This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File:                     mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier:          DIDG6eGT1J+iatbIf1cfm/+zWzfAlVZMJx/lxOqrgew=
Subject key identifier:   46:C1:D3:1F:0E:E8:40:6E:E1:8A:53:DC:F5:34:25:C1:0B:43:46:25
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer:       /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number:          C0
Signing time:             Sun 25 Jan 2026 05:09:29 +0000
Manifest this update:     Sun 25 Jan 2026 05:09:29 +0000
Manifest next update:     Sun 01 Feb 2026 05:09:29 +0000
Files and hashes:         1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: 3ideigAxia7dAVzFfd/iUxhFodPk3bp564ocEqpdWYM=)
                          2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: h3Oxx5N9hnP5kzs3FjufA/TMLG+2ZY4lW89dn+znNCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
        Validity
            Not Before: Jan 25 05:09:29 2026 GMT
            Not After : Feb  1 05:09:29 2026 GMT
        Subject: CN=6975a589-c956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:11:4e:ec:73:cb:01:bc:c9:9b:6e:8f:be:
                    91:6e:80:41:f8:2c:0a:17:8b:40:7e:bb:3c:43:a7:
                    c1:4f:91:2e:fd:4b:11:f9:ac:80:98:32:cf:cd:bd:
                    e6:ee:5b:18:c8:65:29:58:fe:78:69:58:c6:2c:c2:
                    9d:f4:f2:cf:44:63:27:70:0a:83:f3:16:6e:be:08:
                    cd:18:4a:d6:36:47:0c:b4:fe:27:63:06:ea:1b:21:
                    06:2b:e1:75:04:b5:73:f5:5d:ca:92:8c:4e:92:b0:
                    63:bf:9e:8f:34:42:30:fb:ff:7a:6e:28:31:2e:ed:
                    83:b4:96:c0:a5:e1:53:28:ae:de:dc:0f:15:09:e9:
                    71:cf:18:58:e2:7b:62:cf:5e:f6:aa:88:15:8f:18:
                    14:56:c0:3f:0d:6b:1a:d0:e6:8d:af:b3:32:a1:1e:
                    e6:69:6b:f6:a7:91:28:4b:cd:3e:0e:d5:8c:ce:bf:
                    2f:a3:04:c8:37:1f:0e:b2:a1:0d:31:57:ea:55:71:
                    01:b8:2a:1b:3a:2a:f9:3a:44:f6:d0:26:9b:f3:e0:
                    42:6c:14:c7:9a:ae:5e:70:53:18:57:a3:d8:e9:eb:
                    b4:ed:45:8f:0c:55:86:18:f7:86:20:62:af:ca:1e:
                    94:35:4c:f3:d8:44:9f:8b:a9:04:07:1e:77:d7:d3:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C1:D3:1F:0E:E8:40:6E:E1:8A:53:DC:F5:34:25:C1:0B:43:46:25
            X509v3 Authority Key Identifier:
                keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:e9:c0:42:56:44:61:dc:93:75:c9:5f:d8:b5:fb:c9:3b:
         ba:7c:96:e5:ed:fa:34:cd:a4:7b:07:2f:88:dd:14:8a:7d:71:
         74:90:46:f3:32:d1:ed:79:58:49:c9:84:00:87:d5:25:22:02:
         ee:38:1d:85:e2:6a:78:43:61:cf:7a:1a:ff:48:9e:5f:27:4e:
         be:45:67:f4:1d:75:02:f1:3f:43:a4:83:8b:bd:84:cc:83:90:
         09:f7:bc:64:d3:87:e0:8d:bd:f9:b5:fd:79:10:73:28:11:5d:
         ac:a4:3b:d5:13:20:ef:86:3d:46:4a:d0:d6:25:8b:a2:f8:8f:
         ac:15:41:d9:95:77:a8:45:ba:19:2d:d7:b2:d9:41:57:59:10:
         09:ae:62:a1:33:01:87:a7:0d:d3:0c:4a:93:c4:87:b1:71:05:
         2c:91:51:34:f8:08:0e:1a:fe:f9:44:bd:24:10:f1:76:b3:54:
         3d:b3:b3:44:38:47:cc:e1:63:45:d6:0b:f1:25:25:3c:ff:09:
         47:77:32:42:b5:d6:db:7f:eb:3d:0b:40:c5:73:66:2b:7a:19:
         0f:0e:34:e7:c6:59:8a:d0:ce:d5:46:34:48:a4:03:62:03:6c:
         19:fd:b8:94:1a:06:30:61:81:31:1e:95:91:13:e1:1b:1d:01:
         87:9b:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:39 2026 by rpki-client