This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File:                     sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier:          SaYwtvt4ExowoMoAhlIeXLgQEnO+elt6cc9i39ouV2o=
Subject key identifier:   F1:D3:EB:D8:77:98:40:1F:39:86:62:A0:A3:86:90:1B:CA:AF:B6:7B
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer:       /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial:       1F91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number:          1F80
Signing time:             Sat 24 Jan 2026 15:49:17 +0000
Manifest this update:     Sat 24 Jan 2026 15:49:16 +0000
Manifest next update:     Sat 31 Jan 2026 15:49:16 +0000
Files and hashes:         1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: D70lpfgaN9IM/YRGZFnflf2RSNFJj4fDroKQz4nEh2A=)
                          2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: OeiUjQjQDPnp0Hc4HqvRxkfSPHq3x3ODdBcjSRZ+2RM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
                          rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8081 (0x1f91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
        Validity
            Not Before: Jan 24 15:49:16 2026 GMT
            Not After : Jan 31 15:49:16 2026 GMT
        Subject: CN=6974e9fc-b3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:1b:1f:41:e9:b5:02:2b:bc:5e:60:d4:91:
                    92:3d:cf:11:41:40:bf:9a:2c:93:3d:7a:54:7a:d0:
                    31:a8:48:dd:fc:7c:63:50:bd:21:96:85:66:83:01:
                    9e:a6:21:bb:78:17:96:8a:12:1b:f0:20:9b:a2:aa:
                    f4:dd:8d:0b:59:c6:5e:d5:a3:1e:a1:85:7d:c0:4d:
                    0d:e1:b7:e6:2b:76:ac:62:4c:49:d3:d9:c6:70:b5:
                    92:d9:e5:ab:7d:b7:cd:e4:2f:04:50:1f:08:1a:f4:
                    04:39:46:ac:65:7a:fa:35:9f:3e:2f:e3:85:d6:92:
                    74:d7:52:1e:4c:e6:36:3f:99:bc:b3:1c:15:67:c8:
                    1a:05:a2:9a:ee:1c:c2:fb:0a:7f:d2:11:65:5b:e8:
                    0f:db:5f:9e:77:28:07:14:b6:af:63:ca:99:9c:b0:
                    47:09:27:bc:42:c6:43:af:86:41:f2:0d:c1:d0:87:
                    d5:fa:82:8d:c7:67:00:5d:40:e9:9d:82:4c:55:d3:
                    59:2d:66:55:a1:d2:46:93:4f:66:ed:1a:4a:ef:d3:
                    9d:c0:10:60:44:51:0e:9f:0e:69:d4:c2:46:63:fc:
                    63:25:70:24:df:60:4f:27:c0:1d:68:23:71:26:c8:
                    c5:7f:2e:41:8e:33:79:04:ec:7a:21:01:b4:77:7b:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D3:EB:D8:77:98:40:1F:39:86:62:A0:A3:86:90:1B:CA:AF:B6:7B
            X509v3 Authority Key Identifier:
                keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3c:fe:21:e3:f9:11:3e:2a:a7:e4:f0:2e:e8:79:37:8f:36:
         08:27:0f:84:1a:fc:89:ba:69:60:68:04:3d:da:90:bf:be:55:
         7d:0e:99:04:ed:64:38:49:ab:80:f2:36:3d:b9:a9:bb:3b:4c:
         e7:88:73:4f:97:82:b7:0f:08:c2:48:9e:5a:4c:fc:b4:eb:b7:
         f7:df:90:87:70:e3:13:89:38:67:a5:5c:f0:9d:02:74:dd:eb:
         ed:a4:2f:95:0b:a6:1d:e4:1d:1d:61:8e:a7:3a:bf:de:eb:23:
         85:e7:44:a7:8c:76:17:04:57:84:63:92:b5:9d:ec:47:d6:a7:
         0c:d6:01:53:08:0f:05:dc:4d:68:82:0b:43:f6:11:b6:f7:45:
         79:2b:0e:c1:0a:50:68:c3:13:d6:55:97:69:62:75:24:71:25:
         f4:18:e6:c1:08:3b:57:1c:32:c8:71:c2:8f:a3:ee:18:fd:79:
         8f:3f:92:db:4d:e0:9d:6b:6c:a3:18:97:9c:69:19:e6:d5:7d:
         69:8e:c2:de:06:77:3c:83:cb:59:14:e5:48:71:b4:d7:21:fd:
         d6:f1:c7:81:01:8b:a6:36:43:05:ed:7e:08:18:1c:6a:77:80:
         3b:f5:47:4a:e3:06:10:50:e7:76:21:3c:2b:55:b9:bc:cd:53:
         15:8b:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:09:30 2026 by rpki-client