This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
File:                     m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json)
Hash identifier:          PH20PcmfAd3pglzbdUFj6RaFlhnJFVMQpctJIZbIFXs=
Subject key identifier:   C3:26:AC:58:83:FD:D7:08:21:D1:B5:10:B1:E0:FD:57:A4:6C:31:DC
Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Certificate issuer:       /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Certificate serial:       185F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
Manifest number:          1857
Signing time:             Sat 24 Jan 2026 16:16:49 +0000
Manifest this update:     Sat 24 Jan 2026 16:16:48 +0000
Manifest next update:     Sat 31 Jan 2026 16:16:48 +0000
Files and hashes:         1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: 3sUHG4G0xicNPcCeLKaqqEk/a9iTUMuqtCMXIGqgAJY=)
                          2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: g6s+BNZQJQ8eLNLhvPLgACbzK2XG9M1Q2Nm7UCMcOkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
                          rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6239 (0x185f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
        Validity
            Not Before: Jan 24 16:16:48 2026 GMT
            Not After : Jan 31 16:16:48 2026 GMT
        Subject: CN=6974f070-e7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:80:a0:84:58:51:c4:51:ea:b6:81:8b:e2:
                    50:d1:0f:08:93:29:a4:ee:23:fe:2d:f3:3c:e8:7f:
                    44:dc:be:13:61:e8:54:bb:1d:9a:cb:0e:ff:3b:69:
                    5d:14:10:b4:5f:7e:b9:1b:26:5c:1c:b5:04:82:fe:
                    18:22:d0:c9:b3:8b:24:72:ee:d6:e8:1d:78:fb:34:
                    f3:98:e7:e8:f7:82:2a:e2:e8:96:46:26:8e:26:63:
                    9c:b7:fc:d5:42:24:a3:d3:0f:98:a4:fd:d8:33:1b:
                    b4:93:4d:3c:af:85:bd:5a:05:40:bc:80:c2:49:37:
                    e3:d8:33:68:ca:d1:06:09:6b:85:50:d9:2c:15:03:
                    94:90:b5:f0:c0:6a:71:bc:c5:d8:96:8d:ec:61:2f:
                    7b:f0:1a:d3:d3:68:cb:60:03:be:e0:1a:7d:5f:cb:
                    33:0d:4c:18:46:75:dc:45:d6:dd:86:0d:9b:84:ec:
                    38:3c:34:7b:98:16:82:81:f5:de:a9:50:c0:4c:19:
                    d9:11:c1:d6:6d:ba:b6:86:37:0f:45:5e:f8:d2:bf:
                    b0:90:fa:26:4b:e0:15:3c:4f:8b:99:58:eb:bb:60:
                    fb:7e:1f:2a:e4:47:41:1e:7f:3c:bb:85:6f:42:a7:
                    fe:c0:bd:37:57:2b:6b:07:21:4f:cb:0b:61:0a:5d:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:26:AC:58:83:FD:D7:08:21:D1:B5:10:B1:E0:FD:57:A4:6C:31:DC
            X509v3 Authority Key Identifier:
                keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:6e:a0:3b:78:cf:fd:95:a8:68:88:69:38:52:29:49:b6:
         f7:3c:49:65:aa:ff:40:0f:6e:7d:a3:cd:3c:d6:29:10:bb:ab:
         b0:3b:bb:92:31:72:97:12:cb:7e:a6:7c:b7:89:89:f4:8f:44:
         f0:53:cf:99:85:56:bc:d6:02:b8:b8:9c:02:a0:cb:27:b5:11:
         ce:c2:6a:71:76:93:20:b3:37:a6:18:3d:a5:e1:57:15:2f:08:
         6e:91:bf:b8:30:5a:42:1e:a7:2e:1e:1a:f5:15:3c:ba:f8:ef:
         9e:8a:41:66:b5:2f:e9:69:70:c0:a8:79:2e:c0:32:6c:65:d5:
         e4:68:ba:24:d0:33:4e:39:a3:d9:ed:27:63:b6:0b:e8:da:29:
         40:91:e1:26:0b:58:22:0c:65:20:15:21:47:fb:36:ac:a5:6d:
         8d:c5:b2:dd:23:34:6e:e4:d4:07:d9:f7:a4:a9:d5:af:a8:c7:
         ff:d1:4b:54:a8:58:91:74:21:30:22:5d:ce:7f:1f:56:22:2f:
         07:9e:63:53:aa:26:88:82:3b:94:4a:2b:ed:f8:a1:88:25:38:
         15:aa:fd:62:05:32:67:85:9f:c2:8f:45:fd:f2:f7:03:a1:8a:
         36:3f:37:3e:13:c5:8f:6e:ed:01:34:9a:a6:64:53:41:b0:cc:
         bf:55:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:46:18 2026 by rpki-client