This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
File:                     AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json)
Hash identifier:          EN9fsRGrkO5JkYMHn/sRt74+KfLld1rlOHdGLbvKaEo=
Subject key identifier:   00:03:E4:AE:6B:AC:5C:67:A3:B0:8A:CD:50:59:23:0F:67:28:F8:38
Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
Certificate issuer:       /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
Manifest number:          01F6
Signing time:             Sun 25 Jan 2026 02:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:10 +0000
Manifest next update:     Sun 01 Feb 2026 02:01:10 +0000
Files and hashes:         1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: da8cudS9kLeS5FTUl0Uih1MjNbvKjDShL9EsSwljHtQ=)
                          2: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: Yf3syhODw0cAx33YmQD7J4oKJN2R4/9xKFbcxAFrzEc=)
                          3: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: J/FdYg39XgCJ8nqyyiXOfjFTbprUGYfmqvQJ8jAj03A=)
                          4: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: v8hFecBZJ729gEYkG3Fnm3Jj8x8TqXCpRI+hn3vItOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
                          rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
        Validity
            Not Before: Jan 25 02:01:10 2026 GMT
            Not After : Feb  1 02:01:10 2026 GMT
        Subject: CN=69757966-d7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:19:75:b8:02:f5:49:cc:ec:49:1d:e7:68:
                    5c:8b:0e:2b:05:8b:ca:55:4e:78:f9:a6:9b:53:1c:
                    39:c2:cc:ca:ed:27:c7:ba:1c:7d:bc:b5:dc:df:56:
                    b1:da:43:c5:60:11:01:09:fe:0d:d4:69:7e:9f:b7:
                    de:87:c7:4d:25:35:ad:fc:a1:c9:c0:14:07:1f:4e:
                    63:84:a9:15:62:12:7a:d7:ec:2f:3d:32:60:ae:18:
                    cc:01:08:58:6d:4b:a6:ff:45:d7:7d:ee:a7:ae:74:
                    46:be:d7:b0:9d:10:b1:f8:a2:fe:3a:06:40:a7:5a:
                    7a:d6:2f:90:0c:db:46:da:19:2c:0a:67:62:01:94:
                    d1:bd:62:51:ba:78:4e:49:e2:ed:b0:9b:23:77:82:
                    6f:59:1d:11:e0:4c:9f:4e:1a:f4:ea:75:e3:ab:0b:
                    e1:6d:f0:4b:f3:49:fd:1a:ae:e2:a3:da:1e:01:8b:
                    80:03:21:e1:2a:13:94:4c:7b:ad:db:65:f0:b1:43:
                    b3:bd:c5:75:20:40:d4:10:a3:95:2f:43:31:b0:73:
                    3d:4e:65:d1:17:44:0b:e9:a2:29:7d:4b:a8:78:a9:
                    49:10:08:35:3b:f0:1f:b3:c4:32:2d:fc:95:c1:ce:
                    fa:26:79:eb:42:ed:f6:29:a3:b0:73:00:d8:1b:87:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:03:E4:AE:6B:AC:5C:67:A3:B0:8A:CD:50:59:23:0F:67:28:F8:38
            X509v3 Authority Key Identifier:
                keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:cc:7e:b2:cb:9a:8b:1f:b9:8b:53:b3:51:5c:ad:66:4a:
         f4:12:27:d9:4b:66:de:59:7e:a4:23:33:01:e1:1e:20:11:d0:
         5e:dd:83:e9:36:51:2c:4a:a6:20:42:4a:bd:76:4f:f0:f7:8d:
         76:15:b9:06:d1:e2:3b:57:2e:3a:ce:52:d5:fb:ce:01:09:4f:
         c9:72:38:c0:2e:ca:d7:55:50:4f:65:6e:2d:52:ec:77:90:b6:
         5f:61:ac:ce:81:cb:a7:c2:c0:3b:f9:fe:65:51:b3:c6:66:42:
         3d:af:a0:7b:59:ce:5b:6b:24:23:08:f9:42:14:89:c1:d6:3e:
         52:4a:95:97:50:fc:b3:69:8e:af:27:da:3b:18:ee:0b:e2:a7:
         07:e3:89:3f:b4:48:5a:3e:6a:86:17:47:e9:72:c1:e4:52:a5:
         7c:ac:40:85:eb:92:32:24:42:f4:76:ca:86:ba:ca:02:75:8b:
         fa:49:69:9d:b4:bf:3e:a9:08:46:92:b7:24:4a:17:f5:3e:3b:
         58:f0:a7:3d:5b:b4:65:81:50:81:0d:10:bd:c1:48:7b:26:d7:
         97:8d:42:eb:4a:31:82:f5:7d:09:69:ee:b1:e0:80:fd:11:71:
         55:62:33:13:7c:45:3f:e5:ab:2e:82:e3:0a:67:95:98:84:56:
         2e:ed:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:02:50 2026 by rpki-client