This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
File:                     JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json)
Hash identifier:          hrw8kGE4ZVi4kdjZteDpzArl/K/vWtBUeEI+GQeErC0=
Subject key identifier:   3D:38:FA:08:3B:44:34:37:2E:5E:FB:20:F7:83:A7:0D:D9:FB:F7:F5
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Certificate issuer:       /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial:       1750
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
Manifest number:          172A
Signing time:             Sat 24 Jan 2026 16:23:26 +0000
Manifest this update:     Sat 24 Jan 2026 16:23:26 +0000
Manifest next update:     Sat 31 Jan 2026 16:23:26 +0000
Files and hashes:         1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: BYrH9faHf+JbPTei08dovAY+dXWktlz706Dyo5H+gec=)
                          2: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: SRRlg6zJvsHe+ehlTfqQhuBi26qTtwUxABtDrL92iyE=)
                          3: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: d2ZS92dXPKHWt02hcWfIkgumLHe2tKO418Hr5ogOL80=)
                          4: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: dK408LgXcJAYhoz7KnOryIVY1g3UfZjmh14JzxX/i0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5968 (0x1750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
        Validity
            Not Before: Jan 24 16:23:26 2026 GMT
            Not After : Jan 31 16:23:26 2026 GMT
        Subject: CN=6974f1fe-1334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:3a:17:31:b5:a0:c9:47:05:4c:ba:5c:b0:
                    23:38:ac:e7:11:bb:21:09:ba:45:a9:29:0c:bd:e2:
                    1b:ed:31:b7:f1:90:9b:3c:e2:d2:ee:e4:cf:04:0b:
                    fc:f0:bb:92:29:c6:1c:6d:86:9b:09:6e:2d:aa:6d:
                    97:2e:c8:df:26:7a:c9:f9:76:1f:e4:cb:0e:da:44:
                    3f:50:2e:21:79:b2:05:4c:c8:f9:56:68:ab:89:b0:
                    ef:ae:45:ad:66:d6:76:e5:96:57:1c:6f:8d:9e:59:
                    2a:1d:c0:8f:3f:5c:e0:6a:e9:76:73:91:23:cb:4b:
                    2a:8c:83:12:fb:83:b1:20:97:64:e3:25:85:62:17:
                    7b:f6:1e:6f:33:85:68:3e:97:04:bf:29:94:76:d7:
                    12:a5:ad:20:b2:db:43:82:aa:77:51:6c:be:f1:99:
                    e5:dc:2b:6b:78:48:24:81:1e:45:e3:ef:b0:12:6b:
                    fc:4b:93:a8:ba:8f:bd:62:90:09:c0:b7:6e:22:96:
                    ec:3f:a7:36:33:3d:a1:6b:44:3f:b4:e9:4d:ca:5e:
                    79:8d:78:1a:ff:e0:f1:7e:46:79:60:83:f0:6b:d2:
                    1f:c3:06:6f:fb:9c:54:b0:34:f0:a3:87:af:eb:1b:
                    5c:a5:ad:c7:cc:de:93:05:15:e4:37:7c:a5:86:6a:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:38:FA:08:3B:44:34:37:2E:5E:FB:20:F7:83:A7:0D:D9:FB:F7:F5
            X509v3 Authority Key Identifier:
                keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:68:5d:9b:e8:61:35:63:7c:81:06:06:62:9e:48:54:99:99:
         a7:1e:5c:48:4e:db:b5:cd:76:01:9d:86:52:26:25:22:14:3f:
         e1:e5:ef:8f:eb:cc:d8:cf:71:58:b0:62:82:8f:7d:81:db:cb:
         39:89:d4:a8:e0:f5:5d:dd:c6:2f:34:7a:db:b3:e0:33:10:09:
         2b:41:c3:9e:0b:20:49:57:31:20:b6:2f:75:af:70:ef:66:2a:
         3a:08:aa:72:46:91:94:92:cd:dc:63:74:1a:f1:ed:a5:01:09:
         65:c9:75:ab:5a:46:09:d9:52:b5:ca:62:9a:62:5c:04:17:7f:
         e4:9e:a3:75:16:b3:d7:f8:40:af:47:cb:97:0a:9d:15:90:98:
         8b:71:43:80:3e:e4:c9:f3:a8:9b:44:c7:cd:58:7d:e1:11:ca:
         70:c3:d0:ff:d1:86:bf:a8:24:13:b8:0b:9a:c0:b7:ef:bb:cf:
         83:13:c3:b2:f9:f0:95:1a:01:c7:1c:ae:a1:64:46:63:b6:62:
         e2:93:f6:21:25:0a:72:6b:b2:4a:11:9a:93:f0:c9:38:dc:7c:
         26:32:bc:d8:1b:a1:3f:6b:6a:9d:50:d1:19:3c:81:a7:93:8f:
         16:41:87:95:72:04:ce:2c:16:6f:8c:77:ad:0a:d3:08:c6:94:
         c3:55:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:38:38 2026 by rpki-client