This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
File:                     af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json)
Hash identifier:          16/IG9aelbnZ2jPL61UKJ2Z+4tZSDnBenqI6FpmNqhs=
Subject key identifier:   68:96:A3:A1:DE:38:33:94:AE:3D:CC:ED:9F:4D:89:1B:EF:8E:5B:53
Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
Certificate issuer:       /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
Manifest number:          8F
Signing time:             Fri 23 Jan 2026 05:36:33 +0000
Manifest this update:     Fri 23 Jan 2026 05:36:33 +0000
Manifest next update:     Fri 30 Jan 2026 05:36:33 +0000
Files and hashes:         1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: ir3xTYBv8j5oqGUYi7pERbd8YzO0FSWoenySYvStA14=)
                          2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
                          rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
        Validity
            Not Before: Jan 23 05:36:33 2026 GMT
            Not After : Jan 30 05:36:33 2026 GMT
        Subject: CN=697308e1-9afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:98:46:af:11:75:13:c6:25:f9:76:be:cf:
                    d7:88:dd:a5:db:b4:cb:28:b4:72:15:80:20:a2:ea:
                    87:9f:b3:c1:df:72:bc:c2:62:73:72:8a:d2:53:79:
                    fe:1a:1b:ea:f8:eb:bb:99:6d:10:8f:1a:8d:56:cb:
                    f6:ac:73:8d:6d:34:7f:63:5c:86:7f:a1:93:ee:9c:
                    af:62:8d:cd:03:fa:da:ac:bc:51:d1:f1:5c:22:ee:
                    01:8f:b0:8e:45:f7:22:ab:3f:8b:cc:3e:6b:a5:e4:
                    aa:b9:b9:f7:b5:78:4f:79:a8:cc:7a:0d:24:f6:f3:
                    c3:92:f2:82:20:10:0a:64:f2:97:f1:3f:d2:0f:3a:
                    c1:46:65:93:31:10:9e:9e:7c:38:90:45:8e:8d:93:
                    1e:57:ef:8c:51:c3:2c:70:0b:66:64:90:28:9f:68:
                    f2:f9:0b:26:fe:47:b2:4d:dc:aa:80:65:85:34:89:
                    9b:48:74:c9:61:aa:8b:dd:84:a6:f5:e9:fc:d1:94:
                    a7:85:c7:bf:7b:8b:6d:2b:35:7c:1f:b4:e4:ea:22:
                    88:b3:a3:3c:cd:05:73:0c:f5:9c:71:72:3d:d8:cd:
                    40:f3:27:c1:eb:bd:14:4f:a6:58:4e:90:7b:87:1a:
                    f3:56:51:8b:26:4a:73:9c:d5:5c:45:d6:2d:58:3b:
                    62:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:96:A3:A1:DE:38:33:94:AE:3D:CC:ED:9F:4D:89:1B:EF:8E:5B:53
            X509v3 Authority Key Identifier:
                keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:db:fe:18:66:0c:f4:cf:3b:6d:46:e4:46:e9:b5:e3:60:
         1e:7d:83:c6:db:10:5d:c7:d0:01:6c:dd:e3:30:e5:4e:79:cb:
         47:5c:c4:3c:b6:20:79:74:bb:b3:53:63:d6:53:f9:f8:4c:96:
         bd:12:ae:86:f0:0d:9a:83:93:0e:05:36:a2:f7:06:8c:d1:2e:
         b8:74:1d:1d:b3:25:eb:ea:4f:12:4f:a6:cc:b8:aa:86:d2:81:
         3c:a3:d4:e0:ca:f4:47:3b:fa:40:b7:b8:e7:e4:b5:ae:e1:f8:
         d0:4a:27:29:b8:18:34:06:8f:88:b2:42:a2:8b:89:84:d1:1f:
         47:68:ee:eb:cb:6e:2c:ef:59:a9:58:ec:b8:77:b8:a6:7f:54:
         aa:95:36:c2:5c:ab:a8:53:0f:bf:80:94:56:84:54:07:f4:3d:
         54:b6:4f:00:b7:2c:ba:2a:6d:f7:5b:f1:7f:8f:54:0e:8c:a4:
         41:5c:de:48:81:ca:9c:03:ad:b1:1b:eb:5f:8e:61:85:3a:06:
         1a:ea:bf:e5:76:e8:86:fd:75:83:42:1f:75:7e:20:86:15:85:
         4f:0a:bd:1a:1d:e8:08:6a:98:7b:96:b9:f5:c4:4c:f8:3c:74:
         8e:62:b8:27:12:a8:2b:2e:d8:84:47:7b:3b:d7:50:d7:7d:e1:
         09:47:8f:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRDRDMxMTAvBgNVBAUTKDY5RkU5NzNCN0VFQkVCMEZGODlCMjlCOUNCNUJFQkFC
RDBFMzFENkIwHhcNMjYwMTIzMDUzNjMzWhcNMjYwMTMwMDUzNjMzWjAYMRYwFAYD
VQQDDA02OTczMDhlMS05YWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0SeYRq8RdRPGJfl2vs/XiN2l27TLKLRyFYAgouqHn7PB33K8wmJzcorSU3n+
Ghvq+Ou7mW0QjxqNVsv2rHONbTR/Y1yGf6GT7pyvYo3NA/rarLxR0fFcIu4Bj7CO
Rfciqz+LzD5rpeSqubn3tXhPeajMeg0k9vPDkvKCIBAKZPKX8T/SDzrBRmWTMRCe
nnw4kEWOjZMeV++MUcMscAtmZJAon2jy+Qsm/keyTdyqgGWFNImbSHTJYaqL3YSm
9en80ZSnhce/e4ttKzV8H7Tk6iKIs6M8zQVzDPWccXI92M1A8yfB670UT6ZYTpB7
hxrzVlGLJkpznNVcRdYtWDtixwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiWo6He
ODOUrj3M7Z9NiRvvjltTMB8GA1UdIwQYMBaAFGn+lzt+6+sP+Jspuctb66vQ4x1r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENEMy9GMEE2NUMzRTFC
NjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3XzRteW01eTF2cnE5RGpI
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NENEMy9GMEE2NUMzRTFCNjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3
XzRteW01eTF2cnE5RGpIV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA69tv+GGYM9M87bUbkRum142AefYPG2xBdx9ABbN3jMOVOectHXMQ8
tiB5dLuzU2PWU/n4TJa9Eq6G8A2ag5MOBTai9waM0S64dB0dsyXr6k8ST6bMuKqG
0oE8o9TgyvRHO/pAt7jn5LWu4fjQSicpuBg0Bo+IskKii4mE0R9HaO7ry24s71mp
WOy4d7imf1SqlTbCXKuoUw+/gJRWhFQH9D1Utk8Atyy6Km33W/F/j1QOjKRBXN5I
gcqcA62xG+tfjmGFOgYa6r/lduiG/XWDQh91fiCGFYVPCr0aHegIaph7lrn1xEz4
PHSOYrgnEqgrLtiER3s711DXfeEJR4/b
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:10 2026 by rpki-client