This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
File:                     m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json)
Hash identifier:          ktZQ3uTUBn8Qu51fyFbJ54i3st/9R900IN5IBoKX9Xg=
Subject key identifier:   DA:63:F1:E3:B2:6B:A8:3D:99:6E:35:8C:F7:3C:0D:89:B0:4C:62:6C
Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4
Certificate issuer:       /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
Manifest number:          43
Signing time:             Fri 23 Jan 2026 06:23:38 +0000
Manifest this update:     Fri 23 Jan 2026 06:23:38 +0000
Manifest next update:     Fri 30 Jan 2026 06:23:38 +0000
Files and hashes:         1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: hcFIr74hDm3NYP/DT6Oy+r7+Zxt2mzMmsLia0S4EqQQ=)
                          2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: ResLExXl8yuMXGOR84bDKNTRnpa/Fbrh1BqAV2RUGhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4
        Validity
            Not Before: Jan 23 06:23:38 2026 GMT
            Not After : Jan 30 06:23:38 2026 GMT
        Subject: CN=697313ea-2236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:ea:62:17:e5:b1:e6:59:f9:fd:86:49:7d:
                    2d:ee:aa:04:09:a4:fd:9e:95:c5:9a:47:53:68:1d:
                    6f:93:a6:0f:64:bb:d5:0e:49:70:71:6a:cd:39:2a:
                    67:7c:aa:4b:91:14:14:da:28:0f:76:a9:6b:2a:ae:
                    21:83:7d:74:0b:dc:d7:d0:77:3c:e1:74:0a:5d:39:
                    a9:ae:5d:87:a4:82:fb:b0:16:04:b3:33:b7:52:4b:
                    c5:be:8c:9d:e7:dc:63:78:bf:a5:1b:21:2d:90:ed:
                    89:7b:95:c0:96:8c:ba:69:98:1b:05:e0:5a:02:27:
                    6f:60:3d:90:1b:96:49:09:8b:40:14:40:e0:cf:3a:
                    a3:84:12:ea:dd:a0:76:1e:6c:a4:89:2a:fa:f5:9a:
                    56:45:01:3e:91:40:ad:62:83:bb:cf:b4:7e:df:5d:
                    26:d5:76:95:e3:db:5e:7b:91:62:7f:1b:63:87:cd:
                    95:5b:b9:78:65:d6:d0:b5:0c:b7:06:65:64:09:d5:
                    28:60:b8:0b:ef:e6:66:70:6d:d5:e8:db:44:36:d3:
                    9e:df:a8:b9:35:5d:0c:e4:83:33:73:18:62:ec:24:
                    63:17:60:9a:6c:c7:60:42:01:14:42:b7:2f:f6:f7:
                    9f:91:4e:51:39:21:b3:df:68:86:14:42:01:75:2b:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:63:F1:E3:B2:6B:A8:3D:99:6E:35:8C:F7:3C:0D:89:B0:4C:62:6C
            X509v3 Authority Key Identifier:
                keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:71:e5:f2:98:54:13:32:1f:94:21:c9:a5:d3:d2:94:03:01:
         7a:51:fc:7a:04:1a:99:4f:92:7a:f9:c6:2d:2d:0c:61:14:a5:
         6a:18:0b:6c:25:fc:12:d8:ce:d2:a4:4e:2f:30:a8:ec:75:80:
         59:f7:29:ab:93:77:cb:b8:79:d7:b9:2c:c4:0e:31:61:d9:cd:
         94:06:eb:fd:0a:c5:5d:80:e5:02:d9:47:02:75:a6:76:f1:37:
         3b:75:3e:44:fb:c7:60:fe:f6:e4:3b:7d:ab:8a:e2:f9:54:b4:
         45:4d:a5:f8:4d:ec:05:8e:69:6b:6f:e1:da:49:47:88:7f:8f:
         5e:a1:04:2e:3a:31:72:8f:84:59:d5:85:65:81:03:aa:48:b2:
         3d:f9:ac:fd:ce:ac:fb:a3:f4:74:f4:a9:3e:40:57:a4:52:8b:
         6c:2a:52:7c:57:ce:4a:08:6e:93:69:58:ac:4c:22:e1:05:cf:
         b0:ec:dc:f8:04:b1:87:fa:0f:45:a3:3a:a0:8e:54:3a:bf:b0:
         10:88:21:6c:e6:10:0c:87:37:f7:80:3a:cb:77:87:3b:dd:95:
         9f:b2:8b:a7:52:74:b5:90:80:c7:c4:ef:8d:2b:31:04:a6:77:
         4a:e2:9a:31:fc:6c:cb:ba:21:1e:9f:01:18:f3:69:fe:83:08:
         85:c2:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:48 2026 by rpki-client