This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
File:                     CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json)
Hash identifier:          lf3mxxaJB/99Zmwz6R+8TdNZJLmg4Vvz2KpQdiYYA4M=
Subject key identifier:   52:6D:48:7B:94:F7:78:B9:EC:D1:A6:2E:18:EE:21:D6:AA:AD:6E:F9
Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
Certificate issuer:       /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
Manifest number:          9E
Signing time:             Sun 25 Jan 2026 05:31:56 +0000
Manifest this update:     Sun 25 Jan 2026 05:31:55 +0000
Manifest next update:     Sun 01 Feb 2026 05:31:55 +0000
Files and hashes:         1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: 2720GTmIcmVC6QlXzM9/TvBkz9Z9XN0GNeg5tnB+xQg=)
                          2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: lfdyi++bWKTqNq0AntGKkt45cnrhAjp+IKIVrz1KfzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
        Validity
            Not Before: Jan 25 05:31:55 2026 GMT
            Not After : Feb  1 05:31:55 2026 GMT
        Subject: CN=6975aacb-6725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:b6:ac:f5:28:b1:34:1d:15:5d:30:89:1e:
                    0d:61:9c:96:29:d8:02:0e:11:52:1a:6e:74:3a:c8:
                    41:3d:09:de:de:c4:43:41:af:36:08:f3:41:a6:9f:
                    24:14:d2:84:fa:38:2f:df:66:8a:dd:ca:7e:52:c6:
                    67:19:ea:34:4c:5b:a5:b9:e2:6b:15:d5:47:d3:d0:
                    be:91:58:fa:cb:54:9e:eb:86:50:fb:02:4d:d2:b1:
                    e3:c0:8e:4d:8c:47:8e:f7:df:49:fa:b3:56:f2:fb:
                    a1:61:9c:3c:96:f6:5b:67:4e:92:a8:05:44:83:b8:
                    cb:25:21:22:b7:97:8e:93:5d:f0:10:3e:50:f8:f7:
                    b1:63:b6:1c:ac:2b:12:ef:fc:76:fe:b7:b7:c8:89:
                    78:5b:48:00:1b:e1:64:9a:2e:32:ec:a9:37:9f:38:
                    eb:9a:fc:ac:9b:18:4d:e3:66:ee:09:3b:30:2b:88:
                    3a:5b:fd:63:f5:07:dc:c1:f1:b0:10:62:b5:f7:6a:
                    2a:aa:39:aa:37:70:5e:b6:c9:95:d5:3f:95:46:cc:
                    7d:70:b9:1e:29:ab:e9:79:f8:f7:93:b6:9a:d1:43:
                    3e:cd:6f:01:04:f8:95:c1:d0:3a:6c:08:03:7a:50:
                    3a:f6:ac:d0:46:14:dd:ac:37:ea:7b:bd:22:dc:15:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6D:48:7B:94:F7:78:B9:EC:D1:A6:2E:18:EE:21:D6:AA:AD:6E:F9
            X509v3 Authority Key Identifier:
                keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:05:70:1c:fa:f6:e1:8d:7c:d2:a0:ee:50:5e:b4:4d:41:8c:
         27:ad:0f:6f:df:ce:0c:3f:50:c6:88:3b:88:ad:c0:0c:71:90:
         c3:13:59:64:ba:80:47:7c:45:bc:0c:e8:46:87:4c:09:2d:35:
         7d:bd:65:b6:68:ca:39:77:83:3e:ae:74:84:b4:ac:25:df:95:
         f2:5c:61:5a:1a:46:c2:d3:65:14:ac:81:35:8c:97:4b:09:92:
         b8:23:e1:dc:41:b2:d6:71:28:fc:f1:d7:d4:14:32:62:11:47:
         c5:bc:30:5e:36:68:c5:97:9d:b7:4e:19:08:cb:72:81:cc:d2:
         ae:2e:3a:4b:b6:d8:42:54:0b:21:1f:04:ef:6f:72:1e:ee:eb:
         92:91:70:df:1e:d7:c0:fc:63:8d:85:fd:1a:19:d0:bb:f7:6d:
         67:d0:52:dc:4c:92:54:9b:a5:98:4a:8c:45:b9:c1:54:87:6d:
         15:85:2b:18:32:95:f1:dc:23:a8:a4:50:fd:6d:95:1a:5d:76:
         e0:3b:7b:98:14:76:9f:bb:66:2e:0c:e4:0a:0d:99:5d:af:04:
         81:5a:5f:c4:4e:98:9a:78:35:ac:d9:71:d1:39:a6:32:1c:c3:
         85:61:24:bc:60:24:79:e1:3b:da:a4:72:ba:97:7a:e9:a2:ba:
         14:ee:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:20 2026 by rpki-client