This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          pM9Yr4xWy+wExIh7gxVazlw6Q6yPKO50DK+GCvGoJHI=
Subject key identifier:   81:25:73:AC:32:F6:88:66:3E:DD:8E:3C:11:6F:29:6C:88:B4:A7:B7
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          01CE
Signing time:             Sun 25 Jan 2026 02:15:13 +0000
Manifest this update:     Sun 25 Jan 2026 02:15:12 +0000
Manifest next update:     Sun 01 Feb 2026 02:15:12 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: TwbB37IbjssxcKUS+dIa3Ab2kCossQvbM3vfKq2ckWM=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: Iuws9NrVtp4Hp18jNO1d1Y0TiH8At1P1mnw1eI9JeUU=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: WV1AYVH+VxYegf7IkYCFOtt6eabKoa8E7Gk8VCZklvI=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 9II8C/zPZ8Sqh/GnkvMtaceds37LRqTiNOgVoHgvhUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Jan 25 02:15:12 2026 GMT
            Not After : Feb  1 02:15:12 2026 GMT
        Subject: CN=69757cb1-8cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:97:94:e5:ca:4d:46:ff:13:36:77:ea:aa:
                    0c:fc:d6:71:10:f5:bf:0d:6f:9a:fe:10:23:50:e6:
                    e5:2e:92:d9:87:a4:6a:eb:2a:52:7d:47:2d:2e:f2:
                    4c:8c:46:1f:41:b1:3a:e2:87:d4:f9:20:ea:df:ec:
                    6e:1d:c6:25:60:2c:93:ab:e0:a3:d1:db:38:37:cd:
                    6a:0d:6b:d7:b8:a4:4e:5c:5a:a9:df:0d:63:06:d6:
                    6f:fa:59:06:0d:58:ef:e8:99:91:fa:48:b4:2e:ba:
                    f9:dd:c9:f3:cf:24:c9:18:bf:96:56:16:93:df:eb:
                    ae:91:5e:57:fa:bb:64:48:be:e1:ae:f3:46:ed:fd:
                    45:27:66:3c:99:fb:02:46:e7:94:d6:61:39:26:27:
                    5c:bb:10:78:cd:eb:4b:c5:13:5b:60:a4:37:ab:19:
                    6e:7c:2d:83:46:e6:e9:e0:20:c6:22:fc:80:9c:51:
                    c4:60:f5:13:b8:b4:b3:99:03:41:0d:eb:1a:7a:e3:
                    66:c7:fa:b4:94:e0:2d:31:05:3a:6f:de:92:c1:da:
                    60:f1:52:8c:50:8d:b8:21:ca:ed:e8:b8:58:3d:22:
                    7e:77:9d:c5:0d:1b:5b:35:fa:15:76:14:a3:84:33:
                    f0:ec:bd:7c:ec:c8:56:a2:78:6f:3f:91:a9:49:aa:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:73:AC:32:F6:88:66:3E:DD:8E:3C:11:6F:29:6C:88:B4:A7:B7
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:30:60:30:7b:fd:2a:2a:5b:9c:41:84:fd:63:4b:a8:fd:
         e9:b4:aa:32:3c:a0:a4:90:8d:67:44:25:65:6d:96:14:4b:4e:
         ad:f1:ad:5c:89:9c:c6:b7:cb:cb:9c:06:47:c5:d1:37:36:eb:
         01:b0:09:08:3d:19:28:6a:52:2b:18:dc:eb:88:b9:35:f0:d9:
         48:b9:6e:f8:66:db:5d:95:88:eb:c3:10:6d:96:2b:0b:73:d0:
         71:07:fe:5d:49:9a:16:4d:14:4f:0a:67:17:14:43:84:01:2b:
         cf:eb:b2:e1:f6:05:1c:a3:28:57:c9:d9:a6:e6:f9:24:b7:27:
         49:5f:fb:db:28:2a:53:11:c5:47:9c:f5:1c:71:6f:c3:ca:7c:
         0f:94:f4:98:4b:df:52:46:60:02:f2:08:df:3b:b4:92:08:07:
         60:34:02:a6:f8:1d:61:dc:66:89:fd:1c:e4:98:43:ab:ee:70:
         a2:eb:e4:cf:a7:ca:38:8a:e6:20:87:f7:16:b0:ae:e4:ff:92:
         0f:39:c2:07:43:fb:e7:a9:05:b0:74:67:fd:92:5c:8c:ef:a2:
         fa:ec:43:62:66:6b:30:92:f6:3f:1c:7c:1b:68:85:04:49:78:
         db:37:15:c2:63:39:5e:67:e0:7c:50:b2:8e:a1:3d:de:17:fc:
         7d:03:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:13 2026 by rpki-client