This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
File:                     AuKPnUYFERN7IUeII6e0gzlWUhI.mft (raw, json)
Hash identifier:          N8DZfBma1E+oQzLTUVtnX58HTbnN1WiXoIsAGBdgLu0=
Subject key identifier:   A6:80:6E:AB:22:28:75:D2:26:EC:B6:A9:58:DE:20:89:C6:4C:11:DE
Authority key identifier: 02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12
Certificate issuer:       /CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
Manifest number:          1F1A
Signing time:             Sat 24 Jan 2026 16:30:14 +0000
Manifest this update:     Sat 24 Jan 2026 16:30:13 +0000
Manifest next update:     Sat 31 Jan 2026 16:30:13 +0000
Files and hashes:         1: AuKPnUYFERN7IUeII6e0gzlWUhI.crl (hash: uqfL1RsoMn6/MASzFcVbGGhMosFA6nsw/XLSbHoPMQc=)
                          2: 65A7D4A0974A11EF961C4937C4F9AE02.roa (hash: bkINdpcrvpdCTVdYQexCjzhf30/7t8rUsEVGjSjglbI=)
                          3: 1268CB8C4E3E11EF891FC80CC4F9AE02.roa (hash: 6CR+TZUsylxtx0zLgY8M428FtFKBQUPpWUog06aspTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609, serialNumber=02E28F9D460511137B21478823A7B48339565212
        Validity
            Not Before: Jan 24 16:30:13 2026 GMT
            Not After : Jan 31 16:30:13 2026 GMT
        Subject: CN=6974f396-6f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:27:bc:73:52:e6:fe:3a:f0:d9:e0:ae:7b:dd:
                    42:f3:65:b1:9b:61:5b:c4:bd:70:ce:eb:84:4c:90:
                    e6:c0:38:83:e2:db:6f:19:a3:5e:38:cd:b8:aa:2c:
                    5a:db:f4:f0:36:df:bf:c0:bb:80:5c:22:c0:e3:79:
                    bf:7c:df:81:16:3a:14:b0:bf:29:1a:af:d2:d4:6c:
                    96:65:c8:86:f9:19:16:35:4a:08:74:a9:14:d6:79:
                    4b:67:9b:67:22:17:2a:35:1f:75:eb:07:ca:dc:89:
                    26:95:84:25:e9:e7:1a:e9:66:50:eb:f0:7b:dc:3e:
                    b2:40:53:df:be:cf:25:3e:3d:b8:fa:0b:49:48:24:
                    15:77:3d:ab:8c:11:5c:00:ca:04:bc:b7:da:b9:c1:
                    ab:16:5a:74:e5:c1:fe:be:44:9c:24:55:ea:ec:34:
                    6e:a3:a1:80:8d:3d:0f:20:49:67:e5:0f:51:a5:ed:
                    f5:ee:61:5d:76:89:96:44:4d:5a:fd:63:5d:7c:d9:
                    82:e4:56:c5:91:b1:bf:95:81:03:13:f5:f2:c9:e4:
                    31:57:87:1c:ad:64:1b:6a:8d:6d:28:60:a9:5f:ae:
                    f1:ff:4f:6c:31:fa:e7:54:86:a6:bf:10:97:56:07:
                    4e:a4:85:78:24:fb:20:af:95:df:f5:48:c3:2c:6a:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:6E:AB:22:28:75:D2:26:EC:B6:A9:58:DE:20:89:C6:4C:11:DE
            X509v3 Authority Key Identifier:
