This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
File:                     mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json)
Hash identifier:          Gh7CohLwQevADQ/IOHzmXjg+5ocTz2J97FfxCmmaCY0=
Subject key identifier:   1B:35:B9:02:38:CF:69:98:09:FA:3A:C1:E2:BF:29:2D:CE:D5:F6:76
Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
Certificate issuer:       /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Certificate serial:       059C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
Manifest number:          0597
Signing time:             Sat 24 Jan 2026 22:27:54 +0000
Manifest this update:     Sat 24 Jan 2026 22:27:54 +0000
Manifest next update:     Sat 31 Jan 2026 22:27:54 +0000
Files and hashes:         1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: eiZblF+bvPv3kTvzflMuazdmpGs78P4qkARRfo2FmrA=)
                          2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
                          rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
        Validity
            Not Before: Jan 24 22:27:54 2026 GMT
            Not After : Jan 31 22:27:54 2026 GMT
        Subject: CN=6975476a-6168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:2d:99:da:8a:80:03:46:c4:ba:ed:22:1e:
                    4d:db:e5:e7:bd:9d:78:25:57:22:34:97:29:6f:6e:
                    0e:6f:fc:91:9e:e2:f2:8d:a0:6d:e6:70:6a:b6:50:
                    55:af:49:43:f2:42:7b:f9:35:91:5a:92:b8:dd:8b:
                    79:9a:1e:2f:ca:6a:e8:df:09:ef:60:5d:96:db:8d:
                    11:45:9b:3e:cd:04:76:ff:ab:22:19:ca:49:08:a9:
                    c3:b6:ca:39:b5:fb:6e:c0:35:77:88:4e:21:40:33:
                    bd:53:b0:73:4d:31:dd:3b:fa:1f:c1:ae:9b:1f:a5:
                    40:3e:78:e5:38:f1:51:90:e5:3f:bd:55:87:33:14:
                    73:f9:77:9f:c9:19:13:8f:eb:23:03:aa:bf:d8:f3:
                    c9:c7:42:be:32:52:2d:d8:01:a2:f5:e4:15:21:d5:
                    a1:ae:ee:c7:43:f9:e0:ec:b4:76:c2:1a:c4:91:03:
                    b5:bf:b2:6b:9c:36:03:d9:4e:3d:97:12:87:4c:49:
                    f1:bb:5e:5d:55:bf:37:34:d6:88:80:c5:0c:c8:a3:
                    09:34:70:91:a9:18:e9:18:be:07:78:f1:08:38:90:
                    b4:54:81:9c:16:a9:2a:86:0f:54:fd:53:ab:f7:5c:
                    bf:c1:87:f7:df:82:04:e8:5a:02:1f:3c:e0:39:d0:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:35:B9:02:38:CF:69:98:09:FA:3A:C1:E2:BF:29:2D:CE:D5:F6:76
            X509v3 Authority Key Identifier:
                keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:95:14:5a:ed:07:fa:8a:9d:0e:90:d5:0d:a1:4d:12:46:04:
         fd:aa:bb:6a:91:4d:83:bf:c1:7a:5f:17:ac:7e:fc:5c:ba:7d:
         0f:ea:53:a8:cc:3b:df:6e:11:ef:11:e3:e9:56:39:71:2f:83:
         d2:9b:c3:f8:32:31:1b:84:10:95:64:5b:d6:1e:91:f5:2f:69:
         08:ce:0b:9c:55:58:c5:47:3a:a8:c9:03:46:21:c5:5f:68:e6:
         a2:f7:20:96:4a:3b:af:d7:52:d3:7b:32:72:f1:1e:40:1f:ca:
         6b:ab:c4:32:17:c0:48:38:67:d4:7d:49:cf:83:df:aa:34:0b:
         ce:9b:94:45:e6:28:18:ce:87:ac:76:6d:96:cf:b2:95:1f:05:
         03:6d:45:2c:da:e9:c1:15:03:ac:ba:3c:f8:6f:e4:d4:9c:cf:
         15:24:a2:7a:b2:51:a9:c8:2d:9f:3f:83:2e:d6:6f:09:8e:c9:
         c9:8f:fc:c2:7b:d2:c2:4f:9a:20:95:75:97:b8:b7:88:91:e4:
         5e:2d:35:e9:98:7c:e0:64:2e:b6:0a:bb:5b:95:ad:68:2e:16:
         67:1c:ed:bc:fd:76:e2:8a:a6:23:5a:9e:ab:7d:a1:43:51:50:
         71:eb:9c:14:4f:65:28:20:0d:e4:70:f6:36:eb:2a:be:a4:ae:
         4f:56:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:42 2026 by rpki-client