This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
File:                     x6CGcqgQDaMwwSIxURVYe-YRDfE.mft (raw, json)
Hash identifier:          Cy24MZUyYk5c4jDVz9PTQt0CJCzwy4tR1Fi1aNrVaFY=
Subject key identifier:   10:0D:62:2F:BA:D2:42:1D:75:57:23:0B:0C:C4:4A:E7:9D:A9:7A:D5
Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1
Certificate issuer:       /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1
Certificate serial:       0763
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
Manifest number:          075C
Signing time:             Sat 24 Jan 2026 20:58:32 +0000
Manifest this update:     Sat 24 Jan 2026 20:58:32 +0000
Manifest next update:     Sat 31 Jan 2026 20:58:32 +0000
Files and hashes:         1: x6CGcqgQDaMwwSIxURVYe-YRDfE.crl (hash: hrvyj1W6YLavhecLwMGVMx8IiZB9rTlDbS9ZkqB8tu8=)
                          2: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (hash: UkWaQah+jS/kZ5pdkE+s9p4TMaZE55JuiL7CS2ErqqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl
                          rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149CA9, serialNumber=C7A08672A8100DA330C122315115587BE6110DF1
        Validity
            Not Before: Jan 24 20:58:32 2026 GMT
            Not After : Jan 31 20:58:32 2026 GMT
        Subject: CN=69753278-e346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:35:87:bf:17:fe:ed:d0:19:4d:c8:b0:eb:
                    ca:38:bf:6a:a8:77:5d:33:41:79:e7:35:3e:82:2c:
                    54:33:6b:19:c3:0d:91:0e:be:41:7d:37:19:18:ba:
                    a0:cf:75:15:6d:59:33:59:1e:3f:32:08:f2:d5:d6:
                    e6:bc:5d:28:ca:1f:f4:17:c3:97:5d:ee:ce:a5:ca:
                    5c:c1:d3:fc:f2:d1:2e:74:60:a9:b1:e5:75:36:70:
                    14:da:c8:df:7a:e2:47:f9:75:3c:65:1d:49:4a:06:
                    44:f1:31:89:93:cf:77:1a:97:41:94:5a:8d:51:45:
                    4c:d2:ed:0e:28:39:f2:d6:d0:cc:86:4b:dd:3d:04:
                    2f:a9:f6:cf:ba:ad:f4:c0:8c:3d:b5:be:fc:be:66:
                    16:62:26:cd:31:a7:ce:ea:8b:78:a0:97:f0:9a:f2:
                    da:60:42:2b:21:db:68:6f:67:0c:af:ee:17:c4:44:
                    0b:8e:f6:3a:ec:d8:45:69:d4:d2:39:a4:a2:e9:ca:
                    6f:6f:8a:4a:9a:8a:a5:ed:da:23:69:51:32:3d:b3:
                    ed:58:00:d4:25:0c:01:f4:18:90:6f:80:7d:23:99:
                    40:06:3c:df:fd:64:cf:d2:df:04:0f:56:44:1b:ee:
                    ee:9c:c5:61:32:5d:c0:91:09:a9:b2:ef:2f:e0:9e:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0D:62:2F:BA:D2:42:1D:75:57:23:0B:0C:C4:4A:E7:9D:A9:7A:D5
            X509v3 Authority Key Identifier:
                keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7c:7e:78:1f:ac:b9:55:66:4b:91:64:5d:65:da:fe:03:da:
         3a:30:51:14:f4:ca:fc:12:7a:ba:c0:13:83:ac:61:86:1f:bf:
         94:7e:ac:e2:65:22:4a:1e:7d:68:5b:fb:23:b1:42:54:2e:2f:
         d4:d7:75:ad:2f:57:6b:d9:0a:92:cf:47:26:bd:a4:39:db:72:
         35:d6:cb:7c:01:ac:a7:40:22:aa:12:b7:4d:f8:e7:0d:94:af:
         dc:07:8d:1e:67:06:26:8a:3c:fb:91:a5:55:2a:86:57:8d:c9:
         6a:f7:8d:4c:b8:8d:4f:22:39:1d:97:bf:f3:c4:6d:8a:6d:8e:
         7d:c6:fb:e6:5d:98:7e:69:29:36:2d:60:02:01:23:6f:e9:b9:
         11:34:56:92:ff:e1:af:a0:be:2e:d9:c2:3d:6b:3d:b5:f8:3c:
         63:80:5b:e3:82:b1:f1:85:77:8c:8e:f3:6d:d2:fc:2d:da:6a:
         aa:35:34:05:a6:b5:f6:31:33:10:c7:75:6c:d8:49:62:0b:d1:
         d0:bb:25:cc:89:7a:a8:31:6f:3f:ee:c8:3b:b8:e5:28:95:8d:
         13:2f:76:0b:8c:36:0c:b1:72:d2:34:7c:9d:dd:7b:9a:1e:1b:
         c8:07:12:4f:25:64:7d:b9:01:92:38:27:82:c7:8c:2a:58:11:
         72:6f:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:01:26 2026 by rpki-client