This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File:                     a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier:          qdHImXkM/a3ZBbdU38dsOy/BeCY3ho6SxMDwJKLAFHs=
Subject key identifier:   67:30:FF:31:34:17:CE:80:72:9E:F3:60:43:AD:BE:75:6E:B2:0B:9D
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer:       /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number:          01F1
Signing time:             Sun 25 Jan 2026 01:50:47 +0000
Manifest this update:     Sun 25 Jan 2026 01:50:47 +0000
Manifest next update:     Sun 01 Feb 2026 01:50:47 +0000
Files and hashes:         1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: r7gf6IrlNVSdawsrsjeu3E7jLiqsTtkgnosm8F7/3LY=)
                          2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: RyO6brDZcon28lskHekrQI6icOmLyy8RHSVJF6PV6RM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
                          rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
        Validity
            Not Before: Jan 25 01:50:47 2026 GMT
            Not After : Feb  1 01:50:47 2026 GMT
        Subject: CN=697576f7-9f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:76:7a:e0:64:d3:fb:24:e0:84:5f:84:7d:
                    d6:37:84:64:5a:33:61:95:e4:f6:ea:d0:c8:c7:87:
                    52:1f:76:77:c6:0b:57:62:e4:2a:07:bc:f2:05:24:
                    c2:4f:42:8e:aa:f7:d5:fb:95:3a:d1:c7:61:6d:56:
                    ce:c7:7f:07:79:f7:ec:6e:0e:3d:d0:f8:f4:88:ee:
                    ba:c0:04:55:95:05:c8:23:18:6d:2a:e3:ff:44:44:
                    a9:90:37:63:83:8a:d2:6f:29:9f:06:b9:aa:55:97:
                    60:5e:40:71:ef:d6:ef:88:b5:6c:5a:0e:c0:10:a5:
                    d2:a6:20:a1:5d:79:5e:13:a7:51:aa:ba:2a:3b:ae:
                    96:d1:ab:d9:67:75:d7:cb:70:24:e0:31:e0:d8:00:
                    d4:e6:f7:d1:c8:61:4d:2b:cc:27:5f:5e:b4:26:cd:
                    bc:f3:3b:f9:b4:58:8a:d4:79:5f:aa:89:54:d1:27:
                    c0:19:b7:da:3b:cd:c4:1c:96:01:32:b2:8f:6e:5e:
                    6d:e3:f6:10:d7:a5:30:45:fc:47:92:be:cc:13:4a:
                    63:db:04:2e:69:e9:3a:1f:c1:10:69:c7:db:be:7e:
                    77:43:05:fb:93:30:d0:67:da:4c:93:2e:b8:fc:6c:
                    e9:09:b5:da:23:19:09:2e:1b:bb:63:28:bc:c6:46:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:30:FF:31:34:17:CE:80:72:9E:F3:60:43:AD:BE:75:6E:B2:0B:9D
            X509v3 Authority Key Identifier:
                keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b7:68:52:00:10:8d:74:ac:7c:3e:93:db:45:9f:34:37:1f:
         93:0c:ac:e6:78:75:02:56:8c:5d:42:bc:f4:01:20:3b:c1:08:
         82:8f:47:99:4d:0f:66:9c:8e:ed:ec:87:0c:ac:a3:1f:b8:a6:
         99:9a:69:30:91:2d:28:18:35:de:55:48:57:9c:ab:79:fb:01:
         6d:cf:46:5b:83:2d:72:8d:62:19:e1:45:7a:fa:0c:f3:4f:53:
         8e:6d:5b:c2:ce:5d:74:dd:5b:72:6d:ef:32:3b:4a:e4:c5:b7:
         9b:14:c4:b8:a8:ff:96:10:1d:a9:d8:ac:4f:ed:76:39:c7:d3:
         83:ef:e6:71:33:a9:19:02:63:c2:6c:f0:21:7e:60:85:3c:1a:
         4a:1a:50:ea:d4:17:61:58:42:44:01:56:00:7e:f0:83:e7:a0:
         84:b9:cb:fe:05:6d:17:72:d7:7f:e2:f9:61:6b:eb:7b:72:8b:
         6a:12:a3:dc:76:51:d0:00:59:57:07:cd:32:45:81:4f:9b:83:
         d0:b2:42:52:3a:20:73:e3:f8:a2:03:9d:4d:90:ec:33:53:c6:
         50:45:10:b6:67:52:e1:0a:38:1d:fc:be:58:de:4f:54:21:47:
         2e:fe:8c:4f:fc:ed:3d:89:ec:69:f3:9a:5e:9b:cd:18:16:a8:
         0d:cf:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:06:51 2026 by rpki-client