          2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: qDV9QCi5HkxixaBFK8kj0xBTXurODiSoIKzsQFF1+SQ=)
                          3: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: H4ZiNqnOQ9SeXj19JFNgIsK4CCAguZ6MrEtJQSUxrHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Jan 25 01:06:17 2026 GMT
            Not After : Feb  1 01:06:17 2026 GMT
        Subject: CN=69756c89-5c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:07:47:a4:e0:e9:e7:38:2a:4b:48:47:1f:f2:
                    0c:9e:30:4a:ab:d6:54:b3:ca:e2:94:5c:59:0b:06:
                    30:71:84:f1:05:43:10:4c:df:94:72:c2:a2:f3:b2:
                    2a:49:75:26:86:b7:2e:7e:23:71:6e:71:a5:37:6e:
                    4a:ec:1b:60:94:f1:8a:8e:fa:80:d5:8d:3b:2b:0b:
                    3c:89:b5:35:b3:a0:be:f2:cc:c6:ec:08:67:0a:53:
                    6d:60:18:a5:48:7f:60:0a:59:cc:36:43:08:1c:3d:
                    7a:42:c1:3e:20:b1:8c:38:05:b4:6f:e4:b6:5b:80:
                    95:bf:cd:3f:6a:d4:c4:0c:d1:74:8a:8d:95:50:2a:
                    9b:cb:30:14:8f:25:ad:12:4d:9c:d2:dc:6f:56:4b:
                    0f:d6:09:38:23:e6:22:ad:49:ca:a5:f8:36:88:59:
                    0a:f2:65:c5:67:29:14:87:cc:be:1b:f7:a0:c1:66:
                    48:dc:8f:09:d4:d5:17:61:2a:14:83:5a:51:14:3b:
                    40:3d:5b:06:5a:09:3e:b4:14:43:24:31:d1:c1:52:
                    e0:fe:c6:93:f6:d6:ab:a3:2f:aa:f2:5f:84:74:df:
                    b5:12:52:cb:21:6e:cc:25:79:40:c4:46:32:98:da:
                    f0:49:4b:27:8b:0a:cb:60:aa:1c:9f:30:2d:7c:6e:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:97:F8:D7:03:5E:B9:78:1E:71:4F:63:BF:75:5C:32:5C:B2:BE
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f6:25:40:ad:f4:7c:7b:94:af:cc:c1:64:07:9d:9d:76:5f:
         5e:f4:29:02:08:99:37:6a:bd:71:75:3b:33:65:ec:8b:c6:c6:
         0f:f3:08:86:79:f0:aa:cc:89:ea:02:44:8a:6d:33:e0:b8:0f:
         6e:93:d1:aa:e2:bb:40:14:26:de:d4:ae:a9:4f:91:98:78:f8:
         38:b4:e7:28:28:fa:81:6d:eb:c4:ae:b6:cd:52:d9:16:18:14:
         31:2a:2c:07:bd:16:01:17:b0:dc:1b:f1:13:8e:46:e8:dd:2a:
         97:a0:94:d0:b7:f1:f6:69:eb:c0:00:36:26:b2:bd:16:c4:ab:
         63:a2:fd:38:df:65:a4:a1:98:c2:c4:47:9a:cd:2f:51:17:32:
         f0:d2:56:05:a5:ee:56:7a:1f:7f:20:ad:04:27:22:6e:a0:8e:
         19:8f:bd:42:1f:6a:4f:bc:9f:5e:2a:95:46:69:47:a9:0d:04:
         26:ba:40:17:e2:90:dd:75:76:d6:b8:fe:6a:7b:3d:ac:27:3e:
         f0:15:75:59:ba:56:27:6d:06:6c:d4:3f:f1:99:e5:4c:12:61:
         49:df:ac:e0:05:f5:54:e1:b0:7c:43:81:d3:20:bb:32:a7:75:
         21:07:81:f8:f4:52:89:71:cc:ca:cc:fc:8e:c3:ad:06:20:d2:
         82:69:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:47:51 2026 by rpki-client