This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
File:                     ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft (raw, json)
Hash identifier:          V/Qx2GP9x5jEirnL3C+k8oisUM6KaiA6IiMHWn3BRg4=
Subject key identifier:   E1:9F:D1:87:CA:F2:35:56:67:DB:40:30:20:0C:88:A1:4D:BB:F9:59
Authority key identifier: 7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
Certificate issuer:       /CN=A9157B93/serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
Manifest number:          89
Signing time:             Sun 25 Jan 2026 05:44:00 +0000
Manifest this update:     Sun 25 Jan 2026 05:44:00 +0000
Manifest next update:     Sun 01 Feb 2026 05:44:00 +0000
Files and hashes:         1: ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl (hash: NlPc3nGgyklzG/jO9zyRN/+HgVWJzixwwgzYA8lxkZM=)
                          2: 7C487C522AD711F0889A9C4CC4F9AE02.roa (hash: dcosUg556kia3puig3z/Vay8g6P730lM2nj6N4MJmoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
                          rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B93, serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
        Validity
            Not Before: Jan 25 05:44:00 2026 GMT
            Not After : Feb  1 05:44:00 2026 GMT
        Subject: CN=6975ada0-2995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:4c:48:0f:d9:f4:2d:49:49:d7:06:9c:7b:
                    1c:4c:0b:f2:48:48:1a:2a:20:75:8b:74:06:77:64:
                    91:12:cd:21:e8:ea:44:98:54:9d:dc:40:d3:de:de:
                    0d:13:22:cf:ba:11:9f:c4:06:c0:42:2f:5b:77:fb:
                    46:d5:49:44:38:e0:b5:58:84:a2:eb:95:6b:d2:87:
                    ee:79:c6:96:75:b8:f0:7a:68:f9:8d:c4:03:33:21:
                    a4:af:76:b4:56:ea:73:5f:83:ca:8d:f8:26:a3:d7:
                    bc:55:9d:aa:5b:17:0d:56:4a:b1:a0:df:e4:93:51:
                    dc:35:f8:92:92:82:79:17:56:fb:a0:03:a0:82:55:
                    38:69:05:76:33:65:a0:b2:5b:1f:9f:ef:7d:8e:63:
                    52:e4:fc:d0:c9:22:9e:8b:54:8b:51:52:70:c0:66:
                    30:b7:4c:b8:21:cd:46:12:b1:b0:f3:a7:92:77:ac:
                    f6:34:07:30:31:77:d0:67:b1:b9:a2:db:0b:48:df:
                    2b:bf:ea:ef:50:bd:3e:e9:c5:a5:06:88:2b:23:59:
                    11:c5:2b:9a:51:64:f5:89:f3:80:58:a0:81:33:17:
                    b3:27:79:dc:e8:4c:22:4a:d1:b6:dd:35:e9:e1:2a:
                    75:7c:f5:76:68:34:15:94:26:4b:4c:01:ed:f4:17:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9F:D1:87:CA:F2:35:56:67:DB:40:30:20:0C:88:A1:4D:BB:F9:59
            X509v3 Authority Key Identifier:
                keyid:7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:7f:3d:da:d2:d8:51:fe:cb:0c:5f:f1:5e:81:00:e9:ae:
         a6:7d:5a:b9:2a:e5:4a:de:74:d7:72:c7:33:ad:33:dd:00:f8:
         50:0b:54:90:a1:86:ea:73:c8:27:1c:a0:d1:41:3a:4a:32:d0:
         cf:18:c1:4b:c2:dd:e7:3e:e8:b6:ce:ab:83:80:27:63:32:b3:
         4c:96:a5:b1:72:77:ac:b4:ff:36:46:54:ef:7b:f3:67:7a:e7:
         fb:a6:6e:4a:e6:df:4b:ae:72:28:dd:8f:29:fd:b1:d2:6e:e2:
         48:8a:52:da:3e:bc:15:e1:06:b2:0d:c6:dd:cf:ff:b0:31:a8:
         13:6b:6f:34:25:61:d6:c3:5d:ba:76:b2:04:b9:38:ee:f5:c1:
         fc:dc:07:e3:65:a5:0a:8d:ca:f3:53:08:e0:0d:cc:be:05:a0:
         ea:ed:4d:37:c0:49:d0:5a:b1:bb:57:71:48:91:25:dd:e4:4e:
         0d:5c:5b:2e:0e:78:3a:e9:5b:80:f9:48:25:6c:7a:af:e5:81:
         06:5d:94:92:a6:11:03:64:c7:75:00:99:b1:a1:85:9d:a2:82:
         b2:62:5e:c9:c0:97:df:c8:f7:64:38:3b:43:5a:ab:d6:5a:09:
         04:52:3e:22:71:53:21:81:9e:e4:06:81:ba:aa:43:c3:6a:b3:
         17:8a:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:46 2026 by rpki-client