This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
File:                     C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json)
Hash identifier:          SvjPTreAScelXXE25HoKEzGczt9/1btqpRQEjyXdd2Y=
Subject key identifier:   BB:9A:58:5F:75:38:4D:C3:8D:73:6F:FC:5F:04:1D:A9:DD:0B:0F:B9
Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Certificate issuer:       /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
Manifest number:          014D
Signing time:             Fri 23 Jan 2026 03:27:38 +0000
Manifest this update:     Fri 23 Jan 2026 03:27:37 +0000
Manifest next update:     Fri 30 Jan 2026 03:27:37 +0000
Files and hashes:         1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: i8xaeuYEDhlPZH0Pee3P44mDOj3WDpMyl229Ng+YlKs=)
                          2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: rvTeF823DvYmJvnwsquaPWt6SC82aqM6fKQW5eAewSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
                          rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
        Validity
            Not Before: Jan 23 03:27:37 2026 GMT
            Not After : Jan 30 03:27:37 2026 GMT
        Subject: CN=6972eaaa-48a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:4b:ac:55:70:84:3e:f0:a7:03:1d:38:3e:
                    6c:91:91:23:ec:bf:6a:19:e5:61:fa:40:24:06:60:
                    c1:ee:b9:20:fa:0e:40:ed:67:21:fc:ed:8f:7c:f3:
                    39:2f:0b:a9:43:e6:0f:cc:5a:98:fc:38:aa:15:38:
                    27:5b:3e:fe:93:91:43:80:e1:64:75:01:c2:9b:ce:
                    73:71:c0:e4:1c:a3:1d:5d:9d:a6:79:8e:24:e3:d5:
                    45:73:d0:1f:ba:07:9b:65:98:d1:63:47:36:d3:e6:
                    1b:60:79:af:71:fe:22:94:1d:ba:77:0f:62:3a:fd:
                    38:97:1f:30:bf:48:61:5d:f2:d8:f7:a7:5a:33:01:
                    22:1a:cc:58:00:92:cf:60:2d:4b:a8:9d:a7:ee:9e:
                    f3:30:7f:ce:2c:03:44:62:8a:75:03:db:d8:ae:06:
                    6b:d4:9f:95:5e:f4:13:5a:21:5a:26:f1:df:b7:15:
                    59:79:64:59:96:db:1c:10:9e:c2:3c:67:ba:43:61:
                    71:31:4f:36:3a:dd:20:5a:22:62:3e:70:1f:06:36:
                    14:b2:e8:1a:48:5b:87:87:85:dd:6d:fe:74:e6:f2:
                    bc:39:19:1b:1d:cc:d7:dd:cd:7d:01:1b:f1:a6:41:
                    40:ab:17:0d:65:ea:d0:a6:1b:4c:fc:49:29:d8:b3:
                    82:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9A:58:5F:75:38:4D:C3:8D:73:6F:FC:5F:04:1D:A9:DD:0B:0F:B9
            X509v3 Authority Key Identifier:
                keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:28:d7:b9:b7:0f:29:f8:4a:a8:65:f7:3f:65:c0:7d:02:
         b3:81:e0:cd:2e:d5:34:41:3e:6e:5c:23:b5:8a:bb:f4:f4:6f:
         db:99:a7:f1:1f:e8:15:7a:cd:80:5d:c4:78:65:71:e7:2e:04:
         db:4b:b8:55:f4:29:54:cb:ec:9a:78:a8:4b:4d:6d:b6:d1:ef:
         49:f6:50:6d:74:b8:9d:b8:8b:ce:62:da:81:69:ea:3b:44:9b:
         31:66:b3:99:cb:d9:ca:4d:3d:d1:27:81:1d:3a:b1:5d:3f:1c:
         f0:86:8c:9e:04:80:4c:64:f0:51:91:74:6a:fe:6c:59:93:72:
         7f:df:b3:68:7c:12:b3:c6:63:56:73:3c:16:8b:43:41:8b:d4:
         28:6b:57:86:7d:bb:49:e2:98:8c:99:d0:5b:e2:d0:81:1e:5e:
         08:d8:f5:50:ca:d8:c6:b2:5e:b2:74:11:94:35:29:b5:a8:24:
         d9:c2:6e:40:09:d1:cb:e9:f9:7c:56:96:a8:80:cf:26:6b:51:
         b7:c1:da:04:14:ce:3d:25:27:5d:77:bf:ba:fb:63:ef:a3:5e:
         8a:2d:15:4e:07:56:8e:89:15:2c:1f:92:32:f0:32:61:9e:68:
         f8:f6:bd:51:b1:f9:78:7c:d2:ac:b1:8a:5a:ed:1d:f9:2f:b1:
         fb:22:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:46 2026 by rpki-client