This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
File:                     A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json)
Hash identifier:          FAY5mAM/0zvY+N8EKKFGHy5S0jQs8AvF7VqwefG2nEg=
Subject key identifier:   F8:48:AF:1D:9F:0F:A4:C1:68:D9:39:4B:15:E0:D9:AE:BD:9B:23:C7
Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
Certificate issuer:       /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Certificate serial:       16A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
Manifest number:          1691
Signing time:             Sat 24 Jan 2026 16:28:17 +0000
Manifest this update:     Sat 24 Jan 2026 16:28:17 +0000
Manifest next update:     Sat 31 Jan 2026 16:28:17 +0000
Files and hashes:         1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: SHkPe8sHrqV1m3jN3u89esdqxPaERsSh5IrZg7d0smk=)
                          2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
                          rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5799 (0x16a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
        Validity
            Not Before: Jan 24 16:28:17 2026 GMT
            Not After : Jan 31 16:28:17 2026 GMT
        Subject: CN=6974f321-2116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:1f:68:4c:0f:1f:3f:15:04:a9:09:6c:ce:
                    c6:16:e0:b2:56:27:5b:ea:4f:de:ea:ad:29:42:57:
                    8b:3e:e9:6d:71:58:e2:35:41:14:4a:40:96:54:56:
                    13:c3:11:58:58:90:05:79:8e:27:28:f5:b0:3a:02:
                    b0:b4:75:d7:34:16:cd:01:d3:1f:66:5c:d3:20:0e:
                    91:01:ce:bb:53:ce:76:c2:de:48:20:2e:34:e1:cb:
                    e6:3c:9e:b9:b1:ea:cf:f5:e1:a4:79:c3:cc:a6:b4:
                    21:44:04:75:f5:c8:29:42:15:f4:11:b1:f6:5b:80:
                    50:90:cb:42:02:91:be:4e:e0:ff:a0:45:1f:5e:c0:
                    f7:af:6e:63:bd:05:d8:66:d2:e4:e7:e1:f5:dc:d1:
                    2c:1f:7f:51:82:59:fd:e6:bd:47:8e:a8:b8:be:27:
                    f5:2e:e5:06:52:52:fc:81:3d:e6:87:95:cd:c3:42:
                    0e:0c:24:4b:2d:97:12:85:31:77:74:72:46:32:46:
                    2b:31:e4:9e:f7:26:45:26:58:d5:e8:b1:fe:f1:95:
                    6a:e9:df:cf:6e:0a:5b:a1:66:29:98:28:c5:ad:df:
                    92:9c:c2:78:81:4d:c3:fa:fb:83:9e:0e:81:fc:b4:
                    f3:f4:67:7c:83:a4:b8:f2:60:9a:2a:39:88:ce:b1:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:AF:1D:9F:0F:A4:C1:68:D9:39:4B:15:E0:D9:AE:BD:9B:23:C7
            X509v3 Authority Key Identifier:
                keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8b:7c:ba:89:2c:69:3a:15:40:aa:cc:69:0d:6a:09:28:af:
         d4:73:93:8d:13:74:a8:dd:ed:87:e6:e4:78:16:96:a2:65:f4:
         9c:71:a3:15:8f:d6:74:30:dd:92:3e:bd:5e:90:f8:e8:8f:bd:
         95:3d:eb:0e:39:fa:76:07:17:48:60:1c:f7:cd:6d:19:9b:f5:
         19:ff:b0:a7:6e:73:88:20:39:9a:2a:32:16:38:e8:dd:a0:ba:
         84:b1:4e:a0:fa:55:3e:c6:d1:23:b4:09:59:70:48:41:c4:fa:
         00:00:f7:0e:27:14:39:09:c0:53:c3:ae:97:a0:92:03:8c:d2:
         fa:fe:11:e6:53:d8:94:de:d5:3f:df:fb:01:e2:0a:09:be:bc:
         f0:5f:98:20:63:3b:7d:bf:29:bc:c4:b2:b0:45:c5:74:ed:62:
         c3:ed:1b:02:22:04:53:4e:8d:0f:fa:00:4a:4d:7f:0d:fa:7f:
         99:c1:b5:d4:2f:15:b8:3a:d4:1b:89:09:83:12:75:91:72:6a:
         a7:ed:0e:36:07:6a:6b:64:c3:2b:02:2b:a0:ea:af:84:e6:12:
         87:1f:3f:5b:d3:82:13:a1:eb:ed:5a:e5:d5:13:cc:3a:b9:ca:
         5a:81:00:c8:28:cf:ee:13:f2:f3:31:b3:15:14:ec:b5:61:cc:
         55:70:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:33:35 2026 by rpki-client