This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
File:                     8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json)
Hash identifier:          JeBKzQGuUO0+36cxbKUDKgRe7MoycRTWxQP6//F4gyc=
Subject key identifier:   33:E5:70:5C:63:E0:3C:61:1E:4B:91:3C:82:88:2D:32:F9:9A:97:EE
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Certificate issuer:       /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
Manifest number:          02BB
Signing time:             Sun 25 Jan 2026 00:37:56 +0000
Manifest this update:     Sun 25 Jan 2026 00:37:56 +0000
Manifest next update:     Sun 01 Feb 2026 00:37:56 +0000
Files and hashes:         1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: Hrv+wtvumMK+rxMwrizanBcfLZoZQKhWafmciBs9lAs=)
                          2: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: 0QIge9qVdWiYUccpaSzR0ATAUWXdicUdgJEiPZ4i2aA=)
                          3: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: V8FSzYBLLsXQQnxTAHA6zEryNBNGiFUPQmH0Cpz+QYg=)
                          4: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: orsVYI0WPqRRwsJkvK9ISroiZMKS0a+gVuvh69buNNs=)
                          5: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=)
                          6: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: 6sLu3BEdx9/7hIQ0xnLxfwDmYeLLmzHWwmPjiKZ/kzE=)
                          7: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: /C0qtTA5i0rVvnV/xAh9o5sYCzRTxWzn/hNOktwoiis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
                          rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
        Validity
            Not Before: Jan 25 00:37:56 2026 GMT
            Not After : Feb  1 00:37:56 2026 GMT
        Subject: CN=697565e4-bb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:48:50:58:4c:9b:a0:26:46:8e:a5:1e:4b:
                    30:e7:cb:8f:2c:d8:1f:81:3b:78:a6:c4:e3:11:2b:
                    68:62:a8:ae:fb:70:13:10:3f:00:6b:5b:57:22:61:
                    3e:02:67:8e:56:a8:c3:36:28:64:8c:8c:29:64:bd:
                    70:c8:eb:60:2d:6a:b7:a3:ae:10:f4:b9:2a:75:bd:
                    0b:97:53:1d:9f:c7:13:de:88:d5:38:aa:ef:3f:69:
                    1c:19:d9:79:82:9c:e2:ad:3b:0f:8b:37:70:ab:8a:
                    96:a4:a1:43:9e:98:47:e3:88:70:77:ee:88:db:9d:
                    70:50:33:a4:18:58:e6:9d:9d:ef:42:b3:81:9f:63:
                    88:18:ff:79:12:d4:82:46:42:a6:04:71:84:2a:84:
                    b3:da:93:3f:fe:98:df:ad:62:5d:71:7d:80:f2:df:
                    d9:48:78:10:39:82:44:06:70:0d:eb:db:e8:e6:1d:
                    eb:dd:95:e3:32:12:a1:eb:0d:ed:33:e2:72:3b:43:
                    3f:4f:0c:e8:92:04:91:f5:e6:2b:c3:a2:ef:2b:06:
                    b2:f4:15:cd:8c:b1:10:b2:f0:eb:30:7c:34:e6:e7:
                    09:ea:d8:d7:68:3c:64:fd:35:df:a3:2d:c5:d0:ca:
                    f4:fa:b7:5f:0f:27:6c:a5:ab:32:2f:3b:23:4b:29:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E5:70:5C:63:E0:3C:61:1E:4B:91:3C:82:88:2D:32:F9:9A:97:EE
            X509v3 Authority Key Identifier:
                keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:60:75:e7:b4:cc:2d:7b:76:84:aa:98:03:9a:0e:eb:69:
         39:d0:07:b4:93:b2:df:d4:e6:b2:fd:1f:d2:ff:05:c9:2b:17:
         ac:3c:22:82:00:e8:4f:20:42:74:4e:39:b0:7a:c9:1f:ad:ac:
         69:b6:a7:01:c9:f5:6f:af:9c:88:b9:b9:17:f0:7f:0a:06:a9:
         e3:1c:e5:70:0c:23:e2:e5:f0:ee:3a:a2:55:1e:fa:9f:7e:58:
         a7:0e:b6:ae:00:dc:4c:e6:47:e4:ea:36:8e:61:4f:71:c9:8d:
         c7:e4:4f:12:e2:e0:3c:2a:39:5c:08:6a:0f:9c:30:49:5f:0d:
         c9:96:1c:69:df:cd:a5:c6:57:46:48:ef:b9:ab:ad:28:e2:36:
         92:74:15:7c:1a:4d:7e:6c:e6:8b:b6:33:fe:d1:e8:a2:76:45:
         ed:b1:bf:f0:30:86:e2:b6:4b:3b:84:b5:b1:12:13:0e:73:36:
         08:d7:95:37:e7:a1:0d:6c:a1:ae:15:b0:34:bb:5d:aa:b0:bd:
         b4:d6:b2:2a:d7:39:99:06:c5:a4:44:f7:ce:6d:82:15:3d:ef:
         96:ce:7e:41:1a:1d:0a:97:34:6b:0e:bc:bf:fc:e2:90:75:57:
         9c:c0:e9:cc:fa:23:02:f7:70:d8:41:82:76:d7:f4:42:7e:dd:
         d7:da:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:20 2026 by rpki-client