This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
File:                     kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json)
Hash identifier:          ZC5b77Ia92Rh5u7mszqbMdnFJ1Rbz7PG44sGu0Wsf3Y=
Subject key identifier:   6F:72:20:0A:F4:13:36:56:E3:4F:55:9C:22:4E:AC:E7:32:01:9A:85
Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
Certificate issuer:       /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
Manifest number:          6D
Signing time:             Fri 23 Jan 2026 05:58:37 +0000
Manifest this update:     Fri 23 Jan 2026 05:58:37 +0000
Manifest next update:     Fri 30 Jan 2026 05:58:37 +0000
Files and hashes:         1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: gVeZ/bmfpfiOLFDXexZufSwSL3PRvotZs/+CEdPUDos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
                          rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
        Validity
            Not Before: Jan 23 05:58:37 2026 GMT
            Not After : Jan 30 05:58:37 2026 GMT
        Subject: CN=69730e0d-3d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:41:cc:46:06:51:30:26:c6:a6:ab:ca:fc:a8:
                    ba:33:5d:0d:c8:e4:2e:4c:a8:1c:4c:c0:f1:7b:f8:
                    dc:a9:b3:cd:93:69:f3:60:8d:7c:c7:56:9b:a1:e9:
                    92:6e:e2:ad:8d:66:e6:66:a9:d5:70:fa:06:2d:36:
                    1d:7b:08:2a:a5:ed:48:00:fa:f9:d5:a1:e2:44:e2:
                    3b:d2:b3:4f:8c:1a:bf:b6:51:c1:02:71:ba:c6:5a:
                    a5:88:58:e7:fc:80:6a:dd:29:ac:2f:79:ad:6f:ab:
                    09:69:f8:72:49:3f:25:10:b8:7b:3e:5d:70:78:e0:
                    ac:90:55:11:ab:95:6d:ec:37:01:42:8a:9a:a9:c9:
                    95:e4:69:84:83:7d:24:ae:fa:b4:23:e1:25:70:84:
                    5c:fa:b9:a7:8a:b3:6c:67:07:8e:ce:52:96:21:ec:
                    a0:f7:dc:ff:88:98:72:51:25:a1:b6:a1:cb:83:13:
                    f3:13:69:ab:26:8d:97:46:f6:b0:31:22:b7:d3:d3:
                    75:f3:29:35:4b:b3:3a:b2:a6:02:1f:e2:5e:0f:63:
                    39:ad:c9:b5:9c:9e:26:e8:c2:6c:58:62:65:6a:8e:
                    b0:c3:83:bb:ff:86:99:bc:0e:37:62:3e:89:dd:60:
                    b5:06:4b:ef:9c:11:2e:fa:92:f5:79:5f:88:bd:e3:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:72:20:0A:F4:13:36:56:E3:4F:55:9C:22:4E:AC:E7:32:01:9A:85
            X509v3 Authority Key Identifier:
                keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:24:ea:83:23:d7:94:3a:1a:31:35:44:d0:5a:f7:44:3c:9f:
         cc:54:30:25:c2:08:78:36:9b:c1:b1:a3:14:5e:1a:b1:f2:e5:
         91:eb:8a:54:d2:e7:2c:4c:f8:60:e6:81:a3:c9:89:13:bc:d7:
         08:ae:cc:68:08:be:20:67:98:b9:2e:4a:66:39:14:64:45:0c:
         0a:48:73:7b:63:f7:a1:a0:e2:8c:0a:f8:33:d1:44:47:1f:f1:
         08:5f:7c:28:7d:bc:fc:df:51:db:cd:4c:b2:a2:6e:78:f3:84:
         4c:0c:ea:8e:74:dc:aa:55:83:e4:ec:fd:5d:a5:e9:c1:c5:f9:
         21:f3:37:0b:de:a0:1f:5d:c8:cb:79:9d:90:77:61:93:87:de:
         7e:8b:62:34:3c:81:20:6f:64:8c:3f:2a:17:85:91:01:77:f2:
         37:24:57:2f:ec:de:4a:97:df:7f:5e:9e:89:cc:f8:82:0e:c1:
         33:29:6e:10:6a:91:29:0a:cf:b1:e7:f0:4a:fc:3c:cb:83:bf:
         94:2b:25:03:2f:2b:ac:10:06:54:47:35:a7:98:74:2d:cc:db:
         a1:d7:c5:e0:21:4a:79:04:87:76:d9:f8:b9:98:29:69:a4:20:
         10:f8:c8:75:c8:aa:bf:39:70:10:62:de:be:f3:9a:54:c9:81:
         74:2e:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:55 2026 by rpki-client