This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
File:                     f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json)
Hash identifier:          Oav2drS4VHjt/ujVLdQTOhGcm7rnEeepjsfa+LN7v2E=
Subject key identifier:   5D:D0:76:58:D7:4C:11:1F:50:CE:12:E1:E6:AA:55:CC:D8:5D:BC:5C
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       0387
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
Manifest number:          0365
Signing time:             Sun 25 Jan 2026 00:12:49 +0000
Manifest this update:     Sun 25 Jan 2026 00:12:49 +0000
Manifest next update:     Sun 01 Feb 2026 00:12:49 +0000
Files and hashes:         1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: JamIJ2EYTGAabZa411jxMbGSOG85T+1L2yyyHHYLq/A=)
                          2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: kGDq/OHD1l2DSUn6HN/fSE9IJdA1C+dG59/8ecfdLJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
                          rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Jan 25 00:12:49 2026 GMT
            Not After : Feb  1 00:12:49 2026 GMT
        Subject: CN=69756001-1e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:e4:82:6a:34:33:3c:0d:d2:d9:9f:a3:d4:
                    53:b5:66:15:f1:15:09:16:d2:9f:2d:ac:c3:8e:52:
                    75:2d:35:53:f5:54:7f:63:2d:04:36:18:a3:0e:be:
                    fe:9b:93:d4:c2:46:f6:5f:b7:6f:49:15:e5:e4:e4:
                    64:96:0e:65:92:78:40:03:b2:ca:a1:56:d2:a9:bf:
                    23:e8:cd:f4:cf:4e:88:90:98:a6:d1:48:2b:68:07:
                    2a:88:0a:4d:d9:f3:b0:35:f4:e5:df:6b:0e:79:10:
                    f7:5d:bf:ba:56:3c:c3:a2:18:bb:4c:05:d7:0f:43:
                    21:52:36:21:bc:86:50:5d:65:d6:ed:40:bb:90:7a:
                    c4:72:24:ce:14:53:af:d9:f5:ae:77:3f:6d:b1:f1:
                    1f:75:ad:41:65:8c:66:97:32:70:9d:46:71:68:c6:
                    6c:b8:f0:a1:85:86:0e:ca:e9:d0:88:cc:9f:da:53:
                    11:f5:99:65:f2:5c:1a:bb:cf:3d:c4:0d:75:c2:8d:
                    fe:05:89:a6:02:5a:bb:8c:b7:10:18:10:11:4b:a2:
                    82:f4:7c:53:ea:42:d6:42:19:77:af:41:41:ba:44:
                    94:76:89:f1:17:29:a3:8c:bf:9a:93:45:67:28:4a:
                    ef:dd:37:7c:a6:bb:dd:4d:67:88:0f:b9:b3:4a:a3:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D0:76:58:D7:4C:11:1F:50:CE:12:E1:E6:AA:55:CC:D8:5D:BC:5C
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0f:d7:dd:05:d9:e6:82:1c:1a:09:28:a3:26:4d:d3:db:11:
         49:5c:1a:cc:af:7f:c7:0c:2e:59:f4:01:ae:6e:8f:af:71:5b:
         f4:40:e6:9d:60:9b:e1:ee:67:18:26:16:91:88:7e:e3:d4:bc:
         e6:08:3e:ab:82:bb:aa:06:5f:85:cf:85:33:10:e5:86:09:17:
         cd:10:f3:6d:32:b9:81:ae:49:c2:c3:25:81:83:08:57:e0:99:
         6d:13:f6:f4:c2:74:c5:de:42:0d:f5:de:ea:ac:8a:1b:21:2b:
         51:5a:07:83:af:f9:1c:c3:d7:9a:f1:ca:7d:6f:89:05:3c:ee:
         f8:cc:bb:4c:15:2e:c1:d7:c0:5f:48:7b:11:ee:25:27:23:d6:
         11:6e:8b:9a:f4:46:0e:75:b1:1d:a7:71:9a:ec:94:26:57:63:
         e0:9f:11:ab:e6:90:04:99:1b:2e:8b:a8:05:66:64:c2:c5:99:
         9b:a7:0c:c4:8d:5a:70:13:b8:0e:c1:15:aa:ea:11:22:ee:46:
         08:9f:58:3e:a6:04:bb:c7:b1:05:da:c9:55:78:41:eb:00:d5:
         50:25:94:73:2c:f4:ca:4f:2c:07:5f:dd:fc:4b:ea:21:0b:b2:
         44:2b:1f:a5:06:4a:c5:ed:35:a4:be:a7:08:cb:b3:25:78:ff:
         4e:15:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:44 2026 by rpki-client