This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
File:                     1AwbOf4FNm7Ysj4IgLaet198kOI.mft (raw, json)
Hash identifier:          EvORfpIuX2TTotGKVQoW1+93JQtTqn1JattfYnl0Dg4=
Subject key identifier:   67:1C:90:1D:72:C5:97:14:CC:46:27:9A:11:07:75:5B:6A:E5:D7:77
Authority key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
Certificate issuer:       /CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Certificate serial:       0B7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
Manifest number:          0B72
Signing time:             Sat 24 Jan 2026 18:40:46 +0000
Manifest this update:     Sat 24 Jan 2026 18:40:45 +0000
Manifest next update:     Sat 31 Jan 2026 18:40:45 +0000
Files and hashes:         1: 1AwbOf4FNm7Ysj4IgLaet198kOI.crl (hash: lGv2akap0ValjdNnYRAHj33+gPsgAquFIXt5bm5X4X4=)
                          2: 5C9BC9D045C311EA9DE6F237C4F9AE02.roa (hash: MFAkJWqLTCFjc2AZoDqXIN5GFKdjipOlXptUILZsE5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl
                          rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2938 (0xb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A26, serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
        Validity
            Not Before: Jan 24 18:40:45 2026 GMT
            Not After : Jan 31 18:40:45 2026 GMT
        Subject: CN=6975122e-617f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:de:c6:2e:f1:37:64:c7:d8:8b:14:d3:c4:
                    e8:74:2e:cd:57:bd:f0:79:2c:b9:b0:d5:22:19:ab:
                    e5:69:d8:43:17:2c:9f:d7:4a:2c:45:03:d8:92:b8:
                    25:7c:22:96:03:d2:f0:33:a5:a3:27:88:cf:47:2e:
                    b0:26:a4:32:85:ae:6b:14:d3:f0:26:53:66:5f:d2:
                    fe:26:24:2d:21:1d:d9:a4:c6:28:1a:82:ed:34:c6:
                    2c:72:d9:48:d1:c4:e4:5f:a9:37:f9:2f:3f:d4:58:
                    24:33:47:1b:a7:a5:65:5d:7d:fa:48:a6:14:b2:b0:
                    d3:88:23:10:b4:b7:98:63:f9:16:06:b8:ea:3f:91:
                    eb:54:e7:bc:96:3d:b2:0a:6a:56:0d:64:d0:e6:7f:
                    e4:dc:51:3b:14:81:36:68:21:af:8f:a2:46:98:a7:
                    6b:33:1b:56:1e:38:28:92:81:79:6d:62:6c:41:8d:
                    e3:e3:f0:86:2e:eb:cb:9f:e7:75:1b:3d:3c:fd:a4:
                    ba:e5:52:81:05:76:6d:07:3d:9a:e7:2e:72:4e:ff:
                    7c:c1:18:1b:f7:8f:bc:79:3e:33:9c:48:b3:e4:63:
                    aa:e6:d3:12:02:b0:1b:d0:fc:80:28:f5:b5:6a:be:
                    4c:cc:25:93:70:76:04:bc:60:cb:dc:5b:a1:20:32:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1C:90:1D:72:C5:97:14:CC:46:27:9A:11:07:75:5B:6A:E5:D7:77
            X509v3 Authority Key Identifier:
                keyid:D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:15:c9:c4:ba:1f:79:af:cf:d1:1c:43:14:47:21:29:55:86:
         d8:f4:bd:bd:75:a1:64:43:b5:f5:c3:72:ff:60:0e:06:ad:bd:
         f2:bf:fd:e0:6c:d8:c8:81:f3:c7:d8:b6:80:67:de:fc:fb:75:
         01:ab:fa:25:3d:83:0f:13:13:e1:e9:f8:ed:30:6a:ec:72:7f:
         1e:38:71:3f:05:24:2d:d3:e8:ae:de:04:d7:53:b0:1a:ea:af:
         8a:f0:87:61:f2:cc:6f:c8:5a:bb:d4:27:f8:d6:16:d0:6b:e1:
         d0:e5:c6:68:63:ea:91:70:18:b6:89:4a:56:b9:e4:a5:3b:c9:
         86:23:78:a5:ba:44:81:11:9c:5e:7e:29:1e:5c:a9:93:c6:69:
         f7:94:79:54:d2:a4:42:df:1e:65:a2:0b:4c:ae:e1:92:29:76:
         48:97:d4:26:2f:ff:96:ac:bf:46:0b:bf:68:5c:a7:27:24:1f:
         dc:1e:80:d8:3f:a4:74:87:e6:ec:2f:43:68:aa:19:63:43:50:
         17:ba:2d:1b:49:ce:5a:73:99:7e:05:d2:40:a7:09:47:e4:cd:
         1c:23:52:76:eb:12:81:bf:d7:d3:cc:40:ac:f1:ba:fa:ed:93:
         39:c4:b6:d0:ae:09:c6:0e:31:99:f0:7d:3f:36:9f:d0:5c:ed:
         94:11:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:52 2026 by rpki-client