This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
File:                     9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json)
Hash identifier:          EoOK44UC2ISYLU6fIkeDh5VC+iBR+v3lsmC01InXXTI=
Subject key identifier:   DF:0D:BE:3A:19:AA:4F:F5:09:BC:CA:AC:2F:A4:02:31:26:C1:62:5A
Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4
Certificate issuer:       /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
Certificate serial:       106C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
Manifest number:          1054
Signing time:             Sat 24 Jan 2026 17:06:55 +0000
Manifest this update:     Sat 24 Jan 2026 17:06:54 +0000
Manifest next update:     Sat 31 Jan 2026 17:06:54 +0000
Files and hashes:         1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: w0NAu4CqeHUiliMnDAR/XayoSturjCYNPT6jMO9CsJY=)
                          2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=)
                          3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4204 (0x106c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
        Validity
            Not Before: Jan 24 17:06:54 2026 GMT
            Not After : Jan 31 17:06:54 2026 GMT
        Subject: CN=6974fc2f-045b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b7:9c:63:b4:05:1f:4f:f3:2e:63:e5:9e:b7:
                    87:bd:b7:34:f8:6c:e9:20:62:94:fc:22:b0:95:24:
                    fc:97:b3:e0:1b:b6:12:d6:a6:71:5b:cd:38:aa:7a:
                    37:1e:b5:2d:c3:1f:63:17:af:8f:00:9a:ce:30:de:
                    75:d2:78:f9:6f:5f:f4:c2:1b:7a:89:33:30:c2:77:
                    e5:c3:66:f7:54:63:8b:a9:38:d6:5f:17:09:7a:e1:
                    60:a0:43:34:66:0a:2b:cf:0e:10:c0:21:16:79:54:
                    c2:9a:2a:82:06:00:3e:55:ee:85:63:69:64:df:1e:
                    ea:69:d6:ec:4f:6f:25:1b:9d:ed:50:95:2a:d4:57:
                    7c:af:1e:d4:6a:dd:e6:c3:88:a9:40:90:1d:54:71:
                    20:6b:e9:6a:78:50:92:e8:11:64:c2:81:8a:59:64:
                    50:c8:90:02:f8:cb:01:ea:45:b5:ff:f6:da:e9:21:
                    80:99:f1:01:d1:3b:2f:f2:2d:c5:b9:ba:57:0c:7f:
                    03:c2:52:1f:f0:c5:99:85:48:1c:78:87:3f:30:70:
                    d9:fb:b1:b0:ab:dd:14:ae:de:37:66:7a:c0:4d:89:
                    e2:a3:32:d5:45:38:03:04:93:7d:ed:72:95:0c:6d:
                    4c:d7:3f:78:e3:32:c5:dd:11:d9:a5:26:90:e6:85:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0D:BE:3A:19:AA:4F:F5:09:BC:CA:AC:2F:A4:02:31:26:C1:62:5A
            X509v3 Authority Key Identifier:
                keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6e:12:75:4e:45:d3:ce:ee:bb:38:23:45:39:1c:41:3e:ad:
         14:0b:43:69:9f:6b:d3:67:66:28:65:50:62:2f:5a:18:a7:a5:
         cd:07:26:4a:7b:0f:62:e0:3f:62:b4:4a:b1:69:04:d2:ed:ff:
         3b:19:19:02:58:3c:17:17:e4:67:51:67:62:5e:db:12:f0:36:
         c2:2a:75:e4:15:6e:ae:cf:55:64:92:12:83:b0:4b:e7:72:4c:
         16:51:95:47:94:4c:c3:1d:72:10:ac:cd:49:4d:9d:73:7c:a4:
         5e:09:e9:e9:75:6b:e0:5b:6b:0a:cd:59:7a:19:1e:10:2a:99:
         60:ab:6d:6a:7c:b9:75:ce:66:67:68:96:9d:f3:55:cd:e6:ee:
         10:45:e4:d5:c9:84:7b:82:a6:f9:87:45:29:16:47:3a:9b:90:
         4c:77:d4:f5:b7:81:fe:80:f3:f8:d9:b5:e3:9c:5b:31:6b:c6:
         10:89:87:12:3f:58:d0:a7:dd:c8:df:d9:21:f9:39:81:a2:80:
         fe:44:c5:21:81:f8:af:fc:63:f0:d2:8b:27:e2:cf:f9:97:38:
         8d:5e:7a:65:f9:62:23:98:77:00:82:57:c5:b1:19:e5:7b:a8:
         dd:41:38:15:4b:ee:fc:92:11:60:6c:db:c3:74:9c:18:db:73:
         0e:af:f5:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz
ODIxMjg4QTQwHhcNMjYwMTI0MTcwNjU0WhcNMjYwMTMxMTcwNjU0WjAYMRYwFAYD
VQQDDA02OTc0ZmMyZi0wNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkrecY7QFH0/zLmPlnreHvbc0+GzpIGKU/CKwlST8l7PgG7YS1qZxW804qno3
HrUtwx9jF6+PAJrOMN510nj5b1/0wht6iTMwwnflw2b3VGOLqTjWXxcJeuFgoEM0
Zgorzw4QwCEWeVTCmiqCBgA+Ve6FY2lk3x7qadbsT28lG53tUJUq1Fd8rx7Uat3m
w4ipQJAdVHEga+lqeFCS6BFkwoGKWWRQyJAC+MsB6kW1//ba6SGAmfEB0Tsv8i3F
ubpXDH8DwlIf8MWZhUgceIc/MHDZ+7Gwq90Urt43ZnrATYniozLVRTgDBJN97XKV
DG1M1z944zLF3RHZpSaQ5oXWcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8NvjoZ
qk/1CbzKrC+kAjEmwWJaMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0
OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB
MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpbhJ1TkXTzu67OCNFORxBPq0UC0Npn2vTZ2YoZVBiL1oYp6XNByZK
ew9i4D9itEqxaQTS7f87GRkCWDwXF+RnUWdiXtsS8DbCKnXkFW6uz1VkkhKDsEvn
ckwWUZVHlEzDHXIQrM1JTZ1zfKReCenpdWvgW2sKzVl6GR4QKplgq21qfLl1zmZn
aJad81XN5u4QReTVyYR7gqb5h0UpFkc6m5BMd9T1t4H+gPP42bXjnFsxa8YQiYcS
P1jQp93I39kh+TmBooD+RMUhgfiv/GPw0osn4s/5lziNXnpl+WIjmHcAglfFsRnl
e6jdQTgVS+78khFgbNvDdJwY23MOr/VO
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:13 2026 by rpki-client