This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
File:                     9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json)
Hash identifier:          7B186VBNQWPCZG395Y7yp0ZHD4859QMKk33z2PKfZJ4=
Subject key identifier:   69:46:18:D2:7D:04:33:AD:4D:01:AC:6B:A3:0F:AF:D7:6E:FB:39:3C
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Certificate issuer:       /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
Manifest number:          0115
Signing time:             Sun 25 Jan 2026 04:06:46 +0000
Manifest this update:     Sun 25 Jan 2026 04:06:46 +0000
Manifest next update:     Sun 01 Feb 2026 04:06:46 +0000
Files and hashes:         1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: NKpCpSR1WlUjv/b23jI05I+hH97NQlzHZB1KiaB9otE=)
                          2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: Zes3MyKxaKdmoa0HmjM9ZOOYn6wyTLdeG3HU+rCiAJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
                          rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
        Validity
            Not Before: Jan 25 04:06:46 2026 GMT
            Not After : Feb  1 04:06:46 2026 GMT
        Subject: CN=697596d6-b2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:3a:c0:bb:f1:2c:90:e9:12:fd:27:d9:3a:
                    fc:ad:bd:54:f1:51:de:8f:60:61:d5:4c:5b:b0:5a:
                    b1:b1:7c:96:4b:62:53:f6:03:42:b2:69:2c:f9:7c:
                    e1:15:cd:05:4b:ad:9e:3a:81:99:16:55:98:80:85:
                    27:09:c8:7d:4a:85:6e:1c:b0:00:5a:08:ad:3f:2b:
                    b5:89:bd:bd:5f:a2:9e:b1:f8:ff:9d:49:c7:f3:9c:
                    a2:ae:b2:03:f6:0a:86:11:4c:36:f3:07:45:4c:75:
                    80:51:a0:6a:87:72:0e:72:7d:dc:b3:9e:a5:f8:55:
                    44:ae:f5:05:37:35:c2:37:aa:49:62:33:ac:d1:48:
                    8c:68:83:af:7a:f2:b6:26:b1:38:61:59:29:38:5a:
                    a6:4c:dc:ea:32:e4:b1:ad:1b:6c:ef:47:5d:ef:ec:
                    64:c1:fb:35:70:4b:dc:3d:56:50:18:a8:6e:ee:80:
                    00:4b:88:01:d6:80:48:bb:26:6b:34:8e:35:40:34:
                    27:f7:b0:7c:76:ff:61:c3:f2:e9:b9:13:94:b8:c1:
                    ae:15:f8:4e:59:68:de:f8:57:d2:74:f0:55:af:f4:
                    f4:bd:bb:17:40:f9:6d:51:17:96:72:d2:0c:cf:5d:
                    f5:82:55:22:13:51:02:64:8f:99:e4:dc:7b:62:99:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:46:18:D2:7D:04:33:AD:4D:01:AC:6B:A3:0F:AF:D7:6E:FB:39:3C
            X509v3 Authority Key Identifier:
                keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3f:b1:53:31:6c:65:44:ca:aa:0e:8d:78:21:8b:ea:99:4d:
         56:d9:9d:a4:db:a3:eb:21:c7:cd:b1:9a:9b:34:80:19:64:f2:
         74:ee:b2:24:26:8b:4b:5c:9b:16:05:cc:60:ce:c6:79:e4:96:
         1c:7a:f5:bb:06:00:1b:da:0f:7f:a9:cb:ba:f7:97:0e:1f:6c:
         1a:ef:2f:fb:9a:82:17:67:c0:47:f6:5d:91:f4:a8:8d:81:f4:
         d3:33:71:2d:6e:1f:b3:a1:9f:4b:90:f0:ed:4d:12:3e:54:3b:
         81:cd:12:cd:c6:76:1d:46:af:0f:5a:7f:46:b1:f5:37:8f:aa:
         6e:39:69:76:38:d9:46:25:95:3a:04:83:3e:31:a4:11:d1:94:
         8f:06:9f:bf:7a:df:90:83:80:98:84:f3:40:be:29:42:df:ee:
         0d:fe:64:6e:12:02:53:c4:5f:28:bf:48:9e:72:d2:7f:e5:17:
         b8:59:14:c9:60:8b:d4:29:5a:91:c2:ff:b6:0e:18:84:d8:48:
         d7:2a:bb:0e:ef:f6:df:6b:71:88:8a:d5:c8:c4:64:46:0b:01:
         79:b7:b6:fe:e2:29:08:6b:46:da:55:d1:a0:b8:47:96:47:df:
         ea:29:eb:61:da:d0:f9:3c:f1:53:e7:eb:50:34:75:25:25:03:
         10:27:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:52 2026 by rpki-client