This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
File:                     _b1MDTRJL1zq5IeeR2J5blJwB-s.mft (raw, json)
Hash identifier:          8RYZFFBPOKAuZY8faNqfrrLP+Y2OpuA4dhVju3BGf1I=
Subject key identifier:   52:B6:96:54:E6:BF:B3:25:F2:D7:82:22:AE:76:BB:0F:25:8C:45:D8
Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
Certificate issuer:       /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
Manifest number:          0210
Signing time:             Sun 25 Jan 2026 02:08:12 +0000
Manifest this update:     Sun 25 Jan 2026 02:08:11 +0000
Manifest next update:     Sun 01 Feb 2026 02:08:11 +0000
Files and hashes:         1: _b1MDTRJL1zq5IeeR2J5blJwB-s.crl (hash: 3DfD/HOW8iXo4uV+zVhCLo9K/vVoddlgd9D/0u4K+tw=)
                          2: C724415E35F911EE9F140449C4F9AE02.roa (hash: Pc8IQ1ldo5iSgY4Srlo9JYYY24JrbIJTNy/Hk8PPyVE=)
                          3: 86516CF04BE911EE8640FE79C4F9AE02.roa (hash: JOQ3FTCOYnFyVjIC1sbOokkZryNT0nxy6ytkaThHIoc=)
                          4: 208652BA35F911EEB45F8B44C4F9AE02.roa (hash: U9cevaQb64/vV8AH9HQirRbkVBcH0enCs25PMnDjBWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
                          rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D53, serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
        Validity
            Not Before: Jan 25 02:08:11 2026 GMT
            Not After : Feb  1 02:08:11 2026 GMT
        Subject: CN=69757b0c-49bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:57:66:02:09:e2:56:63:6d:68:d3:c7:36:
                    de:85:eb:cd:a5:25:e9:22:50:58:66:37:70:69:77:
                    0e:2f:49:08:00:82:5b:da:c0:dc:dc:30:48:8a:53:
                    41:6b:2c:9f:34:15:e2:e8:0c:98:be:92:f7:8a:ae:
                    54:ae:f3:1f:88:72:29:32:7d:c9:a8:81:80:43:37:
                    03:96:05:2f:38:83:5e:0d:ee:57:66:22:5a:77:ed:
                    c6:e0:99:ee:c9:59:4e:9c:11:37:92:24:1a:2a:47:
                    de:14:8d:e9:ae:ab:60:e6:3d:ac:38:31:eb:24:d3:
                    39:7c:11:6f:94:13:31:58:cd:e7:2b:df:a6:8c:ad:
                    e7:f7:e6:62:34:81:0b:1e:4e:f1:99:d5:a6:db:aa:
                    cb:09:99:5f:88:0d:9c:a4:a8:3a:a1:97:fc:0a:a3:
                    4c:07:00:3b:f5:9c:2a:19:bd:55:89:db:8a:13:fa:
                    37:0e:97:3e:2e:d9:0e:af:bb:2e:34:2c:93:22:2f:
                    7a:86:5c:c0:d6:7f:30:39:2f:ab:a8:ec:27:8c:dd:
                    47:0d:31:2e:d9:37:0f:ba:5a:68:ab:55:b6:4a:76:
                    63:2b:7f:b2:44:9b:78:0d:51:04:13:63:25:d0:03:
                    e6:de:8e:d8:4f:a4:2c:e9:1c:76:6c:a3:93:d6:e3:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B6:96:54:E6:BF:B3:25:F2:D7:82:22:AE:76:BB:0F:25:8C:45:D8
            X509v3 Authority Key Identifier:
                keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:40:a0:d7:56:07:de:01:ca:e9:16:78:c2:ea:37:f2:41:
         73:76:1d:ad:82:d4:51:f4:66:0b:e6:31:d8:72:94:39:00:7e:
         32:74:e6:66:23:70:3a:24:8c:3e:b8:8a:3d:13:d9:af:37:ae:
         00:c2:6b:de:cb:a3:f7:63:a2:06:39:f1:7c:1e:ff:5f:be:eb:
         fa:2a:55:70:0e:a1:7c:5a:fd:70:e8:a7:9f:0b:91:d0:85:db:
         a3:49:d0:e2:20:55:5a:2d:93:ef:74:b1:46:2b:8d:88:36:9c:
         2e:e3:e7:8d:ec:82:b9:1d:1c:39:4a:b1:2e:4d:71:cf:df:ed:
         6d:24:e5:51:59:3a:2a:21:2f:aa:3a:1e:3a:ee:88:f3:b5:a7:
         b4:01:ba:0b:74:f4:31:01:6f:a9:c0:26:70:06:c6:36:54:00:
         72:a4:a4:80:fc:b0:d1:5d:71:31:f9:6c:89:63:7a:d3:48:ac:
         fc:d4:8d:29:49:da:b6:4c:d2:32:bf:18:15:e5:27:d3:c9:0d:
         f5:9c:47:08:5a:de:8d:e8:9c:81:cc:74:50:05:68:47:8a:dc:
         a8:81:c6:c1:e1:07:bb:fb:41:f3:b3:48:d3:8d:d8:c0:af:05:
         39:cf:69:31:8e:33:fb:2d:78:9f:6d:bc:41:ee:23:80:f2:83:
         75:f3:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:42 2026 by rpki-client