This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
File:                     J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft (raw, json)
Hash identifier:          nkPU3r+YXhVROZE+TryZI6PxDo5ZysvbdNSMc3VBAPw=
Subject key identifier:   C9:76:0D:B0:C3:3D:DC:70:31:7D:A6:78:75:07:58:27:AD:07:EC:8A
Authority key identifier: 27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07
Certificate issuer:       /CN=A9141559/serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
Manifest number:          85
Signing time:             Sun 25 Jan 2026 05:44:34 +0000
Manifest this update:     Sun 25 Jan 2026 05:44:33 +0000
Manifest next update:     Sun 01 Feb 2026 05:44:33 +0000
Files and hashes:         1: J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl (hash: AQ7vlLSm/CGdhDLoSggpPlltXxdsH8JpwzskSRoXT9s=)
                          2: 1CF72A482B0C11F08B7A2511C4F9AE02.roa (hash: 2ofBFHApjBEiLo4MH3QZR4kbgOi0f02WpjAlcU00vM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl
                          rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141559, serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507
        Validity
            Not Before: Jan 25 05:44:33 2026 GMT
            Not After : Feb  1 05:44:33 2026 GMT
        Subject: CN=6975adc2-800f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:e7:1c:8c:68:0a:e2:e8:9b:f3:e7:84:c8:
                    e3:7a:ce:1f:40:10:1a:ce:e1:26:01:8f:5a:07:92:
                    76:7f:04:e7:aa:ce:f0:9c:a6:c0:5d:8e:74:2d:09:
                    2d:24:e7:d1:79:85:19:e0:8c:d0:ee:7a:7e:17:9b:
                    21:07:74:70:8d:89:66:56:8c:ac:65:7f:79:10:ed:
                    d4:c9:84:ad:10:ad:c9:04:4c:67:2c:ff:16:f0:a1:
                    e8:f7:c8:d0:03:04:e4:ee:e0:4f:03:d0:cf:f7:a1:
                    bd:df:a7:82:56:c6:44:56:7b:1e:51:7f:53:08:8a:
                    ea:91:68:39:ba:3a:a8:b2:93:0d:3d:9b:30:ec:07:
                    7b:96:55:46:fa:15:13:0e:a9:a7:50:5a:bb:df:22:
                    9f:bd:ac:3e:a9:06:82:a0:7a:79:9c:d5:15:63:23:
                    53:22:01:f7:78:76:b6:d6:e9:7e:de:25:06:4d:c3:
                    93:0c:86:2b:d8:72:b3:6a:10:72:88:65:4a:35:4e:
                    aa:85:95:f3:19:00:56:37:16:1a:cc:ea:d1:f4:e4:
                    62:f6:66:21:37:31:7c:cc:7e:64:6d:9a:12:7f:5c:
                    6c:07:16:fd:13:9d:3b:fd:97:d7:9b:9f:ab:3c:ed:
                    93:7b:53:5f:e8:41:9c:1f:17:ec:fb:bf:25:c3:27:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:76:0D:B0:C3:3D:DC:70:31:7D:A6:78:75:07:58:27:AD:07:EC:8A
            X509v3 Authority Key Identifier:
                keyid:27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:50:f2:07:ff:21:e2:3a:e7:5e:6a:5d:8f:ac:ca:8e:47:
         15:ec:e2:49:fc:5c:d8:38:2a:a2:31:21:38:e3:52:28:16:55:
         6b:de:de:ab:63:e0:28:6f:b0:b0:b7:72:4a:94:7d:6e:55:16:
         ae:0c:a3:c7:b2:df:75:0e:82:dd:26:fd:d7:b9:05:bc:e6:45:
         9c:99:a8:ca:a2:71:e7:02:98:f5:13:a6:62:e8:6b:01:78:60:
         4d:1c:97:5e:36:91:2c:b9:89:96:32:39:51:4d:e9:c9:de:96:
         89:66:8f:b2:83:29:b1:d8:b3:14:81:78:af:0c:c9:0e:e3:a4:
         af:5c:a4:5f:ed:3e:a9:e5:76:1c:30:a6:69:f9:ef:7d:2c:ad:
         bf:cf:2b:e7:36:46:94:4b:28:01:e4:60:da:a7:fe:a7:cb:2b:
         06:9c:cb:5c:47:c9:09:45:e6:d2:54:8f:d4:ea:f4:a1:5b:d3:
         26:91:f0:dc:4d:9f:18:1f:e2:7b:4c:16:a5:f1:26:11:fa:dc:
         20:12:83:a2:f8:d3:88:0c:ca:c8:b5:74:c3:97:a8:ec:9d:06:
         f8:db:40:a9:7c:ff:bc:a8:c7:8d:04:6c:32:12:cf:96:10:f4:
         f7:39:02:17:ff:fa:f2:af:8f:9e:57:8c:d5:5a:7b:61:ab:c5:
         5f:98:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:17 2026 by rpki-client