This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
File:                     Fp97ebHLC9YNnChOysqKz1dZgFE.mft (raw, json)
Hash identifier:          ZsUOsyQiXuuPTIXrSUoLh1Mg0Fq8Lue/NIkTcRXTLe4=
Subject key identifier:   10:EC:AC:41:55:DC:4E:C9:89:70:C7:36:BD:31:4E:73:79:93:D1:38
Authority key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
Certificate issuer:       /CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
Manifest number:          E0
Signing time:             Sun 25 Jan 2026 04:48:01 +0000
Manifest this update:     Sun 25 Jan 2026 04:48:01 +0000
Manifest next update:     Sun 01 Feb 2026 04:48:01 +0000
Files and hashes:         1: Fp97ebHLC9YNnChOysqKz1dZgFE.crl (hash: K30iqoSYzLu52CVXw0f18qPqgu5/HpkqDmO+jxsnZ2I=)
                          2: 3C249D62A89211EF881C732EC4F9AE02.roa (hash: o3NMmzjzmunfciEyOk8NZ1RPL924VP4XKb0zJ76CPTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl
                          rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137627, serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
        Validity
            Not Before: Jan 25 04:48:01 2026 GMT
            Not After : Feb  1 04:48:01 2026 GMT
        Subject: CN=6975a081-8b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:e1:0d:39:ec:f0:9b:00:f9:40:ef:81:1e:
                    ff:9f:53:78:48:1d:fc:5f:c7:8e:06:d9:70:2f:e7:
                    83:ee:77:c3:a1:ac:5f:03:71:08:f7:27:31:da:cf:
                    09:8d:14:b5:94:7c:6d:60:be:71:67:d0:ed:33:88:
                    b9:9c:09:60:7d:ab:2a:6c:76:b7:2e:85:e0:bb:3a:
                    69:62:f3:70:00:b6:23:de:d3:77:b7:a1:65:ec:7a:
                    40:9e:45:c8:db:4c:c2:3e:f7:92:28:b0:09:c9:57:
                    28:56:ab:46:7f:2d:0b:54:24:19:61:d9:79:d4:95:
                    54:14:39:f4:0c:94:13:49:e9:ce:c4:5c:d2:0e:f2:
                    42:4d:2c:de:1b:fa:11:41:d5:f6:3c:6c:7b:d3:05:
                    ec:3c:c6:b5:55:e8:f4:e9:66:2d:00:86:3d:ef:e2:
                    3a:ca:17:79:f0:c0:c5:7c:a9:78:ff:7c:d5:4e:8d:
                    42:e3:03:98:59:ed:ed:3e:a5:ad:60:90:36:48:55:
                    d4:d8:6e:84:99:93:68:6e:45:7c:71:7d:87:b7:49:
                    c3:1f:4a:70:d6:53:77:bc:c0:4e:c5:be:da:70:00:
                    fc:bf:a7:43:9a:3e:68:66:f0:fe:68:5d:c2:18:84:
                    15:bf:fb:13:c2:94:80:0a:c2:8a:fb:75:1e:d5:8f:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:AC:41:55:DC:4E:C9:89:70:C7:36:BD:31:4E:73:79:93:D1:38
            X509v3 Authority Key Identifier:
                keyid:16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:22:cb:c0:ac:21:35:a6:b7:e4:00:d8:15:25:3b:b9:e7:1e:
         e6:07:cd:d0:34:ce:9f:39:91:f9:75:38:b1:b6:ed:5c:f5:50:
         5b:e5:03:f9:2d:31:24:68:5a:ff:60:0f:87:77:4a:b7:69:7b:
         e7:99:75:96:68:13:17:3a:32:07:84:c0:97:e1:73:6d:63:8a:
         c9:4f:43:aa:cc:69:76:50:16:34:39:e5:b8:e5:11:1f:42:f0:
         fd:cb:ad:bc:5f:b1:c0:ae:84:b9:86:64:39:44:2d:b5:43:04:
         fd:21:db:6e:fc:55:cd:01:4b:a9:8a:91:46:0e:7c:a8:a2:58:
         8f:10:17:6c:15:aa:54:58:e8:fa:d2:40:71:fc:72:4d:a7:78:
         8c:dd:73:cf:f8:f8:32:ef:4d:f4:ba:01:13:3d:33:1b:79:ce:
         d7:3d:3c:97:4d:af:f7:84:94:a4:f3:f9:a0:82:32:c0:9c:e7:
         dd:b1:94:82:5e:f2:22:a9:68:ef:e3:88:de:8f:8f:6c:9c:bd:
         76:33:e1:4e:79:90:9c:24:de:0f:41:68:26:6d:7a:a2:9d:fa:
         de:a9:05:4b:5e:74:a5:65:43:74:60:3c:41:78:6e:c8:22:3c:
         eb:50:5e:02:f4:ad:5c:f6:52:52:bf:e5:9d:01:a7:4b:09:59:
         69:31:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:34 2026 by rpki-client