This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
File:                     9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json)
Hash identifier:          K0+5jv1cSpkvk48cScKR800d3rfja/lXnlGwQxZGMss=
Subject key identifier:   A0:3A:70:C9:28:C2:38:B0:36:DD:10:DE:57:20:31:16:55:8E:9A:F0
Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
Certificate issuer:       /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
Manifest number:          0738
Signing time:             Sat 24 Jan 2026 22:27:40 +0000
Manifest this update:     Sat 24 Jan 2026 22:27:40 +0000
Manifest next update:     Sat 31 Jan 2026 22:27:40 +0000
Files and hashes:         1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: PLyp9F51s1uPO220K+DM2Yo6hpNSzNfSLF/FEepmZPs=)
                          2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: ioHyUTgCHnCGMUHWoGRwcexhSo8qMCJK1mxXffaCMDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl
                          rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
        Validity
            Not Before: Jan 24 22:27:40 2026 GMT
            Not After : Jan 31 22:27:40 2026 GMT
        Subject: CN=6975475c-758c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:b3:53:07:dd:69:91:19:24:22:88:ac:52:
                    4e:8a:1c:9a:f8:29:1b:99:5c:1d:af:6a:93:fc:d0:
                    ae:d7:56:da:d8:27:21:1c:0f:c8:85:25:a0:3c:14:
                    9e:b8:4b:5b:26:da:37:bc:11:28:a2:f4:c9:a9:9b:
                    66:b8:f3:00:08:be:d0:d4:68:cf:08:9a:84:a9:73:
                    e9:c2:c8:1c:39:30:8b:bf:73:14:b1:96:61:e6:c2:
                    4f:e2:d7:83:2c:6a:8d:99:48:f3:ec:7c:fe:8f:97:
                    2c:65:6e:63:97:32:eb:cc:fb:ba:1c:99:69:f3:2f:
                    9f:1b:59:ff:ed:2a:90:bd:48:44:94:14:62:81:dd:
                    e1:c9:c1:06:26:cb:e4:f6:64:f2:80:82:54:32:46:
                    c8:87:80:0c:7e:50:c7:e4:fa:87:68:86:95:2f:98:
                    9e:05:5e:8b:d6:10:11:18:4c:07:71:2a:b7:43:81:
                    b0:0d:e5:57:2f:28:9a:42:04:f1:a3:73:9a:88:8c:
                    46:12:fd:94:ed:96:6b:a4:42:f0:38:ce:d8:39:43:
                    c6:22:62:1b:04:87:1a:af:c4:df:44:4b:37:2d:98:
                    cf:f0:bc:3e:3c:c3:ce:c5:bf:f7:b3:79:a9:4c:11:
                    97:41:96:45:38:ba:ea:09:b7:4d:6d:dd:02:da:d5:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3A:70:C9:28:C2:38:B0:36:DD:10:DE:57:20:31:16:55:8E:9A:F0
            X509v3 Authority Key Identifier:
                keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c0:dd:3c:95:b9:93:e3:1f:b9:3f:d3:51:d6:a7:bc:b8:6b:
         92:2c:d9:0e:8a:65:da:ac:92:50:d4:3c:72:a1:77:76:f2:f8:
         38:27:45:75:3e:04:6f:a4:f8:ff:be:24:e6:9e:21:23:fb:3f:
         82:ff:09:26:96:35:3e:f4:5d:98:f1:9b:56:9d:4d:51:3b:f3:
         81:4c:3c:41:bc:99:79:3e:f1:0a:84:e9:6a:e2:d9:d6:de:05:
         56:47:95:a3:b8:b6:e0:13:9d:54:a2:00:39:1b:56:46:df:3c:
         e2:f7:1a:e0:86:41:9f:58:2f:30:b5:27:f5:f3:7b:4e:2e:4e:
         6e:e4:49:e6:35:52:73:10:89:ac:a3:74:1f:46:2b:97:5c:f2:
         a6:ad:bc:8d:7b:db:e5:77:60:c4:a3:1c:b6:ee:32:dd:cc:0f:
         1e:f6:67:3b:1d:0f:ca:7e:09:c1:0c:2a:57:bc:08:d5:ec:4e:
         30:25:e4:42:d9:6d:ea:ca:7a:0b:d5:14:ac:62:53:17:3d:b2:
         c1:75:cc:13:6b:53:0b:2b:9f:34:81:87:c3:0d:c3:08:d6:74:
         26:a0:15:9b:fa:f8:91:a5:ba:38:16:86:63:92:98:59:ac:7d:
         4b:0e:ba:bf:71:4b:8a:cc:67:e1:d5:81:5d:d3:30:a6:09:8c:
         75:20:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:41 2026 by rpki-client