This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
File:                     9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json)
Hash identifier:          JBsrzf9VXG1uICvLUfJAsgS/uF4tH/BYZs2iWauCLjY=
Subject key identifier:   B2:EC:B8:C4:15:D9:9F:8A:C9:E8:E3:A9:39:E7:FD:30:EF:6C:8C:3C
Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43
Certificate issuer:       /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
Certificate serial:       18A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
Manifest number:          1892
Signing time:             Sat 24 Jan 2026 16:15:27 +0000
Manifest this update:     Sat 24 Jan 2026 16:15:26 +0000
Manifest next update:     Sat 31 Jan 2026 16:15:26 +0000
Files and hashes:         1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: MJQhRDE6DDh7JDAyCVYy6Awxfr5arUcAlQKX71WHMBg=)
                          2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: SG84Ql2WZU2tVPSt9acptD5MjoBt3bPngYFdIyJhUe0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl
                          rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6305 (0x18a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154020, serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
        Validity
            Not Before: Jan 24 16:15:26 2026 GMT
            Not After : Jan 31 16:15:26 2026 GMT
        Subject: CN=6974f01e-81a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:66:b5:19:cd:d4:7f:a3:d2:f1:f5:71:05:99:
                    73:2f:be:a1:b0:ad:b0:1f:06:c4:c5:07:33:a5:5a:
                    ff:d4:23:bd:6f:11:8a:de:14:09:1b:ec:1c:74:01:
                    5a:8f:77:8d:12:01:c3:1f:7e:53:f0:38:1d:bb:c2:
                    68:2b:84:cc:89:5a:5c:5a:50:e6:da:fe:db:c0:9f:
                    57:7f:12:0b:22:a2:b4:f1:19:b7:1e:b6:10:f3:6d:
                    0c:85:25:d6:b2:19:14:09:8c:0a:97:f4:4f:cb:6b:
                    97:70:48:4e:fb:b9:12:cd:70:68:fe:d0:d4:69:b5:
                    a5:a5:20:2c:07:e1:fc:ee:2d:6f:a6:e6:48:35:ba:
                    d3:da:44:32:11:0b:9d:f6:53:60:d6:da:31:c3:f8:
                    de:b2:64:5e:a2:1c:63:fb:90:20:61:db:94:f4:f9:
                    5b:8e:ac:a6:e7:f6:5a:4f:ee:02:d5:a2:80:aa:a9:
                    42:65:86:c4:36:20:0c:b7:ce:c1:2a:17:a7:62:ca:
                    c5:6a:10:2f:86:33:a9:cd:70:b0:d1:6a:2e:3f:7a:
                    ab:10:d9:c7:51:dc:1c:3f:d1:1d:48:85:e0:dd:5c:
                    ca:fc:5b:97:ce:1c:ca:c7:8a:9a:8b:ae:4b:7f:b4:
                    63:34:e6:e9:a3:1c:4d:06:26:5b:a2:e1:34:bd:92:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EC:B8:C4:15:D9:9F:8A:C9:E8:E3:A9:39:E7:FD:30:EF:6C:8C:3C
            X509v3 Authority Key Identifier:
                keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cc:c5:ac:fd:ca:58:b1:f9:2b:56:08:8f:26:81:9e:af:9f:
         97:bc:62:59:a3:c4:46:25:84:84:24:04:ea:2c:b6:2b:4c:67:
         9a:67:66:7e:a4:98:0a:1a:d8:28:fa:02:db:3c:f5:2f:fd:95:
         e0:5f:fe:ec:c5:67:46:7b:6c:fe:d9:f1:75:c0:3b:0a:b4:5f:
         1e:4d:c5:06:1c:06:90:bf:b9:ed:a5:ed:9c:1a:94:cb:f4:6d:
         65:6f:bf:8c:1b:31:6c:78:c7:04:66:45:84:5d:32:52:ed:46:
         79:ef:88:f7:71:c4:5b:11:f5:7b:55:e9:e7:c6:66:a8:4d:07:
         7d:12:e7:f4:c3:53:44:76:ca:ea:00:b6:cd:eb:bf:27:70:3f:
         52:e6:ba:54:17:4f:24:ad:ac:3f:e3:83:02:a1:64:9f:ee:6e:
         b1:69:b3:44:d1:70:a1:57:7f:a0:ff:d9:ba:30:fa:a0:56:ec:
         b9:2a:8e:a3:03:c2:58:18:c1:61:3f:40:76:84:ea:36:7e:89:
         42:27:b0:61:54:02:af:2d:76:09:b8:de:55:c4:8f:fa:2d:10:
         dc:ad:52:9a:f5:8f:0d:f7:c2:87:96:51:1c:1c:32:d4:69:a5:
         5b:c5:60:5d:ea:53:e2:49:c3:a1:0e:06:4f:f8:db:a8:de:f8:
         ff:5b:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:48 2026 by rpki-client