This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
File:                     A6AuL12r8P85OGKLxP9fthZT8EU.mft (raw, json)
Hash identifier:          basb/nWNdd9D6nHpa+FfZepvxCdyf6Y6CtLywtvLFOo=
Subject key identifier:   6F:E3:16:E3:52:C3:14:A1:BA:45:A6:3B:06:7F:1C:38:67:0E:6F:A6
Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45
Certificate issuer:       /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
Manifest number:          0158
Signing time:             Fri 23 Jan 2026 03:33:09 +0000
Manifest this update:     Fri 23 Jan 2026 03:33:09 +0000
Manifest next update:     Fri 30 Jan 2026 03:33:09 +0000
Files and hashes:         1: A6AuL12r8P85OGKLxP9fthZT8EU.crl (hash: jWHL0UuLjd871wRO7FcO0he7tzRFemwzQBr+KEN4qtk=)
                          2: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (hash: BaadRVMd203ZlkXjv1gzJD81QItI8JySCJYtPr9WisE=)
                          3: 4335BE9C0D0611EFA3ECB057C4F9AE02.roa (hash: Qm9GDIA0MPfeF1zwxNI3C0uw4KiP3Msw73zwSjWGIiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl
                          rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161099, serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045
        Validity
            Not Before: Jan 23 03:33:09 2026 GMT
            Not After : Jan 30 03:33:09 2026 GMT
        Subject: CN=6972ebf5-0980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:5d:3b:31:a2:63:b5:22:91:ef:cb:38:02:
                    92:77:ae:79:2b:9a:cb:68:d9:b0:b6:89:c5:2e:f1:
                    43:4b:9c:f5:c7:e9:fc:e5:f2:63:8a:ca:c6:dc:bb:
                    43:1b:15:57:b6:75:8e:bb:5c:78:43:d4:33:93:b8:
                    3c:f0:4a:8c:fe:de:12:3b:16:15:03:2a:72:63:51:
                    b2:af:4e:62:83:e2:91:ff:44:81:08:14:0f:a4:42:
                    00:a6:32:54:27:5f:45:55:dd:a2:44:27:fc:66:4c:
                    85:30:65:b8:4e:da:a9:3f:b8:6a:f8:8a:a5:cf:ff:
                    4d:da:25:0d:35:f2:fc:56:8b:35:19:84:56:13:9f:
                    c4:a7:1d:e0:79:30:08:5f:2d:e8:29:34:fb:62:ed:
                    e0:a3:d9:5d:70:9a:40:30:8b:ee:48:e8:fc:70:2e:
                    e5:a1:bd:47:b6:ee:ca:3a:75:e7:48:46:76:53:1d:
                    46:07:13:8f:98:81:8d:00:9c:42:30:fb:89:a4:87:
                    63:14:ec:67:f8:3c:3f:db:3c:58:10:ac:99:e3:b6:
                    49:14:aa:0e:ff:1a:aa:1b:b8:d8:99:40:ca:98:07:
                    97:81:93:5c:6c:28:f9:fe:3f:7a:72:5a:97:79:4e:
                    cd:14:f5:81:13:9f:de:99:5f:8a:b6:19:79:a6:ca:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E3:16:E3:52:C3:14:A1:BA:45:A6:3B:06:7F:1C:38:67:0E:6F:A6
            X509v3 Authority Key Identifier:
                keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ec:41:0f:9e:81:9e:5b:44:38:2b:9c:a7:c7:cb:a1:af:d3:
         54:3a:7b:82:ba:65:59:10:59:47:24:e8:19:46:77:7f:f9:55:
         c3:ef:4f:eb:2a:a0:a3:30:25:5b:75:48:64:33:8f:b0:ac:1d:
         5e:ed:96:95:20:4b:78:ae:3f:d7:a1:1f:d7:b4:40:36:f2:2e:
         f8:33:cd:b4:4b:17:ab:c8:38:45:fe:56:19:d6:85:14:d2:6f:
         9b:b9:26:be:83:d9:53:96:f4:86:ab:ee:a1:cc:0d:9c:3b:21:
         b2:5f:ae:99:0a:48:93:fb:1c:60:bb:14:93:bc:3a:e3:48:3b:
         4b:e9:5e:94:ba:70:f8:46:f8:a0:37:c5:40:b3:60:31:33:84:
         49:1c:ef:8a:5f:66:42:53:10:20:80:98:73:c1:98:5e:a2:8e:
         69:c4:f2:fc:b4:a6:56:64:78:45:10:4c:e6:17:b6:c9:91:b0:
         67:22:f9:a2:35:28:c5:49:4a:4d:4a:cc:83:76:d4:11:40:07:
         d3:ce:4f:ef:10:c3:6c:50:5b:f5:bf:6e:84:7b:ee:d7:b0:fe:
         48:5c:53:15:42:fc:71:40:df:74:02:4e:f8:6f:85:14:60:5e:
         a4:86:7e:15:4b:01:2b:03:4c:2b:81:0c:74:4f:00:fc:65:a4:
         5e:50:16:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:29:04 2026 by rpki-client