This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File:                     FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier:          ZeZckVbxKa6Ttz0b7ZUbyWKtyLLvKV5DMdqKFoxVlHs=
Subject key identifier:   C7:55:7D:01:19:73:E8:8F:01:37:49:9F:74:C7:95:96:95:D3:91:E6
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer:       /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial:       06E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number:          06DB
Signing time:             Sat 24 Jan 2026 21:24:23 +0000
Manifest this update:     Sat 24 Jan 2026 21:24:22 +0000
Manifest next update:     Sat 31 Jan 2026 21:24:22 +0000
Files and hashes:         1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: woVCpnFbcsaTq2Cc6p7K1zC8e+KL3Isy7zZJSBO8mw0=)
                          2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: c9M9mRbjF0BZcSk0yGj1HQe17Ih56nG/Gq+RFkDxc6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
                          rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
        Validity
            Not Before: Jan 24 21:24:22 2026 GMT
            Not After : Jan 31 21:24:22 2026 GMT
        Subject: CN=69753887-d335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:46:34:09:13:ca:1e:64:d7:96:40:96:b3:
                    37:dc:9d:a5:36:bc:eb:24:50:9e:1e:3d:31:bf:e2:
                    db:29:00:e0:30:3c:13:4c:61:cb:1c:8a:81:7f:71:
                    09:36:c9:c1:de:da:da:eb:97:55:50:f6:d9:d1:5f:
                    de:6e:be:0a:a9:ad:d3:b3:a6:38:3a:c8:d7:1f:bb:
                    93:94:74:38:2d:ba:f3:2f:4b:d6:5f:7c:7a:06:71:
                    58:c2:40:1e:df:c6:c0:60:fd:cc:b2:ac:64:04:05:
                    14:73:ce:d4:a6:ab:2b:32:3e:27:42:12:b0:55:24:
                    fe:1f:cd:31:55:47:73:d7:a3:a0:47:46:41:a4:cf:
                    3d:eb:3f:7a:5e:ad:18:e3:d8:71:79:96:6c:1e:1e:
                    b8:4e:90:90:14:b6:ab:ba:7a:0a:24:62:6d:89:ec:
                    ff:c4:b3:1d:88:29:6e:81:f7:a5:7b:6c:94:e9:a2:
                    01:f4:e0:cc:41:6e:45:c4:9b:d7:41:e3:84:f3:e1:
                    ca:a3:69:fb:b3:df:3d:56:77:62:fc:bb:57:bc:c0:
                    70:7f:c8:70:ae:04:25:e5:51:9a:08:7d:10:78:65:
                    2c:c6:11:3d:30:79:c5:38:a1:55:1c:75:f1:7a:5f:
                    12:d7:1c:dd:18:c2:8d:fd:42:65:8f:14:6f:f4:c8:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:55:7D:01:19:73:E8:8F:01:37:49:9F:74:C7:95:96:95:D3:91:E6
            X509v3 Authority Key Identifier:
                keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:2e:24:9f:b7:aa:11:71:59:5a:b3:85:01:50:bb:9b:15:
         a0:3c:b4:82:29:d3:cc:a2:2e:48:71:f5:4a:a9:18:ea:96:f2:
         1b:3b:ba:cd:d2:66:54:41:16:17:b5:0a:11:a0:10:72:4d:85:
         20:f5:19:88:94:ec:46:ce:27:29:53:bb:c3:0a:6b:1e:2e:29:
         3c:dc:42:d4:5e:4e:ac:63:b4:bc:c2:31:63:18:ba:c7:a1:0b:
         d7:3f:df:eb:61:1b:7e:6e:92:be:49:09:3c:61:95:b2:ad:3b:
         7a:b3:de:b2:b8:09:76:f6:23:41:cb:e5:6f:21:bc:9c:f2:cf:
         30:27:73:c3:88:fb:df:af:89:7e:bc:f6:9a:ca:52:1d:28:3a:
         1c:5d:55:02:8a:3c:f3:da:d4:7d:8d:3a:79:b6:ed:cd:91:f3:
         d9:5c:f8:c5:c2:22:fc:0b:2d:f4:40:59:2f:a5:bf:85:e1:24:
         00:fe:18:d6:7b:f2:94:6d:71:fd:94:06:53:de:3c:db:55:18:
         4b:9c:f3:bc:d4:46:d5:2d:d6:d6:eb:db:c2:3f:16:39:8d:d6:
         f8:61:52:71:c1:c6:b1:96:c1:8e:63:00:8c:4f:f4:3a:05:e3:
         a9:f7:b2:e2:b9:1f:6d:a4:4e:7a:1a:15:18:50:09:69:2f:c7:
         27:af:32:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF
QzEwQjc3NDUwHhcNMjYwMTI0MjEyNDIyWhcNMjYwMTMxMjEyNDIyWjAYMRYwFAYD
VQQDDA02OTc1Mzg4Ny1kMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsq1GNAkTyh5k15ZAlrM33J2lNrzrJFCeHj0xv+LbKQDgMDwTTGHLHIqBf3EJ
NsnB3tra65dVUPbZ0V/ebr4Kqa3Ts6Y4OsjXH7uTlHQ4LbrzL0vWX3x6BnFYwkAe
38bAYP3MsqxkBAUUc87UpqsrMj4nQhKwVST+H80xVUdz16OgR0ZBpM896z96Xq0Y
49hxeZZsHh64TpCQFLarunoKJGJtiez/xLMdiClugfele2yU6aIB9ODMQW5FxJvX
QeOE8+HKo2n7s989Vndi/LtXvMBwf8hwrgQl5VGaCH0QeGUsxhE9MHnFOKFVHHXx
el8S1xzdGMKN/UJljxRv9MiDbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdVfQEZ
c+iPATdJn3THlZaV05HmMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx
RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH
M0dOekdsMlkyRkxzRUxkMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/bS4kn7eqEXFZWrOFAVC7mxWgPLSCKdPMoi5IcfVKqRjqlvIbO7rN
0mZUQRYXtQoRoBByTYUg9RmIlOxGzicpU7vDCmseLik83ELUXk6sY7S8wjFjGLrH
oQvXP9/rYRt+bpK+SQk8YZWyrTt6s96yuAl29iNBy+VvIbyc8s8wJ3PDiPvfr4l+
vPaaylIdKDocXVUCijzz2tR9jTp5tu3NkfPZXPjFwiL8Cy30QFkvpb+F4SQA/hjW
e/KUbXH9lAZT3jzbVRhLnPO81EbVLdbW69vCPxY5jdb4YVJxwcaxlsGOYwCMT/Q6
BeOp97LiuR9tpE56GhUYUAlpL8cnrzJi
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:20 2026 by rpki-client