This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File:                     84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier:          5kjkyrXjXj95KsRpw2llzARqI3qf76zqjboxBqTGtfI=
Subject key identifier:   14:EC:27:C8:28:06:DB:35:A8:CD:3F:6D:39:F6:7A:E6:1B:39:55:7A
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer:       /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial:       04CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number:          04C5
Signing time:             Sat 24 Jan 2026 23:05:14 +0000
Manifest this update:     Sat 24 Jan 2026 23:05:14 +0000
Manifest next update:     Sat 31 Jan 2026 23:05:14 +0000
Files and hashes:         1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: Ws7CzTOCKhx1mwjrzV0QI32lQWJff4wH376is+nmecg=)
                          2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
                          rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Validity
            Not Before: Jan 24 23:05:14 2026 GMT
            Not After : Jan 31 23:05:14 2026 GMT
        Subject: CN=6975502a-b59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:00:16:07:a2:71:03:da:3f:13:bc:8f:6e:
                    ea:f7:4e:14:3b:bc:c5:d6:3f:52:61:b2:b6:bb:a7:
                    1f:16:70:cc:c8:6b:02:b1:a7:1a:28:6a:ec:0d:9c:
                    73:88:c6:09:70:64:ff:07:ed:2c:32:fb:fe:a7:24:
                    71:e1:14:35:30:72:9b:86:d5:4f:23:37:24:de:5c:
                    f4:56:2c:b8:60:ad:58:94:75:4d:27:f7:69:c0:03:
                    6c:3f:f7:45:0c:96:09:1a:53:90:1d:9e:ee:2a:75:
                    d2:12:f4:db:a6:ab:2a:38:63:27:46:ff:b9:89:50:
                    2a:79:db:e3:db:3f:3e:f5:ab:f2:ef:cd:98:36:61:
                    8e:a6:09:ab:5d:52:ca:04:61:16:c7:07:cd:e7:f8:
                    2c:4e:b0:5b:62:bd:31:bc:b7:9b:f4:8f:9c:97:8c:
                    4d:e3:fa:40:33:ea:4f:dd:f5:e8:bd:2d:39:f8:83:
                    f8:dd:82:6e:82:bf:38:71:fe:a9:d7:ad:0c:03:a3:
                    df:51:7b:97:36:c6:83:c0:33:b9:95:79:b2:f5:94:
                    16:44:4b:28:7b:12:ba:5c:31:f1:64:43:a0:91:2d:
                    ff:36:c5:7a:df:0d:82:5e:c3:7e:e3:eb:d2:29:12:
                    32:90:ef:8b:52:18:cc:9c:34:01:23:19:e0:2b:2a:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:27:C8:28:06:DB:35:A8:CD:3F:6D:39:F6:7A:E6:1B:39:55:7A
            X509v3 Authority Key Identifier:
                keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ae:b2:41:58:63:9e:8d:f6:c3:08:a3:a7:23:25:22:72:36:
         0a:45:fd:2a:ab:23:38:fe:ff:64:d2:0a:5f:c4:cd:23:59:b3:
         e4:cf:e8:af:56:da:bb:7f:52:c3:1c:4e:97:67:0e:11:6c:ad:
         f0:db:a9:0b:6e:6e:bb:fb:8f:8e:12:87:28:cd:63:3a:46:59:
         d8:5c:1a:d2:dc:20:b4:0f:78:14:72:9e:aa:bc:e8:49:6b:96:
         d9:11:a1:57:56:9e:e3:a7:fc:f5:8f:f1:d4:da:a8:b0:2e:8f:
         35:6f:7b:7b:92:b3:e2:5e:9f:8b:13:96:08:e4:f1:16:c6:f8:
         9a:c8:88:0e:41:3e:d2:c9:f0:9e:72:2f:b8:6a:68:7e:0e:c2:
         2f:7a:ac:02:9c:29:f1:51:de:3b:a0:6a:9f:ed:58:1c:51:64:
         e0:f5:44:d4:06:d6:2e:86:b5:89:a6:a8:9f:ea:69:48:fa:f0:
         3d:92:e0:b9:1b:75:b7:1c:8b:cc:ef:a5:b6:b6:e3:c8:59:42:
         81:c4:e1:81:eb:2b:9f:3e:a3:7f:7f:16:af:32:a4:49:99:5b:
         1d:4b:7d:f9:45:a1:34:a0:7c:55:a6:61:e0:6e:6c:50:02:5f:
         b5:a9:b5:8d:00:fd:28:5a:67:41:62:2f:cf:db:0b:7d:73:3a:
         3d:bb:0f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:46 2026 by rpki-client