This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
File:                     0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json)
Hash identifier:          /qv+A9n0j+xsLqkjdzXRs43xVdEhXHLjxhqrVlsBjfo=
Subject key identifier:   75:24:58:3F:E4:05:D2:E7:A0:49:F3:3C:FD:D4:DF:A1:E2:A7:FD:52
Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
Certificate issuer:       /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Certificate serial:       07A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
Manifest number:          0798
Signing time:             Sat 24 Jan 2026 20:52:11 +0000
Manifest this update:     Sat 24 Jan 2026 20:52:11 +0000
Manifest next update:     Sat 31 Jan 2026 20:52:11 +0000
Files and hashes:         1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: irzt9nco8liVnG2HeF89v6frcKeeyG4wZSShz2dkJu8=)
                          2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: Mt4tb4VC4mD0Nqt0BXFmGgw6RIVVzrPQVbsXvi8D500=)
                          3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: aL7cUy872ECZEAqqjrWWrqFvQPWZOr2k97DKB+JwHf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl
                          rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1956 (0x7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
        Validity
            Not Before: Jan 24 20:52:11 2026 GMT
            Not After : Jan 31 20:52:11 2026 GMT
        Subject: CN=697530fb-f8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:dd:f5:de:ff:23:39:28:57:be:72:8a:fd:
                    75:90:59:d9:ce:68:4f:76:3a:e3:85:b5:42:9b:64:
                    8c:36:ce:8d:da:73:a8:87:29:40:48:4d:1e:03:d7:
                    ff:2c:2f:9e:e8:98:3c:de:0b:26:f5:99:61:1a:29:
                    5d:da:6e:3b:a5:97:87:3e:5d:4f:5c:7a:85:e2:e6:
                    a4:4b:dc:2f:02:1d:26:fd:62:f1:a3:f4:02:6a:92:
                    4d:5a:c9:31:9c:10:1a:aa:fd:2e:8a:f1:17:86:5f:
                    d3:20:5e:38:f3:58:96:1f:80:e6:2e:d7:8f:c7:ce:
                    63:23:a0:e8:33:5c:e0:04:00:84:4c:1e:9f:1a:23:
                    20:d7:43:08:c0:b6:00:76:8b:1e:b1:30:57:ca:af:
                    e8:9c:68:84:69:10:b7:bd:80:e3:d8:30:12:04:90:
                    81:8f:65:ea:6a:ab:46:e1:2a:52:95:35:02:4b:ce:
                    7c:4e:82:b0:ad:e5:2a:ac:86:11:49:e8:22:68:e0:
                    f7:3c:17:a1:eb:aa:70:da:51:4e:39:f0:7d:73:4a:
                    cc:26:a7:e7:38:2d:10:05:02:18:6d:95:2e:d5:bf:
                    73:df:56:6c:49:41:42:b0:18:44:71:66:17:8a:85:
                    4f:d5:60:7b:63:ef:a9:c3:b5:da:86:d6:c9:b1:9f:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:24:58:3F:E4:05:D2:E7:A0:49:F3:3C:FD:D4:DF:A1:E2:A7:FD:52
            X509v3 Authority Key Identifier:
                keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:e2:b7:a0:38:71:79:33:d6:d4:d1:ea:b5:cf:b6:3c:88:
         b3:fb:3b:51:1f:a9:a7:a3:a4:8c:78:de:99:b3:3b:2b:55:c2:
         04:f1:13:53:e8:3d:e2:88:f5:2b:d8:d1:75:a9:56:da:78:40:
         23:09:3a:05:9f:e3:9e:3d:ae:b6:ec:62:3b:6f:0f:5d:72:4f:
         4d:df:57:c9:6d:31:63:42:f0:f4:92:0f:94:db:8e:55:5f:ef:
         0b:af:9a:d9:17:35:97:52:9a:b4:ab:78:52:7a:f2:b7:a5:ae:
         d2:fc:4d:3a:b9:a0:f2:90:c6:a3:4a:d0:1f:33:ee:96:7c:98:
         90:27:e6:d2:f6:0b:19:7f:af:7b:2c:aa:9f:76:2b:28:cb:cd:
         43:db:4f:0a:79:ab:8a:82:d1:d3:6f:45:9f:b6:91:81:9a:54:
         1e:ad:d2:65:da:a9:d4:e2:cc:aa:51:db:91:2a:e2:7b:69:97:
         4e:d1:39:cb:ca:3c:a3:b2:18:a0:9e:12:ee:f5:d9:a1:12:f0:
         4b:11:a6:5a:64:ce:ef:84:ea:c7:c2:cf:e2:93:ce:b4:57:23:
         bc:a0:a7:86:6e:fa:e4:55:13:15:ec:a6:a0:b1:30:67:b1:c3:
         40:ba:1b:30:18:22:a8:cb:9c:8c:d6:87:51:e7:44:39:a2:ae:
         6c:a7:42:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx
RjcxNjVDREMwHhcNMjYwMTI0MjA1MjExWhcNMjYwMTMxMjA1MjExWjAYMRYwFAYD
VQQDDA02OTc1MzBmYi1mOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnU3d9d7/IzkoV75yiv11kFnZzmhPdjrjhbVCm2SMNs6N2nOohylASE0eA9f/
LC+e6Jg83gsm9ZlhGild2m47pZeHPl1PXHqF4uakS9wvAh0m/WLxo/QCapJNWskx
nBAaqv0uivEXhl/TIF4481iWH4DmLtePx85jI6DoM1zgBACETB6fGiMg10MIwLYA
dosesTBXyq/onGiEaRC3vYDj2DASBJCBj2XqaqtG4SpSlTUCS858ToKwreUqrIYR
SegiaOD3PBeh66pw2lFOOfB9c0rMJqfnOC0QBQIYbZUu1b9z31ZsSUFCsBhEcWYX
ioVP1WB7Y++pw7XahtbJsZ82lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUkWD/k
BdLnoEnzPP3U36Hip/1SMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB
RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODA3Ny85ODBDQThGRTNBRDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFa
Zy1pelhGRjdaUmNmY1dYTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBk6eK3oDhxeTPW1NHqtc+2PIiz+ztRH6mno6SMeN6ZszsrVcIE8RNT
6D3iiPUr2NF1qVbaeEAjCToFn+OePa627GI7bw9dck9N31fJbTFjQvD0kg+U245V
X+8Lr5rZFzWXUpq0q3hSevK3pa7S/E06uaDykMajStAfM+6WfJiQJ+bS9gsZf697
LKqfdisoy81D208KeauKgtHTb0WftpGBmlQerdJl2qnU4syqUduRKuJ7aZdO0TnL
yjyjshignhLu9dmhEvBLEaZaZM7vhOrHws/ik860VyO8oKeGbvrkVRMV7KagsTBn
scNAuhswGCKoy5yM1odR50Q5oq5sp0KB
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:18 2026 by rpki-client