This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
File:                     paap6sGs925VLHi914unT-3dP_k.mft (raw, json)
Hash identifier:          so999nbHlgHI4rAohbm6GGID2i9lrNUEossB4MAalSo=
Subject key identifier:   EF:4F:41:59:05:DE:C9:42:EA:0F:8C:08:BA:A8:0F:8F:CE:20:5C:34
Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
Certificate issuer:       /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
Certificate serial:       2C31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
Manifest number:          2C20
Signing time:             Sat 24 Jan 2026 15:23:56 +0000
Manifest this update:     Sat 24 Jan 2026 15:23:56 +0000
Manifest next update:     Sat 31 Jan 2026 15:23:56 +0000
Files and hashes:         1: paap6sGs925VLHi914unT-3dP_k.crl (hash: 96HsANcA9rrJHVW7vTzaCLSDqNGiswvIbq2qN/tK7Ro=)
                          2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: R++b1RX/a7NEbUz016JCFWbEE+Lh/qyAEqbc/YB/qKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl
                          rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11313 (0x2c31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
        Validity
            Not Before: Jan 24 15:23:56 2026 GMT
            Not After : Jan 31 15:23:56 2026 GMT
        Subject: CN=6974e40c-4e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:d7:d1:70:6d:60:05:a7:5a:20:3d:c1:ff:
                    32:e2:b3:f6:53:86:9f:f9:c7:28:31:7d:9c:c2:8f:
                    12:d4:9a:85:37:ff:d6:ab:d9:93:68:0b:05:e4:3d:
                    21:fa:58:f4:81:25:bd:d4:42:61:14:7e:e1:1f:6e:
                    a2:2b:25:d5:56:1e:a8:e8:9d:f6:15:5c:bf:9d:05:
                    90:3c:43:f3:a6:97:ce:85:04:f9:30:56:85:7e:76:
                    1e:39:22:9c:7a:34:35:a8:40:05:40:b1:e9:84:ba:
                    6c:e8:2c:7a:3d:5a:5f:e8:77:cb:41:95:3c:8c:bf:
                    a3:78:36:d4:ba:a0:ca:ce:6d:f1:ae:f3:01:b9:2a:
                    ea:63:d0:c6:08:b6:b2:5a:a0:07:71:e3:22:60:b1:
                    ad:71:13:16:66:61:57:80:45:bb:55:48:41:0f:b5:
                    12:e7:2e:66:b1:91:22:2f:e9:5d:00:b2:8a:a3:57:
                    52:5d:9a:95:84:0b:d3:a1:76:15:ca:1d:da:7a:e2:
                    16:3f:04:e4:e4:02:f3:04:40:78:8e:6d:bc:78:fa:
                    f6:0b:9b:84:bf:f3:79:1f:1b:b8:ad:dc:27:52:67:
                    5c:1c:34:eb:71:85:02:6c:66:f4:28:5b:4e:92:7d:
                    50:9d:3a:57:b4:81:d3:2c:80:d6:21:c1:e8:5c:d6:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:41:59:05:DE:C9:42:EA:0F:8C:08:BA:A8:0F:8F:CE:20:5C:34
            X509v3 Authority Key Identifier:
                keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:46:36:2e:e3:d7:24:8b:9e:e2:dc:52:d1:92:94:0c:e3:5b:
         84:c3:d4:72:21:2b:86:35:34:e3:43:ad:6d:e1:18:13:be:bb:
         90:53:b7:9e:dd:c6:35:b7:ac:9c:0d:bf:1c:f6:cd:d8:06:4d:
         00:0d:87:4c:dc:57:82:a3:93:8c:02:48:9e:58:f4:06:bf:e3:
         c9:d2:71:94:38:4b:50:12:e9:a8:08:6e:f2:f8:5b:93:c9:06:
         6d:72:44:cb:33:8b:74:33:2d:8f:0c:1d:e9:e3:1c:97:cf:ba:
         f9:a8:63:0c:8a:24:4c:7f:fa:44:b5:ab:b8:4c:70:4a:d8:24:
         e8:0d:18:7b:9f:a5:f0:9e:31:e1:bc:bb:43:6d:d9:26:fb:a3:
         46:f0:ee:44:fe:23:23:68:3d:a6:a8:5b:dd:a5:f0:4c:33:f9:
         09:56:86:ae:fa:03:e4:50:ae:cc:a2:dc:dd:52:48:72:0a:bd:
         24:e0:8a:ad:68:04:61:fa:39:f2:d2:81:7c:d5:f3:a2:ad:03:
         c9:db:90:b1:db:0c:9a:b0:c5:b8:6e:4a:26:04:1e:13:11:33:
         60:44:7f:98:20:15:b4:8a:96:e9:74:02:f9:4b:c2:19:72:4a:
         d8:f2:51:14:d0:a5:98:04:f4:68:50:45:05:d0:40:b8:be:24:
         8d:b2:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:02 2026 by rpki-client