This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
File:                     i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json)
Hash identifier:          pmMjDTnnnqvyLCR4aga+hCvNOzgqqiECMRBtHrFjxF4=
Subject key identifier:   BB:5F:23:DA:10:39:67:77:DC:41:FD:4F:B4:38:BA:45:CE:60:08:65
Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B
Certificate issuer:       /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
Certificate serial:       07F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
Manifest number:          07E9
Signing time:             Sat 24 Jan 2026 20:34:07 +0000
Manifest this update:     Sat 24 Jan 2026 20:34:07 +0000
Manifest next update:     Sat 31 Jan 2026 20:34:07 +0000
Files and hashes:         1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: QSp+DoqGDrcPj0qiO/a9QiGz0Cevr81Fc5PwPTgWuAc=)
                          2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: SWfmHsYgLeX6Ajo70XLTCcdA8vnlSbHKd4shqjdVG6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl
                          rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2032 (0x7f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
        Validity
            Not Before: Jan 24 20:34:07 2026 GMT
            Not After : Jan 31 20:34:07 2026 GMT
        Subject: CN=69752cbf-739a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:d1:54:e4:9a:c6:df:8a:54:48:f2:fd:2f:
                    aa:dd:4d:88:32:30:00:20:25:d6:ee:77:0c:69:0c:
                    38:b3:ae:3f:8b:de:78:44:4f:34:e5:ee:48:0d:b1:
                    3a:b8:9f:ea:a4:25:ef:c8:96:50:3e:f7:52:a7:c9:
                    ea:aa:f8:aa:fd:13:06:68:71:4f:20:c5:5c:68:b2:
                    87:43:6a:73:d9:37:bb:0f:ce:8f:b5:42:26:cc:fd:
                    aa:82:ef:ac:dd:b7:c5:ff:2c:a7:ab:ac:ff:e3:74:
                    5a:37:31:c9:98:d0:45:65:bd:d5:96:da:f0:74:04:
                    60:a2:f5:81:26:d3:bc:03:14:ab:41:90:ac:4b:e1:
                    48:55:84:72:ee:b1:ee:87:33:57:84:d8:b7:1d:a6:
                    c3:70:ff:d9:94:c5:b8:fc:ad:5f:de:2e:42:a1:9e:
                    b1:82:f3:5f:0c:16:4e:c3:81:87:c1:56:22:35:91:
                    6a:79:4b:6d:c6:d3:6f:2a:78:a8:b5:0d:7b:c7:dd:
                    97:f2:89:a4:b2:3f:1b:f4:3e:2b:b8:d6:9a:5d:07:
                    25:62:fd:e1:60:63:3f:8a:ee:a3:d1:be:55:49:c5:
                    34:4e:19:7b:64:22:b6:88:f7:12:84:5d:92:10:58:
                    02:2a:52:66:80:94:66:df:44:92:00:41:07:5d:06:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5F:23:DA:10:39:67:77:DC:41:FD:4F:B4:38:BA:45:CE:60:08:65
            X509v3 Authority Key Identifier:
                keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:ff:c8:e7:ab:25:81:4e:82:e1:dc:54:fa:e3:b2:a2:0b:
         15:af:aa:0d:b2:9c:18:00:64:78:ed:de:11:a5:c6:06:83:18:
         d9:b2:37:fc:fa:1c:f3:07:2c:07:4e:a0:a3:12:5b:10:97:17:
         47:52:4e:b1:ee:4c:1f:ef:8a:29:bb:e0:13:1d:c2:f7:3d:38:
         1f:fa:14:c8:38:50:c1:2f:f1:59:9f:47:af:4a:f5:6a:12:96:
         c3:b3:67:66:7a:29:98:3f:03:08:37:d9:0f:58:14:25:2e:93:
         fe:f3:22:5f:5e:86:cd:f4:64:88:34:09:90:26:32:cf:ed:c5:
         ec:c0:66:f6:f6:a3:cc:0e:2a:b8:75:2b:2a:28:94:50:9b:0d:
         23:86:47:ab:10:97:33:d8:ac:52:9f:ed:7c:e6:f9:a4:3f:d0:
         88:58:8d:f2:cd:81:cb:5e:8c:13:ae:a7:86:cc:eb:a0:6d:46:
         ec:2f:de:f0:35:2e:70:6f:b8:3a:3e:5e:c3:0e:19:25:90:b8:
         bf:28:6e:a4:86:d3:b0:22:2a:36:3c:50:6c:26:76:b2:7a:4b:
         1d:cd:dc:c8:36:f8:74:6c:ac:27:03:6f:b7:08:b8:fa:dc:c6:
         a9:ab:69:66:e0:34:b1:12:a0:44:61:41:53:05:29:51:15:6c:
         da:89:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:35:31 2026 by rpki-client