This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File:                     7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier:          U0OotC5z25huDiNeLVSs80BI3/JTpZ2KThMQ1NWk7V4=
Subject key identifier:   A5:9A:43:F3:DE:9F:01:1D:3B:3A:31:8C:79:B7:B2:4F:BE:10:69:82
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       081E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number:          0818
Signing time:             Sat 24 Jan 2026 20:20:10 +0000
Manifest this update:     Sat 24 Jan 2026 20:20:10 +0000
Manifest next update:     Sat 31 Jan 2026 20:20:10 +0000
Files and hashes:         1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: 7kgouiaNjZ5UjiW3Qt3NqOpHLN4k8mN/D19Vi7B67BM=)
                          2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: a2mvDw9+17HnzgD52FVNiOdxSzmsbcWIVBVCcOw0u9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: Jan 24 20:20:10 2026 GMT
            Not After : Jan 31 20:20:10 2026 GMT
        Subject: CN=6975297a-b6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:ba:9c:54:98:e0:67:1e:a1:22:bc:d1:da:
                    cb:e1:ab:ab:dc:3a:37:76:5c:c7:43:93:a4:71:f9:
                    82:fe:ee:a3:ea:42:43:e0:8d:72:1a:7b:81:03:cc:
                    74:4b:21:16:67:9c:28:95:6d:dd:eb:64:f0:f1:dc:
                    aa:d8:76:1e:6f:82:e8:54:67:02:f0:38:28:5d:83:
                    d3:2c:cf:1b:41:79:3d:15:ca:7f:56:a8:54:81:b2:
                    47:17:38:d1:64:73:ab:72:a1:a0:35:7b:57:0f:b9:
                    0a:8f:2e:31:38:f1:76:d9:38:03:e2:0f:05:33:8c:
                    00:f7:3d:6f:02:d4:46:d2:e1:c1:6b:05:fd:a5:67:
                    38:59:00:2c:92:4f:28:6e:9e:cd:35:b2:2a:08:23:
                    d1:a0:54:ac:d6:08:2d:84:69:75:41:f4:35:d3:25:
                    bd:a2:ae:61:19:e4:02:a4:46:0e:8c:09:4e:65:20:
                    a7:9e:47:e2:85:f7:9a:1a:62:9c:96:61:64:0c:18:
                    d9:ab:5e:97:e0:01:11:28:3f:a9:8f:e3:aa:4e:e5:
                    75:d8:6f:f1:fd:07:74:9c:9a:11:8c:34:8b:38:3f:
                    67:0f:b6:5b:f2:8c:47:41:fe:84:bb:25:24:65:c9:
                    f0:4f:18:ca:c3:5b:4d:89:6e:d6:72:c5:4d:50:71:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9A:43:F3:DE:9F:01:1D:3B:3A:31:8C:79:B7:B2:4F:BE:10:69:82
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:61:a3:b9:be:55:fb:33:f6:b5:9d:a7:b7:27:ab:30:67:
         b6:47:a2:84:49:38:0b:c4:ab:a6:5e:69:70:07:d6:cc:dd:9f:
         cf:c7:c8:3a:f2:b3:b0:d7:ee:06:65:d3:cd:4d:0f:6f:ae:d8:
         4e:08:f5:b1:95:07:08:f2:a4:6c:01:14:05:0d:1d:c1:ca:42:
         b0:a2:6a:1f:2b:b8:5e:1e:db:a2:54:65:ab:03:41:ed:d9:e9:
         73:55:64:c9:bf:8a:27:57:bc:61:0b:a6:30:aa:c2:48:8a:80:
         d3:2f:ed:a7:04:24:94:a2:38:f3:f8:c9:ad:50:a9:8d:cf:a3:
         e8:02:9f:fc:fb:c9:6e:16:23:10:d4:f2:60:86:62:b8:a8:89:
         f7:c6:7c:87:0b:f3:92:b9:a5:da:0d:cf:85:91:17:0f:e2:46:
         7e:9a:48:73:fe:bf:bb:28:a7:d3:dc:92:fd:4a:55:0a:bc:a3:
         d0:a3:2a:77:82:a9:42:a3:d0:ce:52:b4:28:04:26:b6:c3:b4:
         60:de:05:c5:c0:6a:8a:ac:1a:5f:df:de:f9:cf:ca:6c:4d:ca:
         86:7d:fe:bc:fd:7f:7a:de:0c:4c:06:de:a7:6d:38:18:2e:d5:
         cb:08:d5:f8:ff:64:31:d1:a4:09:22:bf:51:00:e3:91:f1:a1:
         ab:44:f9:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBDRDMxMTAvBgNVBAUTKEVERjcyQzVDQjg1MkIyMkMyRjBGNTI1MjExMjI4RDQ1
MDdBM0Y5QzIwHhcNMjYwMTI0MjAyMDEwWhcNMjYwMTMxMjAyMDEwWjAYMRYwFAYD
VQQDDA02OTc1Mjk3YS1iNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv1K6nFSY4GceoSK80drL4aur3Do3dlzHQ5OkcfmC/u6j6kJD4I1yGnuBA8x0
SyEWZ5wolW3d62Tw8dyq2HYeb4LoVGcC8DgoXYPTLM8bQXk9Fcp/VqhUgbJHFzjR
ZHOrcqGgNXtXD7kKjy4xOPF22TgD4g8FM4wA9z1vAtRG0uHBawX9pWc4WQAskk8o
bp7NNbIqCCPRoFSs1ggthGl1QfQ10yW9oq5hGeQCpEYOjAlOZSCnnkfihfeaGmKc
lmFkDBjZq16X4AERKD+pj+OqTuV12G/x/Qd0nJoRjDSLOD9nD7Zb8oxHQf6EuyUk
ZcnwTxjKw1tNiW7WcsVNUHHTLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWaQ/Pe
nwEdOzoxjHm3sk++EGmCMB8GA1UdIwQYMBaAFO33LFy4UrIsLw9SUhEijUUHo/nC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMENEMy85RjkzMERCMjA1
RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Npd3ZEMUpTRVNLTlJRZWot
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmY3NYTGhTc2l3dkQxSlNFU0tOUlFlai1jSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MENEMy85RjkzMERCMjA1RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Np
d3ZEMUpTRVNLTlJRZWotY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHsmGjub5V+zP2tZ2ntyerMGe2R6KESTgLxKumXmlwB9bM3Z/Px8g6
8rOw1+4GZdPNTQ9vrthOCPWxlQcI8qRsARQFDR3BykKwomofK7heHtuiVGWrA0Ht
2elzVWTJv4onV7xhC6YwqsJIioDTL+2nBCSUojjz+MmtUKmNz6PoAp/8+8luFiMQ
1PJghmK4qIn3xnyHC/OSuaXaDc+FkRcP4kZ+mkhz/r+7KKfT3JL9SlUKvKPQoyp3
gqlCo9DOUrQoBCa2w7Rg3gXFwGqKrBpf3975z8psTcqGff68/X963gxMBt6nbTgY
LtXLCNX4/2Qx0aQJIr9RAOOR8aGrRPn+
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:33:30 2026 by rpki-client