This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
File:                     a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json)
Hash identifier:          6j8kPEF5WdA3pm6CEmYXk8bZzRNfFXbxJDNHEAbiVpg=
Subject key identifier:   F9:40:69:93:6F:46:32:A1:94:E1:A9:AA:11:2D:75:91:EB:E2:FF:8B
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Certificate issuer:       /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
Manifest number:          0216
Signing time:             Sun 25 Jan 2026 01:32:40 +0000
Manifest this update:     Sun 25 Jan 2026 01:32:39 +0000
Manifest next update:     Sun 01 Feb 2026 01:32:39 +0000
Files and hashes:         1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: 5Zej6MwBECjPnhORjcd7vJwyzy19y+6b79FkTxWC+Og=)
                          2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: gnoiGXKkrmhYTwfXU41IB03BpkGU00B0FHz74SrCkdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
        Validity
            Not Before: Jan 25 01:32:39 2026 GMT
            Not After : Feb  1 01:32:39 2026 GMT
        Subject: CN=697572b8-ee82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:b7:23:80:04:b9:d5:84:f0:22:8d:a8:89:
                    29:61:b0:0f:57:bb:d3:1b:35:96:27:42:5c:7e:6d:
                    1a:65:26:08:47:87:04:19:e1:c8:d5:f9:c0:c0:f1:
                    7c:1c:15:07:1e:1b:79:06:16:29:77:7f:b0:4f:19:
                    31:bd:4e:32:55:c9:a8:2f:dd:a4:ca:fb:ce:dd:7d:
                    7e:7b:7c:4a:72:ee:e3:80:ee:95:38:f6:bb:fc:27:
                    2f:56:f1:64:3c:0e:f6:82:73:31:a6:d8:20:76:89:
                    4e:85:d5:42:79:8c:d6:4d:e3:57:71:4c:55:9f:d1:
                    41:d9:a1:81:cd:d2:0f:8b:3d:19:33:6d:cd:c6:e5:
                    22:c1:67:34:c9:b7:b0:0d:ab:e2:db:4c:60:13:d6:
                    c2:99:2b:57:ee:f8:0e:bd:1d:07:12:89:d7:4d:2a:
                    51:e8:b6:0a:b4:0a:a5:b3:0c:00:ce:aa:8b:a0:cd:
                    05:a7:ea:21:20:c4:a1:98:78:01:09:bd:c6:b6:95:
                    71:59:5b:18:98:a5:3d:c9:c5:3d:dc:de:6a:8a:77:
                    58:19:20:3f:82:39:a9:b4:9e:e5:be:ab:00:45:70:
                    6f:74:9b:96:4b:6e:2e:5d:75:c5:2b:83:b3:0f:f6:
                    f6:41:97:26:b7:cb:58:07:ad:c2:c5:ca:5f:a8:d6:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:69:93:6F:46:32:A1:94:E1:A9:AA:11:2D:75:91:EB:E2:FF:8B
            X509v3 Authority Key Identifier:
                keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:51:46:65:33:51:9b:cf:39:87:02:7b:c7:dd:d7:2a:25:c5:
         8d:d2:a3:ca:f6:87:21:13:a2:49:ba:11:ea:1b:7c:3f:9e:c6:
         e0:68:3a:93:85:55:73:fd:bf:c1:0f:9d:8c:46:5b:0e:d2:37:
         13:d4:20:0e:26:a3:87:cb:78:db:bb:f0:c8:15:01:60:ff:94:
         fd:67:00:9c:63:dd:76:69:89:af:82:cf:37:2f:f9:0c:a3:b3:
         d2:9c:5c:fc:0e:e4:3c:cf:71:b7:c2:37:d3:e5:e5:7e:4c:0f:
         e6:f7:c4:a2:a8:70:a0:27:36:53:8a:12:87:87:91:15:9e:c4:
         0a:06:fa:58:8e:7e:c7:33:ac:ca:97:ad:95:b6:7e:01:3b:b2:
         fa:e0:e9:28:2d:17:f1:94:ba:03:5e:14:ab:49:19:52:17:e8:
         5b:89:08:a6:38:9a:73:71:96:6a:55:5e:4c:57:fa:3a:da:32:
         04:12:73:2e:19:bf:da:cd:03:ce:29:1e:16:c2:75:2d:f4:47:
         88:2d:e8:e5:f6:70:94:49:d5:b7:ce:2b:5a:1d:76:da:d3:ff:
         63:d4:71:df:cf:89:e5:64:01:f2:2f:42:70:21:6e:63:0b:d2:
         b5:9e:c6:ab:7f:6a:6a:9c:e6:9d:b6:2c:8c:8b:0f:be:49:8d:
         cc:e7:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:11 2026 by rpki-client