This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File:                     9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier:          Yu17+LsZMsu5zKN+ZAyzhV1gO4mt0GF7PPWVLg9SEZU=
Subject key identifier:   2A:3D:6A:8A:88:0B:52:2C:B3:37:84:AD:4B:FA:D9:F7:48:C9:C1:12
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer:       /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number:          21
Signing time:             Fri 23 Jan 2026 06:47:11 +0000
Manifest this update:     Fri 23 Jan 2026 06:47:11 +0000
Manifest next update:     Fri 30 Jan 2026 06:47:11 +0000
Files and hashes:         1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: UBDIaq7HGeD6+rYQlZsJJ7Em9R6HFJGB04swVg0mf+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
        Validity
            Not Before: Jan 23 06:47:11 2026 GMT
            Not After : Jan 30 06:47:11 2026 GMT
        Subject: CN=6973196f-6735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:bd:de:03:4d:f5:bd:af:e8:a5:06:61:30:
                    e1:32:99:cc:3a:45:dd:f0:5c:63:31:62:8f:63:fb:
                    8b:a4:a5:5c:3f:52:1e:2f:20:04:1c:fc:bb:e0:db:
                    86:45:99:97:b4:46:b5:c4:7d:e8:aa:ff:4a:ad:9f:
                    73:a3:3b:6f:7a:76:e4:49:39:cc:82:5c:2f:4f:5c:
                    0a:5e:58:0c:1d:8c:85:8f:73:59:af:af:df:84:12:
                    44:4d:33:de:aa:0c:c0:1d:3f:d5:41:2d:de:5a:db:
                    35:d7:92:da:27:09:69:a3:35:c0:20:7e:9a:81:73:
                    08:9c:ea:f2:20:1d:48:25:83:ed:76:c7:74:76:cf:
                    16:d0:59:a6:21:bd:c6:3f:22:93:0b:1c:d4:1f:5c:
                    26:46:2d:a5:db:97:87:90:72:4b:b6:f9:11:8e:88:
                    dc:54:95:36:9b:be:5d:ba:ac:78:c2:46:e4:96:92:
                    c3:ab:3f:b1:a1:29:18:39:57:05:e5:66:44:21:05:
                    1e:42:f2:03:69:c2:66:49:3f:d9:77:9c:e5:c4:bd:
                    c5:de:f1:5f:da:ca:5e:ee:35:74:1b:8c:b6:81:09:
                    f6:00:7d:d3:1c:0e:52:c6:ec:cc:f7:42:96:72:3d:
                    60:11:7f:a0:c5:f2:2f:46:36:07:04:c4:df:89:31:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3D:6A:8A:88:0B:52:2C:B3:37:84:AD:4B:FA:D9:F7:48:C9:C1:12
            X509v3 Authority Key Identifier:
                keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:ec:c9:1f:96:8b:98:92:2c:6c:58:f7:25:69:bf:c7:ed:
         df:61:60:ff:7d:7f:81:21:c3:e6:4a:f7:42:1d:6c:fc:28:21:
         1f:f0:c4:40:ad:de:f0:89:d6:f3:2a:5a:32:6c:0c:e3:cf:ab:
         63:92:16:e0:af:c4:86:0c:50:02:f6:d2:35:a5:64:fc:ba:bf:
         9b:1c:d7:6c:70:73:72:5c:66:4f:6d:7c:3a:4e:73:e8:5d:da:
         55:ca:1f:70:aa:81:65:02:6f:23:f6:d5:3c:3f:b9:88:a1:77:
         0c:5b:89:43:ea:86:d0:c6:ae:4d:a3:09:e0:86:73:4f:af:f6:
         43:55:98:e2:68:2c:d4:ee:c1:0c:e2:7c:09:92:43:e6:49:d3:
         6c:26:0d:4a:82:c3:18:9e:02:c3:ca:ec:c5:28:b8:e9:f9:82:
         09:f0:70:1a:1f:1a:45:d4:d5:de:ad:c0:5f:96:5d:7d:4a:e2:
         8c:1a:88:30:99:41:9a:bc:25:58:c1:81:19:f7:59:60:0e:34:
         01:48:38:f4:01:b1:af:80:3f:d4:5c:9c:ce:f0:bf:10:e7:cb:
         45:18:0c:61:01:0c:4a:3e:08:9a:e1:1a:c2:63:08:86:68:2c:
         d4:1c:76:1b:0a:4d:aa:13:93:92:72:d4:78:29:fb:ee:09:9b:
         84:b6:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:56 2026 by rpki-client