This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft
File:                     7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft (raw, json)
Hash identifier:          zl9btEpet80/KZdmyZw7/1WrK5TVMM4eJnrrvHlOZTk=
Subject key identifier:   FC:45:FF:11:98:7B:4E:DE:64:21:8E:F7:9E:A1:0F:76:9F:AF:7F:73
Authority key identifier: EC:68:60:D5:C6:4A:3A:69:10:55:57:B7:80:1F:A8:BD:2F:AC:37:CE
Certificate issuer:       /CN=A9178992/serialNumber=EC6860D5C64A3A69105557B7801FA8BD2FAC37CE
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ghg1cZKOmkQVVe3gB-ovS-sN84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft
Manifest number:          09
Signing time:             Fri 23 Jan 2026 07:06:34 +0000
Manifest this update:     Fri 23 Jan 2026 07:06:33 +0000
Manifest next update:     Fri 30 Jan 2026 07:06:33 +0000
Files and hashes:         1: 7Ghg1cZKOmkQVVe3gB-ovS-sN84.crl (hash: c68rcQFwmmnR66vd2GNPI2GxveNP7Zr62P976zx8XCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.crl
                          rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ghg1cZKOmkQVVe3gB-ovS-sN84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178992, serialNumber=EC6860D5C64A3A69105557B7801FA8BD2FAC37CE
        Validity
            Not Before: Jan 23 07:06:33 2026 GMT
            Not After : Jan 30 07:06:33 2026 GMT
        Subject: CN=69731df9-2e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:73:9e:23:1a:9d:29:1d:fd:93:ba:1d:47:
                    cf:37:a7:56:6d:52:38:5a:d4:31:20:24:74:e4:36:
                    ea:20:d8:92:5b:4f:f7:19:be:0f:c0:13:90:2e:fc:
                    a8:8c:c5:0c:1b:68:a0:1f:33:82:ee:1e:4a:82:47:
                    bf:9b:d1:28:51:7f:80:bb:f9:52:0d:9e:ef:fb:dd:
                    4f:16:09:f0:dc:10:b3:01:20:84:45:b9:d7:e5:fd:
                    76:40:a5:d1:3f:96:94:95:c6:e1:6d:7e:a5:f7:14:
                    eb:06:b9:1f:ac:e1:c4:20:bf:f7:7e:15:12:1e:6a:
                    77:35:60:5b:ce:ec:3a:b9:57:dc:13:ca:7e:7a:3b:
                    00:38:52:27:bb:a5:65:4b:59:68:25:b0:df:35:3d:
                    2b:5b:a9:fe:d1:c3:1c:fc:97:af:d4:ec:b4:e9:7a:
                    fe:92:7f:c3:cd:8d:88:2c:61:e7:e9:fc:68:d8:0b:
                    ad:6e:4b:64:80:f9:34:48:15:1a:71:5d:23:fb:cc:
                    2b:64:5a:d4:0e:73:20:7e:8b:80:e4:30:62:30:ca:
                    7e:9d:7b:bb:93:cf:b0:92:be:a3:8d:60:59:3c:a6:
                    5e:5c:ad:ff:ae:b7:01:ff:10:64:e1:10:81:6e:52:
                    70:04:a9:45:1c:bd:2d:f3:27:e5:c7:93:db:d7:8b:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:45:FF:11:98:7B:4E:DE:64:21:8E:F7:9E:A1:0F:76:9F:AF:7F:73
            X509v3 Authority Key Identifier:
                keyid:EC:68:60:D5:C6:4A:3A:69:10:55:57:B7:80:1F:A8:BD:2F:AC:37:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ghg1cZKOmkQVVe3gB-ovS-sN84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:1e:7c:39:35:24:01:2c:6a:58:cc:6e:cd:fb:5a:0e:51:
         2f:6d:8b:a6:bf:0d:46:67:40:a3:0e:5e:6d:4b:06:db:f1:58:
         7b:e4:76:58:8a:7c:61:50:00:83:f3:10:8f:47:34:a6:6b:1d:
         d2:26:2c:98:1e:94:02:2f:88:97:12:94:3d:76:c0:44:27:24:
         65:df:04:47:a3:7c:7c:0a:08:c5:cb:13:2b:82:54:e1:6c:10:
         74:3a:e7:cb:cc:b3:d5:bc:dd:bc:16:e3:01:e1:3d:3e:bc:06:
         09:1b:cc:c3:00:df:64:cb:2b:fd:85:e3:0e:6b:fe:fe:a0:97:
         a2:3f:97:c8:22:76:b2:41:8e:00:6b:06:50:a8:5d:a4:87:aa:
         d2:cd:17:67:19:dc:16:18:42:bf:67:3a:37:ed:d8:51:54:2c:
         e0:8b:7f:90:e7:82:db:a6:0b:30:4b:17:bd:66:f9:3d:a0:60:
         6b:df:2e:02:3e:79:84:64:25:99:bb:4b:fe:72:0c:32:ff:bb:
         d5:e5:13:c8:d5:94:cc:ea:55:62:f3:d2:4e:97:18:0e:cb:30:
         a5:c1:27:33:fd:03:bc:ac:a6:6a:6d:7d:53:7e:1d:e1:ef:00:
         1f:37:00:3b:df:d2:5a:c7:0c:ab:f9:b8:d8:59:59:d8:49:a9:
         0e:37:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:38 2026 by rpki-client