This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
File:                     cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json)
Hash identifier:          ke9fjPI9LK8tEuGD/Jhv+tmgsuxwQTLDRUoexc4tedo=
Subject key identifier:   EE:82:B3:7D:47:CA:2E:2B:58:47:96:E7:3C:A8:40:BE:04:43:C2:12
Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
Certificate issuer:       /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
Manifest number:          F2
Signing time:             Sun 25 Jan 2026 04:35:09 +0000
Manifest this update:     Sun 25 Jan 2026 04:35:09 +0000
Manifest next update:     Sun 01 Feb 2026 04:35:09 +0000
Files and hashes:         1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: vLoNYjo4x1yWfH1j3T2WhIzJnIF3pU7pQ8d4kbus0rY=)
                          2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: DjittWRdAffVgO8I1/RanskoHfF+LyXiqCMNUerKMSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
        Validity
            Not Before: Jan 25 04:35:09 2026 GMT
            Not After : Feb  1 04:35:09 2026 GMT
        Subject: CN=69759d7d-5bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:94:6c:0f:70:16:08:f9:24:c3:5d:70:16:
                    b3:80:4d:f8:60:a4:8f:9e:99:f5:d7:b0:6f:65:ca:
                    5a:9b:c7:e9:23:09:5e:b1:5a:f5:a9:c4:d7:63:af:
                    25:a4:3b:c9:94:01:76:12:3a:f9:af:5a:44:8b:60:
                    f9:fb:6f:68:20:0f:8e:6c:5d:d6:31:78:e1:95:3f:
                    59:58:76:a2:11:77:21:e7:c8:81:be:4a:4c:00:48:
                    94:98:5f:fb:01:22:66:76:89:50:8e:59:7b:b0:68:
                    17:1c:17:15:b4:6f:0a:58:e2:3d:ec:bb:be:45:c3:
                    c6:71:0a:b3:c9:94:17:6f:67:b3:38:9e:7a:99:25:
                    b7:bf:5b:03:29:2f:9f:bd:b1:77:5b:f9:f0:58:43:
                    67:1c:cb:4a:ff:76:fa:b9:30:ce:47:63:74:41:98:
                    56:f8:16:95:0b:c9:ab:24:76:b0:73:96:c7:d4:10:
                    01:c9:64:86:ed:b3:34:9b:37:70:d2:e1:70:a0:47:
                    4a:8d:75:f8:82:63:4c:4d:97:3c:89:48:34:25:c1:
                    ff:6a:25:97:53:2f:fc:33:7a:8c:dc:d4:85:1d:11:
                    bd:48:4e:c6:34:7a:07:81:72:54:b4:41:b5:48:20:
                    0d:1a:48:27:49:95:46:d5:20:a4:63:39:e5:3b:37:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:82:B3:7D:47:CA:2E:2B:58:47:96:E7:3C:A8:40:BE:04:43:C2:12
            X509v3 Authority Key Identifier:
                keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:00:a9:e6:f3:cb:c7:04:06:da:fd:7d:17:b5:ed:b6:83:
         f1:32:43:b9:39:42:bb:89:ed:e2:76:0a:59:22:88:67:d8:53:
         4e:25:f2:16:ad:53:96:45:bb:36:fd:73:92:2d:d6:8a:b2:4d:
         a1:57:85:7f:25:ab:6b:ae:89:70:41:d5:71:ae:c7:39:6d:6a:
         a2:7d:05:e1:9e:f8:68:6a:40:86:86:6d:55:e0:25:6e:f8:b8:
         8e:ff:9e:fb:ba:7d:98:e9:dc:36:6f:f9:78:a1:db:a6:cd:dd:
         dc:12:e9:5e:23:54:e0:0c:37:13:f4:14:e6:1e:d9:05:1c:81:
         7b:1f:1a:c7:71:e9:cb:8b:77:a2:88:48:65:61:a7:bd:a6:87:
         04:f2:c0:08:bf:85:2b:35:33:3e:71:19:1f:24:af:1a:ca:88:
         c8:11:50:3f:17:fd:18:11:7b:43:f1:41:a4:c9:5c:70:ac:e4:
         e6:84:b6:27:15:0f:40:68:f4:1b:7b:2e:39:98:60:07:26:4e:
         a0:e2:17:0f:c5:0b:4b:b5:d0:88:24:af:ef:86:9e:26:67:51:
         19:66:c0:10:60:8f:74:84:97:02:a4:85:4d:c4:f0:07:31:25:
         15:0a:e7:f7:df:3f:05:08:2f:0b:6b:c8:5a:00:6f:c7:fb:40:
         ff:3c:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:44:39 2026 by rpki-client