This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
File:                     1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json)
Hash identifier:          huaFsEkhX+qG4oGdrjL668MGhqmZS/1+B9xjMlgrCSA=
Subject key identifier:   D6:09:9F:BA:8F:3B:3F:8F:DA:64:7B:25:DB:5D:63:AA:35:F7:4B:39
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Certificate issuer:       /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
Manifest number:          0131
Signing time:             Sun 25 Jan 2026 03:47:32 +0000
Manifest this update:     Sun 25 Jan 2026 03:47:31 +0000
Manifest next update:     Sun 01 Feb 2026 03:47:31 +0000
Files and hashes:         1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: 7RdHucXBW3YDzoQiNdGNI+vH/fFWveMUr9LOGPpiyTA=)
                          2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: b6ERigxsXjUyaKMbJy8+YRLovoMIY+E6IWTJv3Q8jfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
        Validity
            Not Before: Jan 25 03:47:31 2026 GMT
            Not After : Feb  1 03:47:31 2026 GMT
        Subject: CN=69759254-5d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:39:7b:02:0d:21:a7:ce:37:9a:cd:f3:d4:
                    b6:ea:60:00:e4:1d:10:06:f0:5c:be:d9:8b:0b:dd:
                    8d:e4:92:7b:0b:ee:39:88:2c:30:d2:0c:6d:57:24:
                    4f:39:dc:17:7a:9e:e9:de:25:91:14:20:62:91:76:
                    7d:8e:4d:b8:7b:e6:c9:83:90:05:15:32:f2:c0:f4:
                    5c:bb:fa:f2:05:0b:ce:87:bb:41:11:01:d0:52:d1:
                    46:23:1c:e8:e8:49:f4:aa:27:31:00:57:91:bb:dc:
                    b8:49:32:6f:6e:2a:0a:af:f9:34:26:da:f3:c8:87:
                    23:fd:39:77:74:b9:98:ca:5b:61:cb:5f:b3:a8:cf:
                    be:6b:5c:4c:cb:05:aa:c8:58:ee:61:4d:a2:57:38:
                    66:3e:ac:07:6e:f8:59:5b:23:c3:d4:97:dc:8c:f6:
                    18:5e:d5:dc:dc:b3:ed:43:4f:e0:95:b7:bd:3a:db:
                    b0:71:89:04:6d:a5:37:49:c1:8b:ea:fe:3d:48:c8:
                    ce:89:d5:5d:48:d9:60:28:27:c7:e8:1d:89:ac:08:
                    5d:c5:00:c7:17:3d:73:b0:e2:66:1a:8c:84:b7:97:
                    71:0c:44:a0:92:41:89:9b:9e:63:51:1d:32:87:4d:
                    d8:ce:21:0d:ae:04:72:87:79:72:61:a1:b7:0e:98:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:09:9F:BA:8F:3B:3F:8F:DA:64:7B:25:DB:5D:63:AA:35:F7:4B:39
            X509v3 Authority Key Identifier:
                keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cd:72:29:e5:90:4e:a6:8a:e6:db:1b:0a:af:f2:4a:7c:e0:
         03:fd:98:41:49:d4:39:d8:01:72:12:d7:e1:7a:c2:28:ae:5c:
         a4:38:e7:9c:4c:1f:70:2f:36:59:5b:9d:c8:f1:50:19:09:79:
         58:93:68:9f:ed:aa:f6:b0:ae:51:5d:bf:03:9a:f0:6c:63:b1:
         85:8c:6d:79:c5:3a:fc:d9:be:72:c2:35:e5:dc:e9:5e:3e:3a:
         f4:15:16:ab:9a:94:ae:48:72:4b:d5:f1:9e:7f:8f:6c:d6:28:
         e4:c1:73:fb:a9:d2:f2:51:52:e0:d6:11:bc:f3:18:7c:f6:d5:
         9b:12:a1:d0:20:7b:40:a8:fb:8c:f7:b3:af:e3:c8:c3:93:e4:
         38:47:da:a1:49:a3:05:cc:56:2d:00:1f:9c:8f:47:db:6c:be:
         92:34:fb:7a:53:35:a8:90:e6:12:2e:94:2b:5c:69:1f:42:da:
         f1:f7:43:7e:0a:c4:53:ba:b7:7d:4d:33:1e:07:cb:42:40:02:
         f1:69:ed:98:91:7c:db:67:79:84:4c:58:69:f9:5c:a8:48:1b:
         a6:4a:3f:53:a3:6b:b0:3a:41:ce:b7:44:74:a5:ff:76:41:fd:
         df:61:89:59:2d:f2:67:26:1a:67:61:9e:aa:33:83:b7:ff:27:
         c0:a4:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:21 2026 by rpki-client