This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
File:                     9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json)
Hash identifier:          Z7LadyuwvTbRtgez7+MbfYQmevbevnop1BOsu2bXlhI=
Subject key identifier:   99:4C:BE:39:DA:55:6F:1E:81:0D:2F:9E:DF:6A:29:11:10:FF:7B:78
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0B9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
Manifest number:          0AAF
Signing time:             Sat 24 Jan 2026 19:25:22 +0000
Manifest this update:     Sat 24 Jan 2026 19:25:22 +0000
Manifest next update:     Sat 31 Jan 2026 19:25:22 +0000
Files and hashes:         1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: oscSztgR0rStqECdcQhTJ7yA6IOaISGQFydsCKXPdPM=)
                          2: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=)
                          3: AA872C46B89711F0A8B6AF18C4F9AE02.roa (hash: Bar2gHezA+IiS5icMhlTq3qlc1AiHlmcqsjeQVVL7II=)
                          4: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=)
                          5: 30612F364BE411F09B3BB887C4F9AE02.roa (hash: eklJ7FzTn9mZj0/tgQ82yry1nIlD8nEbavqJJ/O2CPk=)
                          6: 5B8CDC02351211F09D579B64C4F9AE02.roa (hash: 1bAgWcJLlliVR0f1esq/e37v/i+ofAYAVlxnxD5PONo=)
                          7: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=)
                          8: 2B416408E07C11F09FEE3C963A6F56BC.roa (hash: 3hVM6YDjRQ+L48XEzcAmXrkHFTYtAEgUAL1uZ28i6dE=)
                          9: F3425EF0684D11F0B2D5FA37C4F9AE02.roa (hash: oF3hl33YzEnFbXahSGkHrmMKyHDy8b9I47xlkhUgWrc=)
                          10: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=)
                          11: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=)
                          12: 2A4D3504E07C11F09FEE3C963A6F56BC.roa (hash: KpYWmQh/DJ/rbzJSI4L+wz9BMq31Y7mBTfZVzSdGJ/o=)
                          13: 4F7540B64BE311F096B8CE67C4F9AE02.roa (hash: iOPrsP2srkb+vVnfb02IQTWoMc2rYolev95ZwBVT8+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Jan 24 19:25:22 2026 GMT
            Not After : Jan 31 19:25:22 2026 GMT
        Subject: CN=69751ca2-e741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:40:1c:42:1c:3c:21:d2:35:41:64:6e:f9:
                    87:de:5e:94:ff:dd:08:a2:90:12:50:bd:10:25:19:
                    e1:96:81:2b:25:23:83:9c:c2:66:8a:4c:0f:6c:87:
                    fd:00:23:76:bb:22:a2:47:94:21:7a:e5:ab:63:b0:
                    f1:88:90:f7:b1:23:87:5a:46:ca:0e:fa:54:05:82:
                    a3:b7:a1:b7:c5:dc:d2:87:5a:6e:b3:11:ea:70:5d:
                    f2:6b:af:2f:dc:89:d5:0d:26:9f:d3:2e:be:c2:b2:
                    bc:32:03:60:ec:95:98:e7:13:fc:12:c6:b8:33:2e:
                    cf:41:9d:9e:92:45:f3:e9:6e:8d:74:8a:a5:06:b8:
                    46:ca:66:fc:85:e8:4b:04:64:32:12:a6:82:d8:a5:
                    64:c4:24:22:1d:dc:b2:45:21:3b:57:96:36:33:65:
                    7b:bb:39:0c:4c:93:8d:35:be:42:34:19:b2:2a:d2:
                    49:c8:5d:57:a6:4b:37:d2:77:bd:86:98:77:d5:42:
                    63:af:7f:cc:1b:0f:49:a8:d6:15:b5:0f:7b:26:8b:
                    d5:a1:ff:67:18:ca:95:c5:bc:53:77:65:ea:13:f7:
                    1b:31:4b:18:78:20:82:02:16:0f:43:fe:73:00:26:
                    57:ba:bd:46:4c:92:40:a1:0a:87:9c:6f:00:1e:2e:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4C:BE:39:DA:55:6F:1E:81:0D:2F:9E:DF:6A:29:11:10:FF:7B:78
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:77:4d:58:6a:3e:ff:55:ea:69:ad:d7:d8:fe:ff:31:b6:
         31:ee:b0:76:c5:e7:7a:59:26:4c:e7:7e:d8:b8:f5:2b:61:99:
         31:64:b7:2f:97:e6:56:0f:21:43:34:b3:27:f8:0c:29:15:14:
         cd:46:16:71:6b:83:9c:4b:88:05:bc:2c:11:02:52:c8:e4:6e:
         08:c2:e7:dc:81:d5:97:f0:96:5d:d0:ed:d6:9b:e2:00:ea:ef:
         4f:b8:0b:61:f7:2d:a4:93:b1:de:c3:c0:3b:1b:a0:6e:16:f5:
         7c:20:a8:f3:c0:0d:60:3e:29:69:9b:96:02:e9:ad:8a:15:ef:
         b8:d6:41:bf:78:aa:02:84:eb:8c:7e:30:62:6a:78:73:75:c0:
         c6:26:1f:b4:22:b2:8c:64:f6:23:e1:0c:a4:08:ff:10:5c:bb:
         90:c0:1f:13:41:42:6d:3c:0b:8c:7f:be:cc:e6:96:e1:71:6f:
         a7:3a:cc:dc:c4:fc:a0:fa:69:5b:dc:ff:0b:0c:9c:a8:37:d6:
         18:56:37:1c:2a:94:f1:0e:24:0e:63:a9:93:77:33:8b:ca:20:
         64:96:58:0b:7d:c6:f5:87:81:84:17:29:50:89:06:fb:bd:51:
         c4:eb:9c:42:cf:f5:f8:d4:95:be:a9:d8:50:0c:92:1e:c1:e4:
         57:ee:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:30:31 2026 by rpki-client