This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
File:                     9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json)
Hash identifier:          ZemI5Mb65powzrUE54FIO1cTVxNH9duOzEppRxE+4B0=
Subject key identifier:   CB:D1:DF:22:E1:DB:53:C8:88:A7:F9:69:75:A8:2A:60:3E:44:04:4F
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Certificate issuer:       /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
Manifest number:          E1
Signing time:             Sun 25 Jan 2026 05:05:58 +0000
Manifest this update:     Sun 25 Jan 2026 05:05:57 +0000
Manifest next update:     Sun 01 Feb 2026 05:05:57 +0000
Files and hashes:         1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: 5iucnX2wXYh6fgu+IBW3Pr4R9EgqJ9VlXo5rNv+cHbk=)
                          2: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: ot0PiXgJFtG3ow9OOuQQJ5zHZoHZdTDEI+ufokydrtM=)
                          3: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=)
                          4: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=)
                          5: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: dFlHoiKovBe7XL6W2rjfYVHX4DwruLCG9HZsmrV1dcw=)
                          6: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
        Validity
            Not Before: Jan 25 05:05:57 2026 GMT
            Not After : Feb  1 05:05:57 2026 GMT
        Subject: CN=6975a4b6-ac78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:54:23:8c:b3:b6:47:5e:1f:9a:a1:52:86:
                    3c:f2:28:57:a2:b3:6c:63:c6:24:0d:59:98:37:a0:
                    7a:42:ad:60:91:75:78:b4:02:c2:fc:09:bc:fe:b2:
                    e4:7d:5d:b2:7d:3d:69:3c:72:f2:91:ef:03:4c:75:
                    1a:99:72:cd:23:65:c9:64:5e:66:e9:16:d8:83:65:
                    57:38:a1:23:aa:95:a1:d9:81:25:84:f1:97:dd:ec:
                    b5:0c:22:68:94:db:32:ca:d4:83:30:cf:79:f9:3a:
                    ae:a6:e8:2b:ac:5e:17:ba:04:05:32:f7:3d:8d:7d:
                    19:e3:44:21:50:ec:dd:b9:73:45:d0:b8:a0:79:ab:
                    e2:fa:00:69:e8:f6:03:e0:52:3e:50:87:4e:a3:54:
                    d8:00:25:39:45:6a:1d:9b:e3:44:7d:72:70:8a:9e:
                    dd:1b:60:88:23:52:a3:94:da:b8:26:1b:bc:56:7e:
                    89:c7:13:15:f2:c7:f3:f1:45:93:5f:5e:cf:3d:2b:
                    a6:10:26:10:9b:db:c6:f7:95:a1:8c:11:2b:f6:67:
                    07:08:5e:67:45:d1:50:9e:a9:a7:3c:e4:71:07:2b:
                    93:f2:68:bc:0e:e4:d9:57:c9:13:db:87:42:53:9b:
                    0d:73:93:51:5c:f6:45:72:97:9c:86:f9:9e:c9:e8:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D1:DF:22:E1:DB:53:C8:88:A7:F9:69:75:A8:2A:60:3E:44:04:4F
            X509v3 Authority Key Identifier:
                keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:66:3a:22:86:fa:25:56:e0:21:54:35:87:5a:09:6f:55:b5:
         54:62:66:48:cc:91:bd:6a:ef:34:5d:4f:2f:a6:c0:ab:07:e1:
         d7:af:81:20:2a:fc:05:53:b4:80:ff:a2:72:77:23:55:ad:88:
         8d:eb:73:38:77:1b:54:f4:f5:00:f1:f2:d5:bb:a7:d2:a5:32:
         77:9d:fa:ca:d4:54:c9:32:5f:8b:c8:37:9b:98:ad:2e:fe:36:
         75:1f:f8:b0:97:e7:dd:0b:fb:f8:bf:c2:53:46:bf:19:ea:84:
         2f:de:8c:27:97:9a:10:6a:ba:2e:88:b3:08:62:bc:32:04:1e:
         a2:2b:59:15:6e:ca:d3:6b:74:45:a6:75:63:af:7a:ad:c9:6b:
         7c:00:bc:48:51:2d:b7:e8:8e:6b:da:0a:51:7b:45:04:94:42:
         7e:47:71:75:85:0c:44:79:9a:48:59:ec:44:2d:e9:0e:9d:1d:
         5f:ca:ab:61:c3:ff:53:f9:b8:cd:55:c3:8e:0c:32:03:f3:7e:
         88:1c:1f:c9:54:aa:de:26:84:20:f8:0c:d0:c4:77:3a:e0:d2:
         8e:f6:1e:2f:16:3a:f6:09:71:dd:e8:0a:b6:00:cc:f3:dc:86:
         af:97:39:23:08:b2:d0:da:d2:65:a8:b0:34:ff:2b:8c:33:24:
         b4:fd:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:47 2026 by rpki-client