This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
File:                     9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json)
Hash identifier:          0ufhdjJl1TzC8qa62jvbfsYMo6iTzw421o/X4cljUdo=
Subject key identifier:   45:97:C5:30:6A:03:A8:81:CA:41:B5:B7:51:82:DE:9F:3C:5D:47:1D
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Certificate issuer:       /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial:       0375
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
Manifest number:          0371
Signing time:             Sat 24 Jan 2026 23:45:01 +0000
Manifest this update:     Sat 24 Jan 2026 23:45:00 +0000
Manifest next update:     Sat 31 Jan 2026 23:45:00 +0000
Files and hashes:         1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: Le4r9hm7Dl93Hy6qdVmQoTi0t12LlbGOJF1pL3r5iTo=)
                          2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: X05nJ1j9oFxXKovC7MyWIX4IdW9s4NwJbF0XevapeM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
        Validity
            Not Before: Jan 24 23:45:00 2026 GMT
            Not After : Jan 31 23:45:00 2026 GMT
        Subject: CN=6975597d-575c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:4b:18:e9:af:93:17:06:df:19:71:d0:1e:
                    7b:b3:93:9e:49:a7:df:43:38:5a:5f:05:d2:35:45:
                    64:4f:89:be:6f:d4:b8:38:53:71:f8:f5:d7:bf:13:
                    4e:7d:cc:4e:ab:60:9a:12:48:19:2d:0a:cc:6b:55:
                    05:85:97:b5:f8:d7:ec:9f:fe:f8:4b:0c:e3:75:68:
                    9c:dd:68:cf:65:ad:18:21:31:d6:89:45:1c:a9:5a:
                    cd:21:7d:b1:24:ac:57:da:d5:e1:2a:2d:f4:8d:12:
                    fb:cd:cb:80:2e:bb:f4:9c:3b:75:33:2f:c9:24:6c:
                    d3:ed:02:c0:fa:5c:9a:cb:54:8e:14:c1:f8:64:a0:
                    c3:76:e5:cc:4c:00:09:64:c6:41:a7:c0:13:be:5d:
                    13:8a:83:dc:68:52:64:4c:ca:cf:c8:48:a0:e3:e4:
                    65:96:1f:99:42:fd:75:a2:22:c6:ca:31:19:32:65:
                    9c:9c:ce:e3:cc:19:b0:e1:bb:ba:b6:9f:e5:4e:b4:
                    cd:41:59:fa:51:47:e4:88:9f:d6:d9:f9:f5:90:89:
                    f3:95:73:25:31:12:2f:26:a5:f0:58:00:d8:6e:bc:
                    dc:fd:2e:01:d2:cb:b2:b4:61:c4:cd:fd:71:b7:10:
                    8a:bd:0d:55:9b:56:d1:68:8f:fd:52:33:01:fc:55:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:97:C5:30:6A:03:A8:81:CA:41:B5:B7:51:82:DE:9F:3C:5D:47:1D
            X509v3 Authority Key Identifier:
                keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:49:1b:93:77:fa:02:9f:7d:20:c4:10:7d:d1:fa:6b:df:34:
         82:90:d1:39:fd:58:46:a1:91:ab:f3:28:bb:2e:1e:16:42:dd:
         c9:88:83:3c:28:75:11:0c:fd:28:95:c6:79:5d:f5:35:56:5b:
         a4:6e:ce:4c:dd:15:e3:69:9a:96:48:05:5e:41:f4:90:cb:45:
         36:ab:05:07:66:4a:17:6d:19:b6:27:ce:7b:55:45:3d:81:5f:
         16:1e:d4:f4:90:9d:2c:fe:40:74:90:22:98:a2:a3:32:5a:84:
         0e:14:6d:e5:78:6f:64:cc:0a:a6:59:5e:ac:ed:98:65:99:d6:
         2f:c5:ba:a5:07:7f:f2:59:41:66:03:28:76:d4:7b:12:8d:74:
         5f:24:0c:bb:29:60:4c:5c:cc:38:a9:d9:b9:11:41:00:06:1f:
         1d:4a:0b:86:61:39:c1:d5:40:82:25:52:18:97:28:d6:ef:37:
         b1:95:bd:8b:75:b7:47:eb:4e:ff:96:3c:67:97:be:2a:b7:16:
         7f:78:3a:e9:0e:3e:e8:20:a9:55:15:bf:e7:a4:78:c6:07:79:
         b4:bb:01:a0:03:62:6b:c9:81:89:0e:be:de:d9:81:8b:62:e7:
         dc:57:c8:c4:aa:cc:41:6b:4d:9d:61:f0:a5:59:9a:0a:94:98:
         a6:be:1d:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz
NkY4NzE5MEIwHhcNMjYwMTI0MjM0NTAwWhcNMjYwMTMxMjM0NTAwWjAYMRYwFAYD
VQQDDA02OTc1NTk3ZC01NzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytdLGOmvkxcG3xlx0B57s5OeSaffQzhaXwXSNUVkT4m+b9S4OFNx+PXXvxNO
fcxOq2CaEkgZLQrMa1UFhZe1+Nfsn/74SwzjdWic3WjPZa0YITHWiUUcqVrNIX2x
JKxX2tXhKi30jRL7zcuALrv0nDt1My/JJGzT7QLA+lyay1SOFMH4ZKDDduXMTAAJ
ZMZBp8ATvl0TioPcaFJkTMrPyEig4+Rllh+ZQv11oiLGyjEZMmWcnM7jzBmw4bu6
tp/lTrTNQVn6UUfkiJ/W2fn1kInzlXMlMRIvJqXwWADYbrzc/S4B0suytGHEzf1x
txCKvQ1Vm1bRaI/9UjMB/FWILwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWXxTBq
A6iBykG1t1GC3p88XUcdMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD
QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv
TXhuTG1KNXJqSGcyLUhHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuSRuTd/oCn30gxBB90fpr3zSCkNE5/VhGoZGr8yi7Lh4WQt3JiIM8
KHURDP0olcZ5XfU1Vlukbs5M3RXjaZqWSAVeQfSQy0U2qwUHZkoXbRm2J857VUU9
gV8WHtT0kJ0s/kB0kCKYoqMyWoQOFG3leG9kzAqmWV6s7ZhlmdYvxbqlB3/yWUFm
Ayh21HsSjXRfJAy7KWBMXMw4qdm5EUEABh8dSguGYTnB1UCCJVIYlyjW7zexlb2L
dbdH607/ljxnl74qtxZ/eDrpDj7oIKlVFb/npHjGB3m0uwGgA2JryYGJDr7e2YGL
YufcV8jEqsxBa02dYfClWZoKlJimvh1R
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:12 2026 by rpki-client