This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File:                     -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier:          tomKwIgKqXn5MrGF+G/qC+J8ZmJncrog5GGJT17gM3w=
Subject key identifier:   27:F2:BC:C8:07:97:CC:87:34:30:6A:66:F7:08:9A:59:68:FA:1C:7F
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer:       /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number:          02D6
Signing time:             Sun 25 Jan 2026 00:32:58 +0000
Manifest this update:     Sun 25 Jan 2026 00:32:58 +0000
Manifest next update:     Sun 01 Feb 2026 00:32:58 +0000
Files and hashes:         1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: pDdUBGiW0FopJFv73Gl1sChJcpXP4pzK7rsfPP5sWpI=)
                          2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: sMLXclSpaatsjiefCG2CYL97q01e5mLSlbQCKpyYzHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
                          rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
        Validity
            Not Before: Jan 25 00:32:58 2026 GMT
            Not After : Feb  1 00:32:58 2026 GMT
        Subject: CN=697564ba-489e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:c8:7b:db:e8:36:37:9a:b8:14:67:b3:df:
                    95:8a:60:65:9b:db:7b:1c:b3:d3:2e:74:39:f6:16:
                    35:3b:3b:89:60:8d:f8:e4:0d:52:b5:9d:b9:00:a0:
                    41:3e:32:37:c7:52:7f:1d:f5:aa:03:ed:c8:9b:cf:
                    7f:d6:3d:7c:0e:45:5c:d4:d4:52:02:26:fa:f2:11:
                    a5:4b:76:48:1f:6f:92:93:ea:55:46:14:24:bb:2d:
                    c4:2e:29:fb:f0:1f:cb:b7:15:63:e9:1b:6c:34:2b:
                    5b:5e:36:33:48:b1:34:b2:b9:06:2e:c1:1c:e2:8c:
                    f1:49:10:2b:05:a3:e6:e3:d6:60:eb:ed:82:a8:33:
                    0f:fe:f2:2c:d8:b5:9e:e0:b0:1a:f2:8f:81:db:5f:
                    a4:b7:db:13:be:f7:9a:fd:2c:9b:15:c4:6a:8e:8b:
                    2b:84:e5:1b:0a:cf:20:95:75:8c:44:0d:8a:00:5d:
                    58:83:4d:3f:2d:fa:70:54:f2:e6:65:42:b7:04:52:
                    d1:c9:62:5e:5f:97:43:fd:0d:6e:6a:db:1f:c6:6c:
                    7a:af:ed:fe:2d:5d:d0:41:40:7c:81:91:cf:e1:a0:
                    00:28:34:eb:b4:26:0d:cf:dd:7f:1a:be:ad:74:75:
                    1e:4a:a2:82:70:8c:d0:9e:6d:c7:60:a8:64:d6:1c:
                    07:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F2:BC:C8:07:97:CC:87:34:30:6A:66:F7:08:9A:59:68:FA:1C:7F
            X509v3 Authority Key Identifier:
                keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:9f:64:d0:ea:d4:ad:a6:24:66:5f:a9:9d:1c:84:d1:79:48:
         fa:70:12:81:ff:26:e7:58:e0:c2:ef:ce:88:8b:43:1f:df:a3:
         eb:d7:d1:df:07:08:48:70:25:88:02:ae:b9:c5:54:2c:c4:fe:
         d2:11:9a:11:0f:b4:f8:69:be:19:e2:42:67:81:ea:40:14:82:
         65:30:98:76:08:80:c5:d0:f2:cf:89:46:05:01:e6:f9:e9:f0:
         54:2e:f7:43:a6:c4:e5:a3:98:3f:35:22:b0:88:c4:31:a7:dd:
         47:e6:1d:59:28:0f:87:98:05:03:c8:87:b3:03:b3:bf:55:15:
         a5:10:7b:44:99:14:f1:72:71:88:43:fb:75:e4:7f:be:67:80:
         16:66:c3:b2:f1:a5:d3:c5:7b:64:c8:a6:cd:97:50:2c:ab:1d:
         df:f9:71:67:8a:0e:19:f1:c8:a0:18:d9:2e:39:55:48:71:5e:
         78:5c:c9:88:21:2b:0a:44:9a:20:05:b3:43:71:f1:21:00:fb:
         a8:98:e6:9d:ba:83:36:4f:ef:ac:42:b9:f4:54:55:ee:60:5d:
         bf:a6:5c:3c:2e:01:88:2d:45:fe:5f:8f:3a:24:20:60:60:dd:
         03:c8:8b:35:6b:bf:d6:3d:3c:77:cc:fb:e1:6e:2d:74:e0:ed:
         bf:a3:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:43 2026 by rpki-client