This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
File:                     scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json)
Hash identifier:          OkypaZY51cinR5oWBZyGc5x0CVnQpV/SIRXrhWGVpU8=
Subject key identifier:   CD:C3:93:6E:D4:31:AA:E7:1A:C2:53:C0:2C:ED:0D:D1:8D:B2:E9:97
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Certificate issuer:       /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
Manifest number:          073B
Signing time:             Sat 24 Jan 2026 21:06:00 +0000
Manifest this update:     Sat 24 Jan 2026 21:05:59 +0000
Manifest next update:     Sat 31 Jan 2026 21:05:59 +0000
Files and hashes:         1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: N6GY9Pf/Kzwawj2LhNajAk8jBD6OIHeqZdXGFcmasEY=)
                          2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: 3pZFB7pMfCt+Nb4YQaCn5c2ZIXFgDeE9u77BOFaXST0=)
                          3: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: gBF4oLr31oWPGA7GjogpSpsWc/XlGgo5urUgCfPiOZQ=)
                          4: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: ivarDOVLEK1o/i2e326AVwZq4fhbkuq+7lnjx1EVCHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
                          rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
        Validity
            Not Before: Jan 24 21:05:59 2026 GMT
            Not After : Jan 31 21:05:59 2026 GMT
        Subject: CN=69753437-a1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:02:db:eb:3d:8e:26:c2:34:b0:a1:9e:f1:
                    da:7d:9f:d6:b1:06:79:89:d8:5b:b2:c3:8f:e3:c8:
                    8a:26:80:ae:c6:3c:eb:cc:6d:46:9e:7c:a0:b6:a1:
                    20:12:36:32:95:3f:aa:7a:c6:9e:b1:2b:9d:32:5c:
                    4b:a6:36:5f:45:29:a5:df:81:36:b0:ce:a8:51:0a:
                    c5:46:9b:4e:99:76:f9:77:e8:a5:64:f3:56:2e:4a:
                    c8:7d:db:ce:7a:ca:d1:01:f0:c0:e8:e9:63:f7:42:
                    97:d2:7d:a9:01:1c:cb:a4:f9:5c:30:96:4d:bf:51:
                    bb:4a:c8:82:cc:b0:3a:76:22:f8:d7:b2:47:bc:7b:
                    74:52:03:70:08:43:24:21:8a:5e:22:0a:60:98:bc:
                    01:11:56:39:d3:a2:d6:6d:51:29:7d:a0:23:7f:9f:
                    49:ce:5b:ac:90:75:22:75:e3:8c:f6:43:27:41:1c:
                    93:58:e3:ea:e8:10:34:42:b4:22:a2:3f:4e:fd:5c:
                    f9:88:21:92:29:e5:5b:2f:07:19:e1:48:2b:30:36:
                    e7:fe:c1:42:11:e0:ff:86:ab:e9:56:95:c6:fd:13:
                    95:68:8e:ce:ea:65:f7:0e:bb:e4:ed:9a:00:3d:d7:
                    8e:6d:db:67:61:d4:88:bf:85:62:e6:11:5d:94:5c:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:93:6E:D4:31:AA:E7:1A:C2:53:C0:2C:ED:0D:D1:8D:B2:E9:97
            X509v3 Authority Key Identifier:
                keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:76:fe:37:7c:6b:46:d4:17:2a:77:cd:29:2e:03:25:a2:35:
         7c:6e:43:b2:74:94:a1:06:23:29:58:55:20:a6:0b:0d:58:f1:
         10:c3:05:28:f8:24:5b:2b:ef:ea:ce:3c:f9:a8:61:68:df:2a:
         37:89:ef:46:14:cc:1d:24:2d:75:eb:5e:0a:c1:86:b2:a9:68:
         64:24:1a:99:59:b0:89:2b:92:fe:a8:ae:d4:9f:98:56:13:a7:
         26:55:01:2c:3e:5b:f3:26:c0:49:6f:b7:e8:f7:97:74:6e:f5:
         79:48:da:0f:94:9c:e1:35:17:e9:34:2d:35:06:eb:47:0b:02:
         f8:38:f8:8f:15:3b:b2:a2:47:55:68:6b:c1:a1:db:b9:04:5f:
         09:c9:3f:88:b4:51:a3:67:b7:3a:3f:22:6d:a3:a7:00:1c:0a:
         52:e2:59:a8:8f:b1:ad:3d:4b:5c:65:ed:2e:6a:af:11:11:8f:
         af:a5:aa:e5:b4:4e:7b:58:28:f9:e3:11:74:04:7b:b4:6c:8a:
         83:ba:82:15:07:8a:47:ca:1d:1a:60:f6:7e:3d:d7:85:aa:61:
         f4:14:99:bd:13:f5:62:59:89:b1:06:a2:e9:c2:f0:aa:d3:77:
         ce:7a:ad:5b:e0:10:a9:29:1c:d2:75:3e:47:33:4f:a2:bd:6a:
         d3:f1:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:05 2026 by rpki-client