                keyid:02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:06:a1:2f:18:9c:16:02:51:ca:23:5f:d5:c4:6c:88:0c:
         f0:41:8d:80:35:0f:7a:df:8f:c7:38:59:88:50:d5:6e:e6:af:
         97:4b:32:4d:a4:e6:5c:be:9e:6e:ee:ff:e3:67:74:71:59:e5:
         7f:f4:43:b2:3f:f2:9c:ee:1f:56:03:cb:15:6e:83:ad:e3:c7:
         ff:a3:8d:a2:b9:99:b1:65:4f:6f:de:55:4f:1d:71:b6:41:47:
         12:88:df:54:ba:2f:3f:7a:7e:9e:5c:fa:93:58:02:00:a1:1b:
         f3:93:30:ae:99:70:a4:3e:5f:45:84:7e:c4:15:17:b8:3a:ee:
         90:92:24:7e:bd:fe:8f:b1:21:88:e5:8f:14:a6:55:6c:96:11:
         e5:5c:f6:b8:57:93:d1:22:fb:d8:b1:13:f2:04:38:61:63:d5:
         c3:6d:c3:9d:bc:41:e9:a9:24:4c:ef:c8:ec:b0:f4:f5:0f:05:
         b6:c4:e6:ae:0f:eb:6e:72:ec:92:4e:39:20:8e:82:98:22:ea:
         0b:93:fe:82:67:d0:12:4b:0c:af:42:76:53:87:73:a2:1f:98:
         e1:0d:ae:0e:e2:0e:e9:11:4e:88:3f:a6:6d:26:85:09:55:cd:
         77:8e:58:82:96:61:ee:5e:1b:f4:00:52:9e:55:e5:d6:69:c7:
         e6:a8:e1:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc2MDkxMTAvBgNVBAUTKDAyRTI4RjlENDYwNTExMTM3QjIxNDc4ODIzQTdCNDgz
Mzk1NjUyMTIwHhcNMjYwMTI0MTYzMDEzWhcNMjYwMTMxMTYzMDEzWjAYMRYwFAYD
VQQDDA02OTc0ZjM5Ni02ZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Se8c1Lm/jrw2eCue91C82Wxm2FbxL1wzuuETJDmwDiD4ttvGaNeOM24qixa
2/TwNt+/wLuAXCLA43m/fN+BFjoUsL8pGq/S1GyWZciG+RkWNUoIdKkU1nlLZ5tn
IhcqNR916wfK3IkmlYQl6eca6WZQ6/B73D6yQFPfvs8lPj24+gtJSCQVdz2rjBFc
AMoEvLfaucGrFlp05cH+vkScJFXq7DRuo6GAjT0PIEln5Q9Rpe317mFddomWRE1a
/WNdfNmC5FbFkbG/lYEDE/XyyeQxV4ccrWQbao1tKGCpX67x/09sMfrnVIamvxCX
VgdOpIV4JPsgr5Xf9UjDLGpo/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaAbqsi
KHXSJuy2qVjeIInGTBHeMB8GA1UdIwQYMBaAFALij51GBRETeyFHiCOntIM5VlIS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0
MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9BdUtQblVZRkVSTjdJVWVJSTZlMGd6bFdV
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F1S1BuVVlGRVJON0lVZUlJNmUwZ3psV1VoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzYwOS82MzJDMzBBRTQ0MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9BdUtQblVZRkVS
TjdJVWVJSTZlMGd6bFdVaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQLQahLxicFgJRyiNf1cRsiAzwQY2ANQ9634/HOFmIUNVu5q+XSzJN
pOZcvp5u7v/jZ3RxWeV/9EOyP/Kc7h9WA8sVboOt48f/o42iuZmxZU9v3lVPHXG2
QUcSiN9Uui8/en6eXPqTWAIAoRvzkzCumXCkPl9FhH7EFRe4Ou6QkiR+vf6PsSGI
5Y8UplVslhHlXPa4V5PRIvvYsRPyBDhhY9XDbcOdvEHpqSRM78jssPT1DwW2xOau
D+tucuySTjkgjoKYIuoLk/6CZ9ASSwyvQnZTh3OiH5jhDa4O4g7pEU6IP6ZtJoUJ
Vc13jliClmHuXhv0AFKeVeXWacfmqOEW
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:31:34 2026 by rpki-client