This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
File:                     o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json)
Hash identifier:          854FfNZaXwG5NvelxnUfW9G8zwgal0Al1u1nV+WNPxo=
Subject key identifier:   45:1D:38:32:71:D5:D5:22:16:C8:EE:00:75:89:D1:57:7A:A6:FA:6A
Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
Certificate issuer:       /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
Manifest number:          3537
Signing time:             Sat 24 Jan 2026 14:31:02 +0000
Manifest this update:     Sat 24 Jan 2026 14:31:01 +0000
Manifest next update:     Sat 31 Jan 2026 14:31:01 +0000
Files and hashes:         1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: izF4FcT6UVMFNDs2pAHVItjWFOG+d0w+l1Jr7EgjB1Q=)
                          2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: XdSTq9a3+iFe4VI7nDUck0LhT2SZbH7g4xQmyCXOz+E=)
                          3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: 3yuw549gFThRnTnkqGNghYz3hl96FvE25heVCZ7UvVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
                          rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
        Validity
            Not Before: Jan 24 14:31:01 2026 GMT
            Not After : Jan 31 14:31:01 2026 GMT
        Subject: CN=6974d7a6-137f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:02:b3:df:20:f6:d5:e8:24:75:ba:9b:87:87:
                    97:44:93:e3:8a:4b:e4:c4:4f:a2:5a:36:96:cd:32:
                    0e:c5:5b:cc:72:c0:02:2f:cb:85:a9:a3:23:7c:e2:
                    2d:8b:8e:ee:65:7c:1c:cc:e6:dd:db:fc:99:6f:ff:
                    bf:10:9f:1a:14:d7:f9:f1:4b:5b:b6:18:f0:55:b5:
                    ba:8f:f7:14:ba:0e:c9:64:79:22:45:c1:a9:a5:ea:
                    2f:cf:34:f3:43:e8:68:a3:1c:a4:29:b3:27:ca:29:
                    b4:c0:97:f2:b2:c6:4c:da:90:6f:6b:6d:c0:97:e3:
                    8e:5a:57:7b:85:11:9c:ed:0c:5b:5a:28:05:cb:c0:
                    77:9d:2c:8e:8a:9b:e2:11:27:0f:3e:42:2a:a3:0c:
                    2a:6e:9d:98:83:51:8f:00:e4:39:be:0f:f2:56:00:
                    5f:d1:67:a8:b9:7e:de:f7:37:9e:03:4d:6b:42:cf:
                    92:ab:2a:98:81:e8:3c:89:9b:d9:02:60:ff:f0:30:
                    5b:cb:1e:a8:14:3a:78:79:4d:8a:43:d7:12:72:59:
                    8c:f0:12:8a:21:08:6c:01:63:50:48:72:0c:9f:80:
                    07:18:84:1a:79:fe:10:16:52:36:7b:c7:29:e7:3d:
                    d0:10:94:e9:32:d8:74:3b:b7:5a:51:1a:ff:14:06:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1D:38:32:71:D5:D5:22:16:C8:EE:00:75:89:D1:57:7A:A6:FA:6A
            X509v3 Authority Key Identifier:
                keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:cd:1d:57:56:48:65:33:ce:7f:b4:36:27:10:63:42:54:
         a5:47:33:e7:b8:e7:30:92:43:ec:38:f4:cb:3d:fc:f3:8b:35:
         e8:5e:f7:c2:30:c2:6d:38:39:07:27:00:5c:72:f1:df:96:4c:
         d8:bd:ab:c7:43:f1:db:d0:7b:f7:43:d4:69:c1:ff:6b:72:6a:
         06:03:76:ef:d9:57:62:53:78:5e:8a:a5:d8:11:dc:7c:0e:5d:
         a9:95:2e:80:83:1f:07:62:60:78:59:f6:f2:38:b3:17:d1:18:
         65:df:3d:6a:e6:8d:5d:7c:9c:30:29:10:5f:4c:4a:f4:b3:39:
         54:6b:51:cd:21:d2:80:b7:bd:4b:66:95:21:57:75:01:1f:99:
         f7:b7:5a:ff:4f:a1:d5:19:5c:be:cd:0e:d3:05:43:82:45:be:
         95:e9:e8:c9:b9:6d:07:4b:c7:48:ec:d0:6d:fd:4b:7f:97:73:
         cd:d9:81:f0:8a:fd:fa:00:fe:c8:42:c7:c5:b9:e9:ef:6b:cd:
         20:c9:ea:7b:45:52:6a:4b:4a:42:8d:c3:b4:c3:df:36:2e:ca:
         b4:59:92:65:04:3e:11:3d:b4:20:d4:f7:32:5f:4c:ec:71:70:
         9a:ba:35:9c:ab:f5:9e:d2:2a:b2:91:ff:86:6a:3a:dd:e2:ea:
         2f:31:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:51 2026 by rpki-client