This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File:                     aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier:          cHntpnyiv4CS5tgJVvnLgCUs0Pz07YCgCYhizBOYL2s=
Subject key identifier:   A8:55:5F:AA:CC:FE:CB:F7:C1:5C:1B:85:50:DF:81:D2:78:B7:D0:A5
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer:       /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial:       0E7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number:          0E63
Signing time:             Sat 24 Jan 2026 17:26:40 +0000
Manifest this update:     Sat 24 Jan 2026 17:26:39 +0000
Manifest next update:     Sat 31 Jan 2026 17:26:39 +0000
Files and hashes:         1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: 1FkdXqR7GPN2TQ2HagVxaanjixILNnhzM6UUqzA1K2I=)
                          2: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: TISln3OWwFMxrFHBXjhzJmsuAj7ldgpqpKcI/7qFxoU=)
                          3: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: cRBzFvwtKhO498akQMxVv4jrQ/Ofn1ctENdiE3NLHgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
                          rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3707 (0xe7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
        Validity
            Not Before: Jan 24 17:26:39 2026 GMT
            Not After : Jan 31 17:26:39 2026 GMT
        Subject: CN=697500d0-1124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:e7:f0:e9:b7:e6:bf:06:e6:21:13:88:df:
                    13:09:5b:04:00:07:3f:dd:55:1d:19:68:c9:13:fe:
                    dc:96:cd:fc:e3:8f:5d:67:39:57:ff:de:f0:dc:fe:
                    5f:c5:93:3c:f4:6b:32:72:ba:31:39:3c:da:3f:b7:
                    c9:6d:aa:f9:e0:10:13:3b:0a:88:0d:cd:12:45:33:
                    ed:29:d1:84:cf:0f:5e:9a:6a:52:57:cb:f9:a0:a2:
                    e6:4d:50:8d:57:1b:41:33:e0:b2:64:8d:53:0a:87:
                    21:6f:2e:31:f3:fd:7b:2e:cc:91:91:df:ff:02:7e:
                    3a:2d:09:03:fb:db:5a:23:36:43:1f:fc:1b:6e:4c:
                    1a:8d:ee:10:47:5b:9e:07:17:c2:21:57:1a:c4:4a:
                    55:7e:fa:52:d9:23:04:29:9d:6f:4c:a5:e0:82:4f:
                    8d:eb:1b:7c:87:e5:10:23:c2:3f:f4:5e:f8:24:2b:
                    17:4f:92:60:60:c5:42:67:f7:52:68:e3:59:33:60:
                    1e:8d:e3:8d:45:7e:0f:9e:e4:23:bd:74:28:61:95:
                    29:05:e9:10:cc:45:60:1f:86:77:6a:07:ee:ba:6e:
                    85:8f:31:e2:a8:54:ae:f3:dc:83:b8:4f:b2:4c:fd:
                    c8:61:37:44:2c:42:7d:11:9e:62:c9:20:20:2f:7e:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:55:5F:AA:CC:FE:CB:F7:C1:5C:1B:85:50:DF:81:D2:78:B7:D0:A5
            X509v3 Authority Key Identifier:
                keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:3e:1f:86:a1:d9:5a:c8:ce:60:6c:60:3d:dc:4a:9a:c0:bd:
         0a:d2:2d:0b:77:f4:43:63:d0:26:6b:51:8e:37:bc:09:cf:f0:
         1e:13:24:af:e7:c3:be:12:5a:05:1b:ff:d7:9e:c5:7d:c3:7a:
         9f:de:b7:3d:32:59:08:94:53:a5:32:80:2d:17:18:5b:21:8d:
         64:39:a0:b7:7d:5c:46:ab:a9:79:e4:0a:b3:29:65:dc:ac:3b:
         65:59:97:fb:c6:16:9e:98:b2:3f:01:b0:42:1a:b2:1d:c4:a6:
         ed:c9:ca:6e:48:fc:1f:d5:dc:90:26:d9:05:e7:f1:b1:a7:9e:
         64:b2:3a:77:52:1c:00:55:d3:aa:2f:a3:3b:a1:b6:29:77:be:
         f4:cb:36:c4:9a:ad:ac:f7:51:05:bc:c7:83:1d:af:b5:83:42:
         46:1b:a7:0b:4a:37:cc:ea:c7:e8:50:1d:b3:39:c0:51:a2:02:
         7b:f9:91:6c:72:3b:dd:1e:8a:5c:98:eb:58:5d:95:f3:e5:1a:
         e6:db:de:dc:85:10:c1:40:3a:63:9a:3e:e9:1c:68:07:2e:5f:
         7a:98:fb:c3:1f:a7:a0:ba:6b:cd:a7:20:f9:51:91:4b:f3:c8:
         3a:aa:ea:15:94:72:20:56:a8:8c:57:e3:b3:b2:ce:f1:7c:4a:
         91:d9:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:58 2026 by rpki-client