This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          Z31jrXWNfH97oLzUu06L2w9I3yOTa4gCv4Mss5dZQIM=
Subject key identifier:   57:B5:2B:29:85:74:6C:37:67:B5:BB:2C:60:EA:E7:09:F0:2A:34:1B
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0D7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0D6F
Signing time:             Sat 24 Jan 2026 17:38:18 +0000
Manifest this update:     Sat 24 Jan 2026 17:38:18 +0000
Manifest next update:     Sat 31 Jan 2026 17:38:18 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: HzoTO2oK/oNXW76Ht9fBoTwkV97EIl8ofi83TThvHGo=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3450 (0xd7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Jan 24 17:38:18 2026 GMT
            Not After : Jan 31 17:38:18 2026 GMT
        Subject: CN=6975038a-9ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:50:07:66:c0:85:d3:e0:37:29:cb:e7:01:
                    5d:e9:c3:be:6d:8a:22:ee:d8:32:9e:fe:3f:95:38:
                    98:17:38:fb:4f:c6:d7:ba:7e:6f:7f:18:70:bc:29:
                    c8:1b:de:07:55:0d:1c:71:73:8a:87:2a:2a:05:06:
                    d8:64:24:70:67:ca:1b:d8:da:93:aa:d8:69:b4:4b:
                    62:3c:dc:db:ac:41:bf:cf:b7:b2:ba:a0:9e:ff:9b:
                    8e:2b:bd:33:0d:20:95:db:de:4f:d2:c0:4f:ca:30:
                    6b:07:10:74:98:a2:ee:fc:2e:c7:6b:c3:83:fc:7f:
                    c4:ff:8d:da:16:40:80:0a:1e:70:27:14:48:cd:78:
                    26:97:d2:1c:2f:4b:b6:8b:f5:51:33:86:11:0f:04:
                    0e:51:fa:09:04:c8:f1:ec:81:3d:c9:53:05:cf:70:
                    ba:88:f5:04:0d:12:b1:0f:4d:ea:d3:25:85:d4:a1:
                    b9:0c:30:6f:85:30:b4:90:6a:97:51:f5:3a:2f:d0:
                    24:17:e4:75:5d:7c:7b:b2:83:36:f2:33:01:73:c9:
                    d3:0e:15:8a:61:60:41:18:42:2b:a4:bd:54:b3:db:
                    ce:44:9d:ae:b0:fb:bd:63:cc:8c:dc:89:79:d1:38:
                    6d:41:f4:8d:33:e4:b9:eb:b9:0d:6d:3f:15:0e:7c:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B5:2B:29:85:74:6C:37:67:B5:BB:2C:60:EA:E7:09:F0:2A:34:1B
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:ce:fa:32:d9:be:20:1e:4d:67:36:f0:79:0d:3c:4e:3d:
         0c:16:e0:57:0f:7c:43:29:bd:54:aa:22:28:d4:3f:60:1a:42:
         1e:c4:1a:16:c9:e0:15:1c:9f:7a:b9:61:02:0b:99:f4:da:6f:
         32:b3:ae:16:2c:fb:8d:04:11:5c:45:a3:28:33:3b:48:24:34:
         a0:ca:37:9c:48:bd:e6:64:60:05:1e:f0:c8:2e:a1:c5:5d:5f:
         5e:00:0f:29:4d:d0:00:d6:d9:6b:26:22:fc:7c:81:1e:cb:24:
         2c:4e:38:48:3e:87:a7:2c:41:f1:1c:bc:0d:83:d7:f8:b4:58:
         2a:4c:8b:bb:4f:c9:81:f0:e4:c9:fc:08:ad:e5:e6:b5:1a:f6:
         8a:4e:7d:6a:5d:5b:39:c2:49:b8:79:8d:0e:02:d1:38:e1:3e:
         07:28:75:13:02:19:02:5b:2e:3a:54:91:c2:bd:c5:1f:c2:f3:
         c5:1c:bc:59:5b:d1:16:5b:2a:bd:e2:53:56:89:5f:66:58:c2:
         e3:1c:63:a7:02:a0:f8:35:a7:14:f5:2f:ef:90:c0:c9:36:44:
         27:2c:a3:1f:c2:d4:ee:4d:14:1f:a1:16:dd:b7:21:e6:55:48:
         b6:3e:74:ed:24:3c:3d:3f:cc:4a:f4:b7:b7:93:d0:3c:12:05:
         19:ad:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:50:22 2026 by rpki-client