This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
File:                     JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json)
Hash identifier:          5Nfz8qUE4vCeIwbUQFkGuEFFfSM6H8th+/2G2ka3w5M=
Subject key identifier:   5B:F1:21:07:4E:5D:CA:3D:22:E9:E7:C0:3F:BD:50:FD:E8:75:32:85
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Certificate issuer:       /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
Manifest number:          FA
Signing time:             Fri 23 Jan 2026 04:22:55 +0000
Manifest this update:     Fri 23 Jan 2026 04:22:55 +0000
Manifest next update:     Fri 30 Jan 2026 04:22:55 +0000
Files and hashes:         1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: NFhoJlR6RHCfKyvXAYuve2nQDnl7mVWCF+GaTJqFIdg=)
                          2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: SvJanGxzuxhfbTc60r8YUo4zzExKYT9JE66aBXW8SFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
        Validity
            Not Before: Jan 23 04:22:55 2026 GMT
            Not After : Jan 30 04:22:55 2026 GMT
        Subject: CN=6972f79f-caef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:de:84:be:75:d8:76:94:8e:1f:0e:b5:09:
                    91:f5:64:dc:c5:6a:3f:4e:54:7d:69:cc:7e:12:ef:
                    ee:42:9b:1c:6d:a1:7e:bc:7c:57:67:8b:5a:78:1d:
                    de:b8:04:a3:8c:da:9a:ca:84:ae:08:be:e8:64:ee:
                    41:e7:79:b3:47:3a:11:77:24:0f:cb:bd:fe:b5:52:
                    ac:27:4c:95:aa:b9:07:47:6d:ee:fa:c9:1e:c2:d7:
                    78:ff:da:d6:05:12:3e:98:a6:fa:be:f0:3e:bd:0e:
                    6a:3d:5a:0c:14:6a:1b:1b:da:d1:6b:66:29:59:ec:
                    bb:f0:49:ff:17:ce:e9:38:a0:38:e4:f5:ac:c6:67:
                    2a:ff:43:64:4f:11:fc:74:ec:2d:60:27:09:8c:b0:
                    45:c2:4e:7b:97:dc:ef:aa:96:0f:79:2e:3c:8c:c5:
                    a4:17:5b:d3:5b:3c:dc:10:8a:6e:dd:df:a3:b2:7d:
                    e8:f8:b2:66:78:9c:d7:8a:e2:d2:5f:68:ad:3b:ac:
                    8c:9a:00:34:82:c5:8a:42:a6:d4:f1:f1:09:07:7e:
                    1b:b4:d9:b1:29:ff:80:9e:56:a9:22:2c:a1:50:0b:
                    8c:cb:0d:d9:b8:7f:ae:b8:88:63:be:68:02:ba:62:
                    dd:66:ca:5d:51:5e:c0:e9:e6:42:cf:73:8c:e0:69:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F1:21:07:4E:5D:CA:3D:22:E9:E7:C0:3F:BD:50:FD:E8:75:32:85
            X509v3 Authority Key Identifier:
                keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6a:30:10:e6:8c:49:0c:af:b9:c6:e7:f3:fd:f6:65:70:43:
         75:27:2f:5f:ce:6d:5f:67:62:12:5a:34:16:b5:58:91:8f:70:
         f1:96:65:42:5a:07:d8:e0:a0:77:87:9a:68:a7:bc:f7:36:8a:
         83:8f:e0:48:56:af:a2:d8:74:9f:eb:3f:a8:d1:c8:00:04:54:
         5b:cc:b7:39:63:87:2e:14:77:5c:11:ed:b4:28:3f:bc:5c:30:
         79:52:f5:38:ad:c8:07:f5:8b:3f:3a:4a:c1:15:df:f8:cb:54:
         02:b4:8d:a6:08:46:10:ba:4d:21:b4:be:53:1a:c7:1b:01:cb:
         5a:d4:79:8a:25:5e:98:d7:be:a8:5c:06:55:86:99:5a:96:a6:
         10:dd:26:c3:d3:ab:9a:79:74:9d:43:b0:fc:5b:81:df:62:aa:
         c7:75:35:78:b8:b0:56:a8:07:7f:be:2d:8a:af:04:e5:ed:f9:
         3f:3d:f6:38:6a:5e:c7:2a:1c:00:08:78:72:3e:b3:81:f7:01:
         75:3d:b4:94:90:8f:7d:2a:15:cb:c6:f9:57:a9:b4:a4:0b:ba:
         23:ed:91:76:10:1e:1d:66:75:74:5f:41:a5:92:97:92:ff:81:
         68:40:7e:c1:97:b2:b2:63:cb:18:83:67:9e:34:28:2e:a8:e4:
         67:2b:18:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:34 2026 by rpki-client