This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          eTUQz0dfm2M2tzBB3UTcMwvnqAXxYmCuWm7jCrNup0U=
Subject key identifier:   A6:90:FF:17:D5:63:48:2D:D7:21:02:A8:CA:18:38:6F:3D:FF:72:E6
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       1001
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          0FEB
Signing time:             Sat 24 Jan 2026 17:10:10 +0000
Manifest this update:     Sat 24 Jan 2026 17:10:09 +0000
Manifest next update:     Sat 31 Jan 2026 17:10:09 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: xfL/q0AbzkM9BoIlGN8luDi7wBQkGdxiAtNOBR2GtPQ=)
                          2: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: i8fQntshSNYD8zDT2wDiHtaQKzGJtDGb0egHvcZuXHs=)
                          3: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: E66SV6WNRD5ULWCmhiJGOhN+NZfmVirzyRoB4Hy/u4Q=)
                          4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: UGdOvww/zqYEiJCbgpSOvpp5LjsG3mU+jjIktHieTx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4097 (0x1001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: Jan 24 17:10:09 2026 GMT
            Not After : Jan 31 17:10:09 2026 GMT
        Subject: CN=6974fcf2-1a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:f3:16:64:21:c4:2c:d0:f0:35:4c:10:55:
                    55:11:f3:e8:64:2b:a7:81:3b:5e:bf:aa:b7:75:c2:
                    b4:c1:b2:a2:e1:61:15:69:46:2c:fa:ba:ab:e9:b0:
                    d9:1d:59:2f:32:31:69:04:d7:5f:c1:7b:00:7d:f5:
                    91:cf:64:cf:f1:b3:ea:38:cb:3d:8b:41:dc:70:d9:
                    0d:99:a3:56:77:6b:92:1a:f7:a8:d2:8f:af:4e:2e:
                    30:e0:b7:ff:8b:ca:85:96:13:60:3b:d2:ff:17:2a:
                    70:42:c0:05:49:a6:eb:84:58:df:76:ca:03:48:32:
                    34:8a:8d:5d:25:1e:1e:d1:b2:b9:6c:63:23:74:c7:
                    22:f6:b9:48:94:74:26:5e:a7:36:ac:53:8c:7b:b1:
                    41:6c:51:b2:4a:1f:8e:3f:3f:59:28:53:13:ee:64:
                    3e:af:e0:da:50:27:f9:63:79:42:1c:f3:ba:e6:23:
                    ac:45:6f:46:b5:ea:03:d3:b2:c2:34:e5:e6:13:b5:
                    a6:fa:5b:ca:3b:51:9c:14:9c:d8:d4:9a:5b:36:f1:
                    89:cf:68:10:58:ea:8f:2a:1a:f0:87:ec:46:28:62:
                    0c:76:d5:c1:4e:7a:f7:a2:de:03:35:57:7e:d0:74:
                    f1:0e:1c:39:32:ce:53:6f:9f:6d:a3:4a:43:62:3e:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:90:FF:17:D5:63:48:2D:D7:21:02:A8:CA:18:38:6F:3D:FF:72:E6
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1c:41:4a:a1:0f:2a:75:68:a1:8d:54:21:01:d4:7e:6b:a9:
         a4:b6:9d:bc:41:95:1a:1f:f3:a3:7e:a9:28:4e:af:15:e4:f2:
         27:2b:be:de:8e:1d:1d:95:28:ec:dd:1d:cd:b8:c2:1f:17:61:
         0a:53:9d:e1:73:fe:cc:53:93:59:6f:ca:6c:f7:ff:87:15:50:
         fe:5c:62:f2:e9:24:5e:31:fc:b8:d7:39:94:15:e6:95:e2:a1:
         02:99:0d:3f:b5:90:4c:d4:cd:d4:df:c5:38:47:d1:e2:d3:d2:
         f2:7b:b9:76:34:f2:1c:fc:ce:38:e0:09:df:c3:58:84:25:66:
         b9:96:06:ff:0b:63:67:d2:67:0b:66:0f:c2:76:a7:63:98:6b:
         96:1e:3f:63:f8:19:11:cc:08:63:3d:9e:3f:93:51:75:a8:bf:
         21:3c:d7:74:30:4c:c1:a9:69:af:36:3d:0b:bf:5e:ad:0a:38:
         b0:17:cf:2e:c6:21:5a:e5:24:3d:bd:5f:5f:f3:16:06:7a:a0:
         ae:fe:2a:ce:04:f7:fc:c3:c5:53:45:08:94:a8:52:93:46:94:
         84:09:d8:1f:34:c1:be:53:cd:9b:56:dc:da:87:78:17:2a:3a:
         0c:32:8a:c0:3c:62:4b:4b:11:b5:9d:8c:79:45:65:c8:5f:ac:
         5e:6f:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:51 2026 by rpki-client