This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
File:                     PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json)
Hash identifier:          AVIKmfxnX8vXk1OyVYoolvLBm7+srsT3ouCOPQiFmHE=
Subject key identifier:   93:97:61:5B:25:3E:F0:A7:CD:A2:57:6B:0A:92:23:50:B4:B4:B3:5F
Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F
Certificate issuer:       /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
Manifest number:          2E
Signing time:             Sun 25 Jan 2026 06:42:10 +0000
Manifest this update:     Sun 25 Jan 2026 06:42:10 +0000
Manifest next update:     Sun 01 Feb 2026 06:42:10 +0000
Files and hashes:         1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: sADx8JKFac4t5dDm0wfNY7a7LSqPDVpRYt8ObP3e4Ro=)
                          2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: hKmNb8cXZBZYEP/LnSxHf1U104+IEZAgDxNJ3uKpFbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl
                          rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
        Validity
            Not Before: Jan 25 06:42:10 2026 GMT
            Not After : Feb  1 06:42:10 2026 GMT
        Subject: CN=6975bb42-d6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:df:4e:ec:e7:55:a1:20:5c:13:51:e6:ba:
                    ff:fd:42:18:21:f8:fb:49:6e:cb:39:0d:65:1e:df:
                    c5:18:53:cb:1c:0e:a2:0c:5a:25:7a:fb:58:e6:0a:
                    bf:c5:9b:9d:b3:a2:82:f1:17:86:3d:0e:85:bc:09:
                    2e:16:08:83:fe:9b:1b:78:1c:31:54:a7:82:ee:3d:
                    61:94:0c:84:be:9d:4e:e2:fe:63:34:a0:72:fd:f5:
                    a4:e3:26:fe:da:62:e1:6b:ce:0c:08:d9:3c:e6:fc:
                    bc:3c:e3:42:0a:b3:a7:a9:f6:7d:9d:b9:20:d0:65:
                    9a:31:05:76:3d:74:15:88:57:03:f5:99:9b:8e:17:
                    4d:9d:c0:01:c3:f5:43:60:b2:f3:3d:b3:07:34:c2:
                    67:1c:d8:8d:96:f8:7c:f1:ee:ac:8e:48:77:c4:61:
                    b6:3a:18:be:5d:8d:00:d5:1f:72:97:25:ef:b6:55:
                    47:59:12:2d:61:ae:8f:16:3c:67:84:f2:3f:b0:ab:
                    fb:f3:54:6f:37:23:47:bf:66:d7:e5:5f:b8:5d:d8:
                    e4:8a:9d:a3:a4:97:14:5d:47:b1:72:b3:24:f8:1b:
                    97:f3:bf:42:93:0a:a7:36:92:e5:b0:65:9a:2a:09:
                    bc:41:44:9c:83:81:e4:45:8f:a4:af:87:97:79:88:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:97:61:5B:25:3E:F0:A7:CD:A2:57:6B:0A:92:23:50:B4:B4:B3:5F
            X509v3 Authority Key Identifier:
                keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:d7:05:f5:bc:c8:5f:2a:6a:6f:b4:85:58:f2:1f:6d:53:
         6a:53:96:31:ad:a2:50:c6:bf:c5:d6:ef:20:ff:67:70:ed:c9:
         f2:d0:18:0d:cb:bf:56:e3:f1:bd:e3:92:1f:9b:6b:c0:c7:7f:
         86:e0:f8:26:6f:fc:3a:37:c4:03:00:3d:45:c0:e6:fa:ae:fb:
         22:50:31:8a:62:5d:78:b7:31:5e:08:48:07:68:d4:8c:eb:2f:
         fe:18:2a:03:4f:2d:b4:0f:6d:67:2c:4c:f7:4d:40:1a:fc:88:
         93:14:d3:0a:f4:6b:83:33:56:fd:69:82:e8:1a:04:8b:2b:58:
         fb:d5:26:e0:e3:e9:d7:b9:b4:57:66:9a:63:c3:15:3f:a2:d8:
         b0:b2:c5:fb:d3:d1:cd:15:c8:f2:84:ed:f4:32:57:ab:bb:a7:
         e6:13:9a:1e:86:b7:03:eb:16:82:c3:78:c3:fe:52:fd:24:69:
         09:45:c5:93:0c:46:f0:a7:1f:d1:2f:21:9b:46:b7:1e:34:ec:
         65:59:e1:33:c7:d4:ba:89:7b:18:13:ff:25:ae:2d:cb:80:1a:
         b7:b7:78:bb:cd:c0:e2:4b:60:ba:95:d4:1f:1e:83:b1:f1:02:
         9b:7c:ac:26:f6:9e:66:a5:71:98:be:48:28:1e:4a:60:06:0a:
         49:8d:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:17 2026 by rpki-client