This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File:                     60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier:          mkfy5c3ct9iN4Hm94Dg2XCR1qVL9eBQq/SqorRw6rYo=
Subject key identifier:   7F:93:59:10:20:C9:27:DC:D2:A4:8E:5E:7E:72:E5:25:D8:68:EA:17
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer:       /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number:          53
Signing time:             Sun 25 Jan 2026 06:17:48 +0000
Manifest this update:     Sun 25 Jan 2026 06:17:48 +0000
Manifest next update:     Sun 01 Feb 2026 06:17:48 +0000
Files and hashes:         1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: 054Ns6I5PeKpW2QeS8+XpPON6e3/3TxNuI7t/fUQUuc=)
                          2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: Dfltc6qeosruWWs9RYkLtzznrV3gwpnRBtFc/SCx5TA=)
                          3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 5Up2xiMOjdnHTLm0XbREaBUtcIUU4ZYKJ2V16NY8kzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
                          rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
        Validity
            Not Before: Jan 25 06:17:48 2026 GMT
            Not After : Feb  1 06:17:48 2026 GMT
        Subject: CN=6975b58c-200f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:a9:5b:6a:71:36:e2:7d:94:70:3e:28:cc:
                    30:fe:b4:6f:bc:26:f7:16:83:0f:f8:81:9e:13:d5:
                    ed:18:ef:c9:e8:ea:b1:32:35:1f:94:ea:d1:71:4a:
                    bb:50:8c:18:53:17:3f:72:d8:bc:99:11:22:3d:6a:
                    e5:2f:49:3c:93:81:2d:84:8e:80:9c:45:2f:4a:da:
                    3d:61:90:ea:47:b2:0f:02:29:f0:ae:a3:34:fc:39:
                    f2:ea:5d:f9:c7:da:78:9c:1f:4b:8f:a1:0b:69:d2:
                    fa:fa:a6:ae:c3:ec:dd:98:7b:53:13:95:34:2f:33:
                    66:3a:29:4f:8b:2f:52:ff:a4:7f:1e:3e:ca:0e:53:
                    12:da:f1:8a:e4:47:0b:39:d7:16:af:0b:c4:07:6d:
                    50:d7:d4:64:ac:b9:58:d5:e3:57:32:0d:de:f6:a5:
                    08:07:97:86:39:07:d8:70:a2:78:24:84:59:ee:33:
                    b3:e7:c2:cd:5e:59:c0:01:f0:47:df:a5:14:2a:87:
                    a0:38:c4:3b:4f:a0:b4:3e:fd:99:bb:16:95:04:4e:
                    47:fc:ac:c4:9c:10:ec:05:96:4f:47:cc:c3:7d:f0:
                    ee:c5:29:b8:02:47:b7:01:80:83:04:68:2d:a8:43:
                    51:5d:67:e9:e8:56:93:52:80:b3:27:82:9a:cc:7e:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:93:59:10:20:C9:27:DC:D2:A4:8E:5E:7E:72:E5:25:D8:68:EA:17
            X509v3 Authority Key Identifier:
                keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:ed:63:91:35:dd:41:f6:a6:8d:45:92:d0:5b:64:8e:e7:52:
         d8:a0:49:91:7c:ab:f4:11:19:29:a3:8d:87:de:26:7f:9f:f7:
         04:e2:c8:1f:34:52:eb:04:cb:20:a4:ad:27:b4:97:31:54:e3:
         49:d8:f8:00:bb:60:21:4c:6b:bf:6e:50:e6:78:1f:69:ce:36:
         3f:00:af:a9:7e:9b:bc:cf:83:59:6a:75:80:0d:6c:17:e2:ce:
         24:33:69:eb:8d:b8:00:d6:9d:73:1f:1c:10:90:e2:58:9f:6a:
         dd:5e:49:d9:c4:69:0e:7b:ac:b9:5f:8d:5f:72:55:ea:02:10:
         dc:94:bd:93:87:2d:07:0e:95:d2:e8:df:89:aa:3f:23:75:03:
         25:d1:f8:10:55:32:f5:db:7a:ec:1c:0b:a2:5b:9b:05:be:79:
         ed:52:ee:6c:16:b3:3b:a7:2f:8e:c4:b2:5b:d5:61:02:f9:0e:
         5d:69:e5:81:8c:17:4a:86:23:c4:04:2b:58:5e:9e:e9:62:9b:
         42:71:71:12:4a:07:e5:de:e0:71:1e:1a:19:1a:59:8b:ee:a0:
         f9:7b:05:02:bd:85:f1:8c:57:32:2c:72:e3:cb:2b:42:3d:f1:
         ce:a6:8a:18:93:d9:ec:c2:f5:b1:73:c6:95:e3:01:a6:9b:e7:
         77:b8:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:29 2026 by rpki-client