This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File:                     STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier:          RjNxyTk8hUcYjcXo9n9qHUdhkCVYhof/D3bBWigNNWg=
Subject key identifier:   12:CF:33:CA:FB:0C:DD:6C:29:8B:0E:14:95:50:1D:B7:5F:B6:78:3D
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number:          DA
Signing time:             Sun 25 Jan 2026 04:49:48 +0000
Manifest this update:     Sun 25 Jan 2026 04:49:47 +0000
Manifest next update:     Sun 01 Feb 2026 04:49:47 +0000
Files and hashes:         1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: ILm6MQf3fuNiuzff9L3GzzI+xD5oNH/JfbbeCWgXTeE=)
                          2: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: 4buNpsqjVzrT4b5mx2ji/Z/fJ9vNVzZvP9Ey1iD/FnI=)
                          3: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: BIhYQXo+ynpaauxBVASHvuQCNYPCsIa0qxYybQkkt8g=)
                          4: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: nkmyG+cerv7WGoEtCDY5qePml4WahDx59uvEgKxWEOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Jan 25 04:49:47 2026 GMT
            Not After : Feb  1 04:49:47 2026 GMT
        Subject: CN=6975a0eb-f62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:f9:f2:bb:4c:ef:58:c1:1f:9b:68:80:7a:
                    fd:3e:ca:39:0f:91:73:33:de:23:5e:78:84:03:dc:
                    23:dc:66:dc:dd:51:14:f9:15:69:c5:4d:66:e7:6b:
                    84:e7:fe:2e:ca:bc:e1:9e:5b:75:76:5b:13:4c:0b:
                    08:ac:f0:b3:e2:eb:31:76:34:fd:db:53:e6:18:65:
                    a8:87:d1:69:e7:ef:e3:19:4f:a8:a2:03:a1:e3:03:
                    0c:08:4d:39:df:af:c2:f7:2f:e2:73:87:27:5f:23:
                    ff:7e:f0:7e:25:66:8a:33:ae:0e:f9:cd:3d:f3:61:
                    38:8e:6f:2d:e2:d7:56:74:4f:87:32:4a:16:a0:7a:
                    20:c3:fd:a9:49:d8:6e:ee:8e:f6:83:2a:14:20:c1:
                    93:43:59:2d:af:bf:c4:33:77:9c:5f:be:f9:98:4f:
                    10:83:86:7b:c5:14:a4:ea:86:07:11:4b:5d:15:55:
                    4d:c2:2d:c6:2d:60:20:7c:54:e7:46:6f:2f:20:2a:
                    13:47:69:81:7b:24:8c:0f:7e:43:60:6e:06:a6:63:
                    e2:54:5e:b6:65:70:46:ad:59:c8:07:7d:40:cb:0d:
                    9d:8b:75:5b:97:08:42:7c:c4:73:80:ac:7d:dd:93:
                    0e:41:d7:c6:e9:e0:5f:95:9b:a2:62:c8:09:3d:92:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CF:33:CA:FB:0C:DD:6C:29:8B:0E:14:95:50:1D:B7:5F:B6:78:3D
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:91:ac:38:92:00:66:a2:d6:c8:ff:0b:0a:3c:ae:11:9a:6e:
         d9:87:48:e3:21:dc:f9:63:05:ec:c4:3e:1c:ff:1e:68:99:cd:
         82:45:0d:fa:a3:d0:61:eb:26:e2:4b:99:70:e3:0e:e9:2f:92:
         49:cc:ec:43:e9:b6:90:63:d5:ac:9b:26:19:64:f2:de:9f:09:
         dd:12:d5:89:96:cb:1c:13:69:34:3f:c7:5e:b6:1a:74:3f:72:
         5f:3a:f7:61:e8:c9:f7:16:fb:db:48:ed:05:eb:31:8d:97:c9:
         b8:29:d0:15:d5:62:91:d0:7e:4e:20:59:a5:9f:b6:fa:63:34:
         bb:c8:46:76:81:4b:5e:23:9b:7b:9a:4c:c0:d0:d5:94:fa:97:
         b8:1f:56:97:97:90:64:c9:0e:f1:8b:00:de:75:91:7f:cb:ca:
         ad:54:3f:6f:be:46:26:f5:e2:33:2e:9a:f6:1e:73:3f:c8:22:
         5c:0e:d0:2d:8d:05:a1:53:96:33:00:ef:d6:d4:0a:48:dc:6e:
         20:d4:3e:b7:8a:2e:8f:f8:1c:61:d7:d3:e5:92:81:21:61:9b:
         97:6f:07:2f:58:0b:6d:9c:34:cc:28:87:a3:83:31:da:6f:a8:
         ff:3a:3a:dc:05:b3:b5:fb:ad:18:3b:d8:f8:ce:e2:0b:21:37:
         d8:30:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:57 2026 by rpki-client