This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
File:                     PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json)
Hash identifier:          glhPUVVEOfVUUyWrTfubB6mQmetmriFlBvGzA+w0+cE=
Subject key identifier:   E0:99:9B:F1:1F:2A:E0:DB:CC:D7:80:B9:17:1D:72:90:87:56:08:D0
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Certificate issuer:       /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
Manifest number:          0114
Signing time:             Fri 23 Jan 2026 04:02:04 +0000
Manifest this update:     Fri 23 Jan 2026 04:02:04 +0000
Manifest next update:     Fri 30 Jan 2026 04:02:04 +0000
Files and hashes:         1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: p7AI4sWpi2yW2V6gLAfad3yLwMJOsuoFeDwD7urhATE=)
                          2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: Hdt3DT88wjtxw1TUKGFWHT6pNsnIEUfha62M8xw528A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
        Validity
            Not Before: Jan 23 04:02:04 2026 GMT
            Not After : Jan 30 04:02:04 2026 GMT
        Subject: CN=6972f2bc-e3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:4d:fe:46:0b:8c:b7:3c:6a:26:31:6b:4e:
                    57:ba:60:88:b8:90:1b:41:b0:6e:3f:53:91:47:3f:
                    4f:44:5c:e3:f5:cb:32:ca:e9:08:33:12:22:d8:eb:
                    e0:90:9e:64:db:2e:04:a1:86:57:c1:40:d7:7c:2a:
                    44:0b:84:cc:18:4e:c1:f0:1d:1e:6d:a7:99:a1:a2:
                    67:64:a9:9e:74:8b:c9:61:d5:e5:db:cf:c0:eb:22:
                    ad:05:07:c9:94:95:14:e7:64:61:18:ad:08:d4:31:
                    34:e2:c5:59:1d:b7:8b:0a:fe:78:04:ce:57:70:11:
                    87:f1:1f:7b:06:6b:44:a7:9f:57:79:4b:96:e9:a3:
                    6c:52:f7:d9:24:62:b4:36:b8:af:f7:51:46:2f:71:
                    af:63:51:85:f4:2a:45:f8:9e:13:f4:25:6c:93:d7:
                    27:a1:6b:1e:ad:58:39:9c:bc:6a:6f:c7:60:6b:7e:
                    2a:b4:da:0f:b1:3c:55:bb:1f:3d:33:ee:65:1a:a7:
                    f0:06:b4:b6:ed:6e:b5:6f:96:3d:37:99:3d:23:04:
                    f0:28:78:2a:f6:ee:17:4c:f3:1a:53:69:e0:09:17:
                    64:41:0d:e5:61:3b:31:2b:e6:bb:ac:e2:b3:25:eb:
                    ba:41:5e:e5:d0:52:46:93:bb:a2:4e:4e:6c:ec:f2:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:99:9B:F1:1F:2A:E0:DB:CC:D7:80:B9:17:1D:72:90:87:56:08:D0
            X509v3 Authority Key Identifier:
                keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:37:05:fa:12:16:76:58:39:da:5e:21:5e:10:20:68:45:
         16:66:87:0d:52:5e:63:9a:9b:22:76:0c:e3:58:96:fc:33:b5:
         a0:fa:16:0b:d2:94:8e:3d:70:c9:7f:9c:18:d3:35:ba:97:c9:
         35:05:e4:a8:c5:dd:5d:12:fd:8f:1d:a7:67:c8:0b:fe:1f:2f:
         6b:56:d4:42:5e:78:2f:1f:a7:ba:97:7d:2c:88:45:bf:f0:c1:
         ab:3c:d6:ef:bb:54:7f:72:9f:ed:d1:99:d2:bd:09:a8:df:28:
         f9:96:92:25:9a:b7:8d:f9:b8:fe:b7:37:6b:a1:4d:2f:92:14:
         ab:66:15:d0:b7:5d:d1:5d:54:a3:8f:c1:f0:5c:ca:6c:1f:7a:
         40:d2:40:ad:29:8e:21:07:4a:89:ee:e9:54:f7:5f:86:64:8b:
         0d:78:e7:04:85:69:65:c5:fd:d7:e2:58:0e:98:2a:27:33:dc:
         22:0f:cb:37:57:7e:5f:39:d7:d6:7f:29:a2:11:58:fc:bb:53:
         83:7a:10:32:38:5e:41:55:0a:54:a0:7a:d5:df:92:b1:8f:6b:
         c6:b8:e6:cb:d1:92:3f:37:b4:96:cc:b1:e3:43:c9:0b:27:51:
         45:63:12:7e:8a:2a:ba:39:1c:fa:53:e3:57:12:a1:f5:78:ec:
         1f:0f:f0:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNFQjkxMTAvBgNVBAUTKDNDQzc3OTBFMjAzNzY2NUVGNDk2MkI4MURBRDJGRDA3
RUQ0NkY4QjIwHhcNMjYwMTIzMDQwMjA0WhcNMjYwMTMwMDQwMjA0WjAYMRYwFAYD
VQQDDA02OTcyZjJiYy1lM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9pN/kYLjLc8aiYxa05XumCIuJAbQbBuP1ORRz9PRFzj9csyyukIMxIi2Ovg
kJ5k2y4EoYZXwUDXfCpEC4TMGE7B8B0ebaeZoaJnZKmedIvJYdXl28/A6yKtBQfJ
lJUU52RhGK0I1DE04sVZHbeLCv54BM5XcBGH8R97BmtEp59XeUuW6aNsUvfZJGK0
Nriv91FGL3GvY1GF9CpF+J4T9CVsk9cnoWserVg5nLxqb8dga34qtNoPsTxVux89
M+5lGqfwBrS27W61b5Y9N5k9IwTwKHgq9u4XTPMaU2ngCRdkQQ3lYTsxK+a7rOKz
Jeu6QV7l0FJGk7uiTk5s7PJFCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCZm/Ef
KuDbzNeAuRcdcpCHVgjQMB8GA1UdIwQYMBaAFDzHeQ4gN2Ze9JYrgdrS/QftRviy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS8wNTFDOUU2NDU0
QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1psNzBsaXVCMnRMOUItMUct
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1ps
NzBsaXVCMnRMOUItMUctTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB62TcF+hIWdlg52l4hXhAgaEUWZocNUl5jmpsidgzjWJb8M7Wg+hYL
0pSOPXDJf5wY0zW6l8k1BeSoxd1dEv2PHadnyAv+Hy9rVtRCXngvH6e6l30siEW/
8MGrPNbvu1R/cp/t0ZnSvQmo3yj5lpIlmreN+bj+tzdroU0vkhSrZhXQt13RXVSj
j8HwXMpsH3pA0kCtKY4hB0qJ7ulU91+GZIsNeOcEhWllxf3X4lgOmConM9wiD8s3
V35fOdfWfymiEVj8u1ODehAyOF5BVQpUoHrV35Kxj2vGuObL0ZI/N7SWzLHjQ8kL
J1FFYxJ+iiq6ORz6U+NXEqH1eOwfD/CH
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:07 2026 by rpki-client