This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File:                     6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier:          yd5xekXpp07qezhsB14DwPK5SIPcayPqcXg7LdKbu6c=
Subject key identifier:   AD:43:7A:A6:9D:DF:AD:3A:7B:3D:2D:E2:2F:40:39:FA:5F:ED:57:07
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer:       /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial:       0B27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number:          0B12
Signing time:             Sat 24 Jan 2026 18:51:19 +0000
Manifest this update:     Sat 24 Jan 2026 18:51:18 +0000
Manifest next update:     Sat 31 Jan 2026 18:51:18 +0000
Files and hashes:         1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: j1WgFuyfIyYuiqKIqAI0BlTiV4UgfslbY7dRE3s3Fpc=)
                          2: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=)
                          3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=)
                          4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2855 (0xb27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
        Validity
            Not Before: Jan 24 18:51:18 2026 GMT
            Not After : Jan 31 18:51:18 2026 GMT
        Subject: CN=697514a6-3e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:d5:7f:62:67:2a:1a:27:f9:05:22:93:cc:
                    52:03:9f:28:fd:f6:78:ea:9f:57:d8:f0:ea:f6:a0:
                    98:78:b4:5d:a0:63:f6:5e:da:ab:9d:12:94:77:f0:
                    a0:ab:ea:43:27:56:98:e6:41:e8:e9:be:ff:71:7d:
                    d7:a4:0e:e8:98:58:d1:51:5c:17:86:a9:ba:e3:90:
                    33:d7:fd:31:5c:e3:e3:df:05:d1:4d:f8:49:cc:0d:
                    a2:24:1d:32:c9:10:ac:6d:2a:4b:d4:40:d7:78:48:
                    e0:eb:6c:19:94:2d:fd:9c:75:80:68:f9:39:89:6f:
                    b9:bf:ed:9c:a3:5f:83:e9:f8:58:24:b6:13:9a:a1:
                    be:fd:80:c4:be:7c:42:84:c2:8b:15:40:b2:2a:f1:
                    23:8c:e3:f6:e1:95:a1:23:b8:f0:65:34:22:90:34:
                    41:f5:e0:41:57:c3:18:5e:eb:6b:ae:d2:f0:c5:07:
                    de:76:56:03:8b:31:ef:4e:da:93:d5:f4:aa:c7:52:
                    02:72:41:51:f4:53:03:0b:01:47:b0:f4:57:22:cd:
                    f5:b6:bf:76:23:92:08:56:59:17:bd:85:81:cf:90:
                    2a:14:77:8e:52:24:69:60:77:8b:ad:c3:60:93:f1:
                    c1:ec:b4:cd:37:53:9a:8f:9e:05:9c:0b:3c:c8:fc:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:43:7A:A6:9D:DF:AD:3A:7B:3D:2D:E2:2F:40:39:FA:5F:ED:57:07
            X509v3 Authority Key Identifier:
                keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:22:62:7b:31:2e:bb:e6:ae:05:b1:56:0d:67:0a:a4:25:6b:
         f6:5e:48:80:1e:ef:04:34:37:de:c1:f8:33:63:72:82:75:f8:
         d6:86:14:80:89:0c:84:c5:5e:09:0a:f4:b9:02:9b:45:b9:91:
         15:b3:f7:2d:75:d6:5a:1a:d1:f7:1e:49:6a:26:1e:05:79:b3:
         11:60:eb:30:6e:04:bb:49:45:02:2f:39:c2:3d:00:73:5d:2b:
         9a:a5:46:bc:74:1d:cb:d2:b4:ba:7f:83:51:3b:a1:7e:a1:5a:
         57:2c:1c:e1:dc:40:f0:71:13:b0:22:53:a9:5a:b5:a7:08:92:
         de:42:6e:85:d9:99:d2:05:3b:b6:46:39:bf:4f:de:23:7e:f3:
         4d:8c:4d:e3:07:28:a1:9a:ac:83:9a:01:98:84:8c:02:cf:22:
         09:8e:99:15:12:5e:66:79:2a:ee:43:4b:69:3d:8b:28:a8:0d:
         70:b8:55:88:ac:cd:cc:aa:b9:9a:96:da:34:c0:c7:f8:63:0a:
         15:6f:c8:da:71:87:b3:53:d2:1e:a3:53:00:a2:32:d3:0e:a8:
         4c:b0:7a:62:40:20:89:d0:b2:ce:45:f8:2b:96:9f:c0:e8:06:
         34:74:b8:77:4c:fd:ba:5a:df:66:46:bf:40:c0:b5:77:a7:3d:
         e7:cd:fc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:13 2026 by rpki-client