This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File:                     fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier:          v6qiqsSFv7sgqrdGjZ8KsVbbXAwBnRfEqTmJt101lbQ=
Subject key identifier:   7E:76:29:8B:8E:FB:3F:37:05:0D:7E:C1:A3:EB:40:F3:4A:4C:84:2C
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0C99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number:          0BE3
Signing time:             Sat 24 Jan 2026 18:48:40 +0000
Manifest this update:     Sat 24 Jan 2026 18:48:40 +0000
Manifest next update:     Sat 31 Jan 2026 18:48:40 +0000
Files and hashes:         1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: iNcQPHM37we/ghZlWkedurwtXZ0LQgflmPtMBFO/6Hk=)
                          2: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=)
                          3: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=)
                          4: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=)
                          5: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=)
                          6: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=)
                          7: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=)
                          8: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=)
                          9: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=)
                          10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3225 (0xc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Jan 24 18:48:40 2026 GMT
            Not After : Jan 31 18:48:40 2026 GMT
        Subject: CN=69751408-39ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:3c:eb:6b:8b:63:12:80:40:eb:ff:62:bb:
                    a0:10:2f:c6:eb:92:9b:0f:58:2a:7a:cf:8a:73:1d:
                    0c:6a:e9:f2:1c:6a:b6:fa:cd:5d:e2:a7:72:81:9b:
                    69:1d:a1:f0:2e:ca:8b:4c:55:05:31:ab:50:dc:d5:
                    07:0e:bd:f0:f3:fb:5c:8c:22:19:72:f1:32:43:a2:
                    b4:00:3c:a6:c1:14:98:85:b9:e6:e0:2f:10:1c:73:
                    d0:1d:eb:4c:b3:aa:4d:05:e8:7b:39:60:66:90:40:
                    36:70:07:0b:e5:20:55:cf:dd:ab:3e:a1:e6:68:b8:
                    28:8f:40:5b:6c:43:62:f6:37:93:34:ff:0a:fc:04:
                    e1:bd:3f:00:fd:d2:fc:41:69:9d:ad:a3:d8:81:d1:
                    b0:25:77:96:f0:df:49:08:12:0b:e1:96:5c:50:86:
                    63:75:03:79:79:9a:2e:e5:1f:48:77:38:00:01:ca:
                    cd:5c:f0:dc:3b:a6:15:a8:bc:e5:53:70:e0:04:c6:
                    91:36:11:b5:a4:b0:c3:cc:11:b7:3e:79:24:97:9a:
                    f5:49:c0:a2:e0:e0:58:d8:44:2f:2e:21:f7:89:01:
                    60:86:ce:e5:56:67:f5:5b:1a:51:1e:b0:a6:1a:80:
                    67:27:ca:1f:48:57:09:c5:de:70:b1:6c:d1:8d:e8:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:29:8B:8E:FB:3F:37:05:0D:7E:C1:A3:EB:40:F3:4A:4C:84:2C
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:42:a9:86:6b:88:32:7b:e2:17:e9:58:84:f4:e9:62:9a:
         14:12:02:51:32:75:0a:3a:f3:fa:62:af:97:ad:7e:bc:3b:69:
         1c:b5:b1:08:81:97:09:c8:7e:af:01:a2:a2:7b:45:50:6c:42:
         63:2f:39:9c:6c:53:a6:4f:da:0f:45:7d:84:a2:da:92:0f:51:
         af:08:28:ae:5c:bf:4e:3a:01:f2:68:ee:d6:81:7e:82:b6:f2:
         e9:a2:b3:0e:77:ce:4e:98:06:aa:09:18:4e:76:32:08:58:69:
         f3:c7:a5:5e:c0:bd:0d:8b:60:5d:05:39:05:af:b6:fd:5d:4d:
         a2:3b:c5:16:87:7b:b0:b6:25:1d:8b:58:34:95:00:59:45:c0:
         47:ca:2b:be:62:29:c1:07:03:98:19:ff:76:43:91:d1:29:5d:
         e4:71:d4:ed:b1:45:a1:1e:f2:88:6a:5e:79:42:86:14:bd:83:
         00:e4:f6:08:d3:c5:1f:00:01:e4:bc:e2:71:7c:90:92:3f:ee:
         95:e7:69:5b:5e:2a:01:aa:d0:af:9b:20:f0:05:fa:0e:16:7c:
         f6:38:25:be:84:2d:a5:ee:d1:2b:d1:ad:6e:ba:d0:10:93:a2:
         d4:e7:c3:ab:8a:47:ce:2b:0f:dc:8c:a5:80:6b:81:89:92:05:
         c2:bd:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:55 2026 by rpki-client