This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
File:                     PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json)
Hash identifier:          469Clt/LRJisJ1FOz8Q6dsN9O+6pelf6qz3utha36jA=
Subject key identifier:   F7:D5:59:20:4A:5F:D3:1E:88:F3:4B:7F:AB:70:D9:AD:68:A3:63:13
Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
Certificate issuer:       /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
Manifest number:          96
Signing time:             Fri 23 Jan 2026 05:32:26 +0000
Manifest this update:     Fri 23 Jan 2026 05:32:26 +0000
Manifest next update:     Fri 30 Jan 2026 05:32:26 +0000
Files and hashes:         1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: BpfDo0z22Q9z1RCzEfWaaUxpwLdpVqTU1xY+9Lxwz+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
        Validity
            Not Before: Jan 23 05:32:26 2026 GMT
            Not After : Jan 30 05:32:26 2026 GMT
        Subject: CN=697307ea-86b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c1:62:a7:be:22:39:3d:33:97:dd:46:4a:10:
                    98:95:c9:b2:7d:ca:65:71:33:85:59:f0:26:1c:63:
                    e4:36:f2:1b:1b:31:d9:80:68:fe:8d:aa:78:36:60:
                    53:82:02:09:5e:73:bb:34:f0:c0:01:e4:0b:30:a4:
                    13:ce:48:fc:54:05:65:a7:96:e7:a6:9a:b7:9d:5b:
                    ad:12:fe:31:95:5c:53:fd:32:da:2d:48:b3:27:75:
                    24:7f:05:4a:37:62:c4:38:b7:c5:17:bd:57:35:57:
                    00:d9:33:fc:78:88:34:73:d1:86:cd:2b:c8:d8:19:
                    f3:b7:72:89:88:95:13:21:ed:3a:83:43:a5:8e:df:
                    a6:56:c8:0a:a6:0c:59:ce:7a:c6:80:f7:28:47:55:
                    44:32:df:96:d9:3a:29:a9:44:f2:96:53:a4:92:bb:
                    78:a6:2d:9a:67:8a:0e:0f:14:ec:f0:52:fc:ca:2b:
                    b3:cb:76:76:9f:da:c2:6c:04:04:97:f5:a2:2d:03:
                    19:38:0d:f2:ad:07:f5:10:e0:3f:b5:4b:1b:42:fc:
                    de:75:d7:3d:25:3a:86:2c:31:bc:fc:6d:b3:2b:6a:
                    3d:6f:2b:57:83:4d:9c:f7:d6:d8:da:63:58:fd:f2:
                    30:46:c3:57:dc:4f:e4:d3:f5:32:66:d2:16:49:8c:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D5:59:20:4A:5F:D3:1E:88:F3:4B:7F:AB:70:D9:AD:68:A3:63:13
            X509v3 Authority Key Identifier:
                keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:7e:7f:31:8b:bf:2f:c0:8c:8d:45:bd:97:9e:30:fa:06:
         ae:f4:f9:98:64:44:48:0e:f1:e7:f4:a7:94:7e:83:78:96:29:
         e0:34:69:08:8c:89:08:fe:27:c4:48:0c:ca:af:75:7d:16:06:
         9f:3a:4c:75:ab:a0:ad:c8:2c:be:ac:51:46:d2:d3:3a:e4:9f:
         d4:b9:c5:da:6b:f0:89:18:3e:cb:32:12:8d:b6:4d:a7:da:98:
         04:c7:e2:a3:cd:ed:9c:d3:df:c2:1a:7e:37:b7:8b:a5:c0:12:
         7b:23:94:5c:47:06:ca:d1:e5:e5:5f:b9:7c:30:b0:09:cb:a1:
         bc:d1:1f:28:7e:64:b2:25:af:a7:33:f5:a1:c0:6d:25:13:b8:
         30:8d:c2:61:93:98:20:b4:d5:b1:e0:74:2b:7b:6e:d8:81:d7:
         15:6a:67:16:c1:50:0f:df:98:8a:3c:5a:7b:7d:0a:81:87:21:
         80:63:8c:87:aa:46:c6:c4:0b:47:6e:08:9f:4b:04:e1:13:ea:
         90:07:90:8c:49:00:6c:b2:62:93:16:e5:8e:b1:f5:9e:d1:69:
         e8:3a:17:15:8f:f9:c7:2e:5b:67:67:15:e9:b9:4b:90:9e:f5:
         78:9a:9d:2d:78:d1:6f:02:7d:ab:9c:1b:b2:ea:32:5a:54:09:
         6e:6c:d8:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNGQUMxMTAvBgNVBAUTKDNGMUE4RUEzRDJBREM2RUNCMjM2MEUwQzM3NkNFNTU5
QjlGRjcxRjIwHhcNMjYwMTIzMDUzMjI2WhcNMjYwMTMwMDUzMjI2WjAYMRYwFAYD
VQQDDA02OTczMDdlYS04NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38Fip74iOT0zl91GShCYlcmyfcplcTOFWfAmHGPkNvIbGzHZgGj+jap4NmBT
ggIJXnO7NPDAAeQLMKQTzkj8VAVlp5bnppq3nVutEv4xlVxT/TLaLUizJ3UkfwVK
N2LEOLfFF71XNVcA2TP8eIg0c9GGzSvI2Bnzt3KJiJUTIe06g0Oljt+mVsgKpgxZ
znrGgPcoR1VEMt+W2TopqUTyllOkkrt4pi2aZ4oODxTs8FL8yiuzy3Z2n9rCbAQE
l/WiLQMZOA3yrQf1EOA/tUsbQvzeddc9JTqGLDG8/G2zK2o9bytXg02c99bY2mNY
/fIwRsNX3E/k0/UyZtIWSYyoGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfVWSBK
X9MeiPNLf6tw2a1oo2MTMB8GA1UdIwQYMBaAFD8ajqPSrcbssjYODDds5Vm5/3Hy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0ZBQy9COEY1Qzc2QTEw
MTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9QeHFPbzlLdHh1eXlOZzRNTjJ6bFdibl9j
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B4cU9vOUt0eHV5eU5nNE1OMnpsV2JuX2NmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0ZBQy9COEY1Qzc2QTEwMTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9QeHFPbzlLdHh1
eXlOZzRNTjJ6bFdibl9jZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBu835/MYu/L8CMjUW9l54w+gau9PmYZERIDvHn9KeUfoN4lingNGkI
jIkI/ifESAzKr3V9FgafOkx1q6CtyCy+rFFG0tM65J/UucXaa/CJGD7LMhKNtk2n
2pgEx+Kjze2c09/CGn43t4ulwBJ7I5RcRwbK0eXlX7l8MLAJy6G80R8ofmSyJa+n
M/WhwG0lE7gwjcJhk5ggtNWx4HQre27YgdcVamcWwVAP35iKPFp7fQqBhyGAY4yH
qkbGxAtHbgifSwThE+qQB5CMSQBssmKTFuWOsfWe0WnoOhcVj/nHLltnZxXpuUuQ
nvV4mp0teNFvAn2rnBuy6jJaVAlubNj1
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:15 2026 by rpki-client