This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File:                     CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier:          +N+LnYBXOE8flyP0nMJ8UWaTD/+97uip/Qqo1tE4sHY=
Subject key identifier:   43:A2:3D:A8:BC:3B:BD:A6:A5:7E:8A:97:E5:5A:35:3F:90:C2:F5:5C
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer:       /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial:       194E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number:          193C
Signing time:             Sat 24 Jan 2026 16:12:39 +0000
Manifest this update:     Sat 24 Jan 2026 16:12:38 +0000
Manifest next update:     Sat 31 Jan 2026 16:12:38 +0000
Files and hashes:         1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: tozW0XdALYxNFthjY5FRSa8yG4hsn+DvP89Ktao/6Pc=)
                          2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: LY7vLpDfVXZjs8mY5Lmcq8YY4mbx+XwbeXcZe9sNvfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
                          rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6478 (0x194e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
        Validity
            Not Before: Jan 24 16:12:38 2026 GMT
            Not After : Jan 31 16:12:38 2026 GMT
        Subject: CN=6974ef77-eb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:23:79:bf:ea:6c:0a:fc:cd:e2:30:f1:d5:
                    3d:d8:7f:f3:73:c5:d9:12:cd:27:f1:e9:c8:06:8f:
                    46:e3:d2:ad:47:c1:92:91:e4:95:91:8e:4c:2a:12:
                    b0:9d:f7:38:b9:c5:65:ee:80:28:ac:be:27:aa:08:
                    04:d0:5a:4e:09:13:43:a4:8c:22:ce:69:77:aa:81:
                    1f:c6:9c:75:64:e2:69:a3:92:71:a3:83:ac:d4:97:
                    ef:88:da:37:67:c0:6d:7b:c6:f8:10:6c:15:13:f7:
                    35:10:d0:4c:5a:52:16:da:ea:2b:cf:eb:61:b1:21:
                    e4:46:dd:86:e5:40:39:ad:e1:a7:73:fe:d4:75:47:
                    a7:ff:37:1a:f3:7f:1a:e1:14:23:63:e0:c0:3c:20:
                    95:eb:da:33:1b:de:16:ff:14:6b:f9:5c:5b:81:9b:
                    3b:cd:da:2a:58:3e:28:14:50:25:1a:4b:dd:68:66:
                    f4:51:86:44:30:d4:7a:ee:68:55:13:83:9c:82:23:
                    57:aa:0d:e1:53:e9:be:d2:88:37:f9:65:ff:60:e2:
                    71:a0:4e:8b:bd:3d:53:0b:8d:54:3f:f4:d6:54:cc:
                    e0:a3:d1:76:0a:10:e6:4b:ec:59:30:54:cd:70:df:
                    08:32:1b:09:9f:33:67:1d:cf:0e:8d:ca:f5:42:dd:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A2:3D:A8:BC:3B:BD:A6:A5:7E:8A:97:E5:5A:35:3F:90:C2:F5:5C
            X509v3 Authority Key Identifier:
                keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:97:bd:46:3c:dd:3d:21:12:05:73:1c:e7:3f:24:95:cc:7b:
         61:49:46:7a:cf:c7:03:fb:e8:b8:00:2d:b0:ae:ef:51:59:1a:
         fd:b6:84:2b:f6:20:95:94:fe:4b:82:73:b9:7b:25:cf:8b:50:
         a9:7f:fa:53:21:1f:f2:f4:04:b8:82:57:f6:5a:32:11:6e:ce:
         b6:a7:ff:20:19:ae:51:8d:92:7d:56:61:65:50:4e:02:ec:5d:
         81:95:25:80:91:bc:c9:c6:5c:c9:06:d7:ac:23:44:69:81:48:
         3c:6d:8f:b9:ca:d0:12:49:c5:bb:3d:ff:b4:83:49:9e:bf:de:
         78:68:56:a9:b8:46:2a:13:47:29:0e:e6:9c:18:a9:8f:90:7a:
         4a:a0:2d:47:50:2b:70:16:80:96:78:36:06:f8:63:79:82:09:
         48:4d:b8:18:89:bc:2b:79:83:9e:76:18:42:15:5d:ca:12:db:
         42:a7:dc:39:28:5c:d2:db:a2:e4:c5:7f:2e:fa:ad:e2:ef:a4:
         de:62:09:5a:00:07:b4:df:34:fa:6d:fc:fc:b7:cb:51:47:a8:
         91:27:1b:8d:7a:88:15:13:6a:bb:3c:b2:62:8f:38:45:56:52:
         e5:17:57:58:35:7d:4e:f0:37:91:db:ee:76:ac:99:d6:43:42:
         e8:e1:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:32 2026 by rpki-client