This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          0TiWYeVyPqK3KCglu2LIh0lAOKdjy2O/1L00M7DqXxE=
Subject key identifier:   52:96:DC:40:DA:C0:E0:78:6C:08:49:BC:54:9F:63:BA:78:D5:52:6A
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0CA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0C8B
Signing time:             Sat 24 Jan 2026 18:09:16 +0000
Manifest this update:     Sat 24 Jan 2026 18:09:16 +0000
Manifest next update:     Sat 31 Jan 2026 18:09:16 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: Eh7GJwWAdzK0zttAWJETa5GQNMuLke03UWm+aDs6kmI=)
                          2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=)
                          3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Jan 24 18:09:16 2026 GMT
            Not After : Jan 31 18:09:16 2026 GMT
        Subject: CN=69750acc-6b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:7a:6c:df:e7:48:74:10:3b:8c:eb:01:6d:
                    a7:94:37:a7:6d:ca:de:d9:bf:69:4e:fe:99:56:ff:
                    86:dc:bd:5b:b3:88:b2:15:b7:55:5a:2e:85:83:be:
                    22:2d:6d:14:10:e8:a0:8c:ee:e9:8d:55:61:56:9e:
                    55:d9:da:16:18:1e:0c:f1:0c:37:c2:f2:da:29:30:
                    ed:c9:9e:6e:ce:19:00:88:f5:a7:99:d3:c0:37:84:
                    22:bf:49:f2:96:ce:ce:f2:e0:06:ab:2b:8d:71:ad:
                    fe:05:ac:7b:b9:a7:b5:13:7e:89:ed:05:fb:62:71:
                    0e:73:c9:bf:2d:ac:4a:be:c8:d0:09:6e:99:89:d1:
                    97:8c:6e:c0:d9:e5:52:12:1b:3a:20:2b:67:3b:e2:
                    8b:51:2f:ea:7d:c3:bb:65:1b:5f:2e:b0:57:64:a8:
                    a9:32:df:7a:91:ff:86:d7:0a:5c:05:81:ec:f3:fa:
                    0a:9d:eb:77:f1:d2:7e:91:b1:f9:89:b9:bb:7b:71:
                    43:ff:63:dc:58:54:5c:f9:dc:34:95:85:72:ce:b3:
                    e4:89:06:e0:3b:7d:4e:1f:d8:82:40:68:e2:a6:9f:
                    f5:bc:1d:75:b3:9a:91:68:01:51:39:b5:e0:7c:fe:
                    34:e0:d6:d8:93:99:77:18:2c:e9:ec:fa:27:12:59:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:96:DC:40:DA:C0:E0:78:6C:08:49:BC:54:9F:63:BA:78:D5:52:6A
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:53:de:54:44:c5:27:65:e5:0d:46:60:73:97:76:19:19:ac:
         c9:55:aa:9d:63:f6:e2:79:5a:c6:96:e2:c8:76:7d:42:12:8c:
         82:f6:34:9f:20:e3:92:dd:bd:96:5c:1d:ca:f7:d2:27:bd:10:
         7e:32:05:fd:db:64:0e:9b:df:64:7a:c8:00:f9:72:c8:67:5b:
         ed:7d:c7:b8:db:ea:d7:2e:ce:bd:cc:c7:17:51:f1:eb:55:06:
         fe:ab:ea:0c:20:b9:b7:70:d9:d6:d7:90:68:12:f4:08:a9:55:
         d6:f5:e8:57:be:b8:6d:c7:3a:5a:b6:11:1e:1e:09:91:4c:89:
         7c:f1:52:25:c6:99:3b:41:1c:ee:31:94:02:37:e3:69:b4:22:
         a4:ae:ea:55:e3:4a:9c:81:97:e2:ca:2a:36:52:c3:f7:f5:19:
         9e:a3:d9:27:c1:b3:98:f5:b9:3e:b0:3a:ea:18:2a:e0:c9:90:
         7f:0d:59:60:ca:1d:00:c9:de:fb:53:48:e6:a6:3d:4a:5a:72:
         d1:d6:9b:19:d9:09:39:13:9b:03:6b:aa:95:b4:06:1c:a8:65:
         f9:f2:e4:48:29:66:4e:66:be:41:f5:c9:11:a5:64:7a:d9:df:
         16:04:5f:61:19:b2:81:fe:48:c9:48:36:3f:52:49:0b:c2:b1:
         99:28:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:06 2026 by rpki-client