This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
File:                     15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json)
Hash identifier:          CYpsUirKMXJSRHiBnecUNCnra5z0wGUT1ZqzsbMynKA=
Subject key identifier:   56:6C:2D:B9:05:E5:DC:95:7A:FB:DD:58:6C:9C:FE:59:EB:04:0E:2E
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Certificate issuer:       /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
Manifest number:          01DE
Signing time:             Sun 25 Jan 2026 02:07:10 +0000
Manifest this update:     Sun 25 Jan 2026 02:07:09 +0000
Manifest next update:     Sun 01 Feb 2026 02:07:09 +0000
Files and hashes:         1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: h5dDCWK5J8mFKR+GBTQl2ZVmwepeiILt+9iZZFvqYrU=)
                          2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: Q0kMZvSMppTmP/L1MFuKtKcyvw4++N9BtkqfdKNNGdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
        Validity
            Not Before: Jan 25 02:07:09 2026 GMT
            Not After : Feb  1 02:07:09 2026 GMT
        Subject: CN=69757ace-4f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:76:8f:a6:ac:0f:be:dc:7a:62:19:ec:0e:
                    9b:04:55:2b:92:e2:5d:da:01:53:9d:37:f3:97:1d:
                    7a:30:c5:fc:c5:92:17:47:65:34:46:93:4d:8f:ac:
                    b5:44:21:8e:ba:c5:2d:fe:e3:15:58:4d:c2:55:57:
                    89:79:f3:7a:1a:da:dc:f6:dd:d7:4d:5a:f9:a5:d4:
                    95:79:ef:26:76:2c:14:d1:62:8f:6c:2a:38:5b:b9:
                    a7:24:17:bd:d2:eb:b5:ab:d7:3e:68:62:15:6c:a9:
                    0e:59:97:e2:b5:05:49:96:a1:e7:9e:fe:0e:38:2a:
                    e0:f5:15:17:90:c8:54:01:58:9c:9d:3a:78:b1:5c:
                    24:16:99:a7:c0:01:29:3e:35:2a:9b:ac:46:64:b2:
                    5e:6e:7a:ef:50:9c:bc:fe:50:a6:3e:21:bd:7c:b5:
                    44:b9:9c:9d:13:e2:13:42:6e:f5:3e:04:ee:31:f6:
                    63:09:13:80:90:45:00:89:59:0d:83:fc:6c:fe:c9:
                    d4:a0:f8:23:ea:6b:e5:6c:5f:ee:84:ef:55:62:d3:
                    ca:1d:1d:bf:b1:7f:57:b7:93:98:0c:48:36:5b:f6:
                    ad:e9:47:f5:1b:9a:c1:8d:bc:e4:c1:48:c7:0b:25:
                    8d:44:20:3a:b4:27:7c:bb:fd:a4:9d:79:d0:5d:3f:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6C:2D:B9:05:E5:DC:95:7A:FB:DD:58:6C:9C:FE:59:EB:04:0E:2E
            X509v3 Authority Key Identifier:
                keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:74:53:1b:47:65:87:34:cd:f7:02:e7:6f:c1:49:f0:61:ea:
         57:46:94:9c:d7:41:0e:19:90:cd:c7:fe:1a:60:60:5b:99:04:
         d5:b2:57:ba:ec:36:6d:d1:84:0c:84:10:9f:97:df:cd:af:0c:
         f0:9b:e7:a2:44:e8:04:cb:d9:ab:0e:98:6f:3f:2a:07:4a:29:
         56:a1:01:2c:36:f3:b2:00:1d:e6:db:78:d3:d6:e7:b2:bc:a6:
         26:8e:1f:be:0e:4a:d5:f1:84:34:fb:61:65:04:b2:20:68:80:
         c2:bf:f7:21:e2:fa:fc:0f:7b:e5:cb:66:26:1c:cd:40:22:5a:
         c0:a9:92:94:07:6e:4b:42:d5:99:bd:bb:62:16:0f:56:aa:52:
         bc:f2:5f:8b:89:8a:40:9a:a6:4f:a5:39:0c:6e:92:b0:8d:8b:
         2e:ec:6f:94:8d:36:c4:8b:a4:fe:82:c5:6e:d3:28:60:37:af:
         7a:9f:c0:c0:1f:92:80:c4:46:d2:29:c1:32:84:be:ac:83:b7:
         77:d7:38:f6:43:b6:13:ff:1a:9e:b5:d2:30:c8:2d:41:d6:4a:
         2f:4f:da:06:ef:d3:83:f2:1d:2f:bd:0b:1d:99:03:9b:81:73:
         ec:4a:a8:ba:d8:ab:3f:13:aa:55:77:d0:80:4a:a5:49:75:3b:
         f6:03:b4:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG
MDMzRDQ1QzQwHhcNMjYwMTI1MDIwNzA5WhcNMjYwMjAxMDIwNzA5WjAYMRYwFAYD
VQQDDA02OTc1N2FjZS00ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn6p2j6asD77cemIZ7A6bBFUrkuJd2gFTnTfzlx16MMX8xZIXR2U0RpNNj6y1
RCGOusUt/uMVWE3CVVeJefN6Gtrc9t3XTVr5pdSVee8mdiwU0WKPbCo4W7mnJBe9
0uu1q9c+aGIVbKkOWZfitQVJlqHnnv4OOCrg9RUXkMhUAVicnTp4sVwkFpmnwAEp
PjUqm6xGZLJebnrvUJy8/lCmPiG9fLVEuZydE+ITQm71PgTuMfZjCROAkEUAiVkN
g/xs/snUoPgj6mvlbF/uhO9VYtPKHR2/sX9Xt5OYDEg2W/at6Uf1G5rBjbzkwUjH
CyWNRCA6tCd8u/2knXnQXT/QeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZsLbkF
5dyVevvdWGyc/lnrBA4uMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE
NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw
MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1dFMbR2WHNM33AudvwUnwYepXRpSc10EOGZDNx/4aYGBbmQTVsle6
7DZt0YQMhBCfl9/Nrwzwm+eiROgEy9mrDphvPyoHSilWoQEsNvOyAB3m23jT1uey
vKYmjh++DkrV8YQ0+2FlBLIgaIDCv/ch4vr8D3vly2YmHM1AIlrAqZKUB25LQtWZ
vbtiFg9WqlK88l+LiYpAmqZPpTkMbpKwjYsu7G+UjTbEi6T+gsVu0yhgN696n8DA
H5KAxEbSKcEyhL6sg7d31zj2Q7YT/xqetdIwyC1B1kovT9oG79OD8h0vvQsdmQOb
gXPsSqi62Ks/E6pVd9CASqVJdTv2A7Q0
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:47 2026 by rpki-client