This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
File:                     isQ8i2LLoieYw56lRmt0xBihqQc.mft (raw, json)
Hash identifier:          M0126y5WSfbog7TeL8bf82YAYEYXHdEKS4PsMxYko5c=
Subject key identifier:   F6:2A:A9:BC:94:E9:71:D6:D1:52:02:7A:99:6A:D5:5F:84:37:19:B9
Authority key identifier: 8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07
Certificate issuer:       /CN=A9147A12/serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
Manifest number:          09
Signing time:             Fri 23 Jan 2026 07:06:10 +0000
Manifest this update:     Fri 23 Jan 2026 07:06:10 +0000
Manifest next update:     Fri 30 Jan 2026 07:06:10 +0000
Files and hashes:         1: isQ8i2LLoieYw56lRmt0xBihqQc.crl (hash: mhbwOuI67hzYsnbQFyYUODJqIPnY2ORo6QtDfFD6oi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.crl
                          rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147A12, serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907
        Validity
            Not Before: Jan 23 07:06:10 2026 GMT
            Not After : Jan 30 07:06:10 2026 GMT
        Subject: CN=69731de2-7855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:f2:1c:63:9b:e8:8c:5b:b1:d7:42:8a:47:
                    a2:4f:52:0c:de:04:c3:30:37:c8:fd:3a:92:63:89:
                    85:89:e0:14:12:90:6a:24:83:e1:2c:6f:f0:b1:9b:
                    fd:23:c5:0d:aa:50:b8:37:bc:1f:61:82:76:b0:fa:
                    46:cd:11:de:73:7f:39:b9:ad:2a:ce:3b:82:7b:c8:
                    85:9d:ba:98:e3:99:b6:6c:28:7d:87:ca:cb:48:6c:
                    d1:f1:0c:bd:12:f7:ef:7d:3c:46:6f:7b:4c:3f:52:
                    f4:94:25:14:3c:f3:4a:5c:4e:4a:93:d3:cd:11:f8:
                    6d:c6:08:19:b4:bf:2e:a2:09:a3:64:1a:3d:3c:bc:
                    57:f7:39:c5:47:36:11:29:34:a0:ba:95:da:a6:e4:
                    c0:f4:31:b6:59:1b:d6:59:5d:ea:10:05:6f:7d:58:
                    df:90:d7:e4:c5:99:1f:9b:9f:32:4c:9a:8d:d9:f7:
                    cd:fc:3b:86:4c:fc:c2:a5:1e:8f:1e:75:fc:43:44:
                    ad:2f:a5:61:f2:3a:ce:7a:1f:c1:0d:f5:9a:f7:fa:
                    f2:f6:c7:09:fd:c1:c2:57:4a:e4:d6:66:91:c1:d3:
                    60:32:84:8f:eb:fb:45:7a:a5:82:14:32:9c:f6:2f:
                    43:7e:01:ed:3f:26:cb:82:a4:79:d2:91:e5:4e:4e:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2A:A9:BC:94:E9:71:D6:D1:52:02:7A:99:6A:D5:5F:84:37:19:B9
            X509v3 Authority Key Identifier:
                keyid:8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e1:2f:8e:63:93:ed:ca:bb:59:6c:79:ec:b8:75:07:92:8b:
         7a:03:1b:86:c8:05:85:95:4d:96:b8:e3:77:1b:2c:a5:00:1b:
         dd:8b:f8:ba:61:1a:a4:14:9b:72:bd:a8:68:0c:39:07:50:71:
         9c:c4:d8:1c:78:1d:df:32:d1:15:ac:93:07:d1:1e:35:88:53:
         7d:a4:1c:9b:90:cf:19:59:65:c2:e9:f5:d4:47:85:9e:81:ec:
         4d:6f:1c:1b:85:f0:ae:fe:c6:2e:29:7f:ae:f7:0f:05:a3:6d:
         9e:bb:27:a3:6d:3a:88:c6:d5:0f:80:a2:b6:1b:dd:c0:b7:21:
         fa:b8:92:f8:71:fa:16:df:8d:65:e5:28:51:2b:86:e4:99:03:
         f7:ff:1f:c9:46:0b:1f:0c:44:5c:41:66:07:b9:45:51:f0:f3:
         67:6a:8e:ab:66:99:ba:6f:18:2f:a0:ae:65:90:d2:2f:3d:d2:
         18:36:da:49:52:41:a3:1c:ac:2e:40:dc:a6:59:02:37:85:25:
         7f:8b:e1:af:b5:19:d0:d6:c7:b6:ad:cc:4c:d2:6d:5e:7e:35:
         aa:aa:cb:f8:79:49:46:4a:e3:1d:50:90:c7:26:9e:47:17:ee:
         66:f2:eb:43:7b:8b:53:83:9e:64:12:a7:a3:7c:79:21:6d:96:
         e4:e8:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:39 2026 by rpki-client