This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
File:                     ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json)
Hash identifier:          0nQ32nMD3ZLpzR9dGKg85T0mebmtGYYXNTVY/tcobPw=
Subject key identifier:   B3:72:37:C9:72:B9:9A:19:45:F2:C8:BB:9E:ED:B4:B1:CF:B6:1C:3D
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Certificate issuer:       /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial:       06E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
Manifest number:          06B7
Signing time:             Sat 24 Jan 2026 21:47:36 +0000
Manifest this update:     Sat 24 Jan 2026 21:47:35 +0000
Manifest next update:     Sat 31 Jan 2026 21:47:35 +0000
Files and hashes:         1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: ochLMy+hIciRCaWA9qfmsXBMRd2iumCuX8EQTDw9Pi4=)
                          2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: j+BVCzGmHhrmZNWRNyRwqjg6Au56wUjhsrKVbEHpiXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
                          rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
        Validity
            Not Before: Jan 24 21:47:35 2026 GMT
            Not After : Jan 31 21:47:35 2026 GMT
        Subject: CN=69753df8-ca6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:85:48:46:c6:7a:89:5a:17:60:b9:3b:97:
                    8c:a0:97:3a:fb:f7:42:88:19:2d:f9:97:d7:41:fc:
                    d8:80:3a:e3:27:77:8d:be:09:f6:5f:90:ba:74:12:
                    14:73:d9:71:33:47:56:99:e8:fe:75:75:64:7b:59:
                    92:11:6a:42:3f:db:96:13:dd:c6:67:23:a3:76:b9:
                    36:24:37:fa:72:b5:59:dc:6c:38:21:2b:8a:1f:68:
                    f3:0b:96:ae:2a:49:c3:e9:fb:43:80:20:f0:4d:35:
                    da:ab:f4:cd:1c:30:df:e9:8b:7f:1b:f3:63:3e:50:
                    ff:7b:d8:7a:6d:45:3f:b4:08:90:3e:ae:c5:14:ff:
                    65:05:c4:44:bd:c4:ed:da:be:1f:5d:57:da:ed:99:
                    71:b1:30:80:7c:75:4b:eb:fc:1e:c0:1b:2e:f8:d0:
                    98:d2:5a:74:51:b3:be:bd:44:2c:9f:e9:b4:90:4f:
                    dd:3e:82:1a:5e:3f:e9:aa:a2:ba:6a:0e:bf:bf:83:
                    08:7c:36:38:eb:83:93:dc:8d:8b:32:74:7f:44:8f:
                    aa:fb:90:a8:05:e6:cf:3b:a4:9c:19:d0:0f:02:b5:
                    8c:eb:ed:b7:9a:26:da:98:fd:74:7d:a4:dc:aa:ae:
                    15:3f:0c:97:e4:24:21:18:07:7c:a2:8f:00:38:d9:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:72:37:C9:72:B9:9A:19:45:F2:C8:BB:9E:ED:B4:B1:CF:B6:1C:3D
            X509v3 Authority Key Identifier:
                keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:8c:d7:39:60:10:53:cf:c6:40:64:1e:18:f9:43:91:7f:
         1e:f8:73:17:a9:fd:14:05:ea:5e:5f:f3:6c:d5:f2:74:bd:3f:
         86:90:b0:93:8c:70:51:20:1a:5c:69:16:bb:bc:6b:b4:f0:84:
         74:b7:f1:86:3d:94:78:67:cb:89:eb:35:f8:72:44:6f:34:31:
         89:a5:86:9b:85:38:51:33:91:a3:cc:65:93:5d:a4:bc:f9:28:
         73:af:7b:08:b7:4a:4d:ab:31:7d:7b:9a:a7:89:3a:2f:e0:4d:
         e9:e1:00:b6:98:79:75:c8:5f:39:b8:9c:dd:02:3e:4d:1b:9b:
         2f:00:1c:b9:cc:1b:c9:5f:f0:80:6c:e7:f4:a4:76:8d:12:49:
         e2:de:60:8b:72:e6:e1:eb:2a:25:8c:53:30:9a:9a:03:c8:3d:
         45:a7:06:94:39:41:68:13:67:34:12:82:2c:6a:93:d8:67:6a:
         6e:a2:78:a8:46:f9:0a:00:d8:de:1b:6a:48:0a:08:c8:7e:bc:
         ec:85:58:09:b9:e9:a2:52:ba:bf:b8:ac:86:b7:a9:de:23:96:
         5c:a6:01:95:66:d2:0b:ca:ec:55:5d:33:03:56:35:73:da:4b:
         ed:0a:44:c9:64:50:d9:2e:47:6b:76:48:20:05:65:f7:77:ab:
         4e:df:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:01 2026 by rpki-client