This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
File:                     3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json)
Hash identifier:          LJadRXLtrNMEsiCt5lNYUxYcmMx2BWWzMkJUdUU5ql4=
Subject key identifier:   03:C5:AD:AE:C7:8A:C7:31:C8:A9:F4:2E:EA:1B:52:EB:78:7D:65:F3
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Certificate issuer:       /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial:       03E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
Manifest number:          03D8
Signing time:             Sat 24 Jan 2026 23:46:29 +0000
Manifest this update:     Sat 24 Jan 2026 23:46:29 +0000
Manifest next update:     Sat 31 Jan 2026 23:46:29 +0000
Files and hashes:         1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: sCg536EIlcVYV3jJkS/TuL4d42QMLG/z82Ss9pUX/S4=)
                          2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=)
                          3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
                          rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
        Validity
            Not Before: Jan 24 23:46:29 2026 GMT
            Not After : Jan 31 23:46:29 2026 GMT
        Subject: CN=697559d5-aa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:da:94:ea:16:19:52:a4:0a:99:35:3e:c8:
                    9d:6f:2f:8c:67:e6:95:51:01:56:04:26:5a:9e:36:
                    e6:d2:34:54:10:43:86:20:bc:cd:0d:0d:91:93:e9:
                    47:2a:a4:3e:15:9b:67:f2:a5:6c:68:26:bb:5d:c1:
                    92:96:36:ab:e3:5a:ae:cc:2a:b4:41:3a:b5:0b:ef:
                    1d:89:66:a8:69:9c:e3:31:b6:c1:90:1b:c2:fe:83:
                    5d:b6:67:42:c9:da:ab:5f:fb:4d:f0:22:e0:ce:fb:
                    0e:a0:22:e4:c7:5f:ad:2c:6f:77:04:15:da:64:b4:
                    2e:d0:15:18:1e:80:8f:65:07:6b:ec:3d:46:c6:47:
                    96:68:8c:73:3d:02:09:90:c7:5f:d6:7a:1f:b8:33:
                    a9:fa:3f:b6:d9:e0:03:2e:ef:21:d8:db:12:90:ab:
                    d5:46:d0:7a:cc:18:5d:c1:d4:7c:1c:1a:ec:c3:e6:
                    93:ec:e7:a5:85:00:75:43:b4:74:0c:30:04:32:57:
                    4d:50:f9:e3:9f:b8:f4:cd:63:31:ab:67:ce:94:c5:
                    34:31:98:6a:6d:df:40:98:0c:f7:0a:74:d7:19:d8:
                    cf:35:03:e8:16:25:64:44:94:2e:0e:8e:6d:92:43:
                    75:49:fb:2c:e3:3b:1d:88:56:56:7e:cb:3a:6e:ae:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:AD:AE:C7:8A:C7:31:C8:A9:F4:2E:EA:1B:52:EB:78:7D:65:F3
            X509v3 Authority Key Identifier:
                keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:78:fc:e0:b6:d2:b6:2b:3f:e1:18:76:14:6b:ed:bd:8c:89:
         34:8b:86:13:87:f4:f3:69:67:fb:7a:38:c8:10:7c:2d:fb:8d:
         fd:76:c3:a5:96:6b:77:bd:56:c0:f0:b3:e6:bf:a0:e5:c4:e7:
         22:1e:51:8b:06:36:ea:c5:a5:c6:27:da:f6:f9:47:2b:93:eb:
         6d:ea:38:33:49:d5:7e:0f:19:2c:8e:f3:b4:c9:56:10:b1:88:
         1e:ed:a6:46:a5:7a:d2:3e:2c:b9:4d:05:09:25:ce:ea:1b:ae:
         cd:9f:88:18:7b:61:f3:80:36:4d:8f:0f:47:0c:d1:e3:3a:3a:
         06:20:dd:e3:d7:76:f1:5a:87:d2:13:6f:58:16:fb:4e:f8:de:
         cf:e6:95:36:20:4c:15:ed:90:0a:bf:b1:a6:5a:be:d2:ab:25:
         00:86:cc:3e:10:6a:f6:bf:99:ea:a7:b9:97:da:14:ee:0f:db:
         b4:aa:ab:bf:b5:df:45:d5:8f:bb:d9:f5:59:70:d6:81:16:57:
         ea:90:81:1a:2b:2b:8d:57:91:cf:95:f3:fa:01:98:a9:21:dd:
         28:7f:a9:f2:d8:90:7d:96:df:d4:4f:d8:c2:b4:56:64:0f:47:
         a0:76:19:1b:95:cd:b7:61:83:06:66:15:8d:8f:25:94:db:38:
         00:8a:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:11 2026 by rpki-client