This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File:                     MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier:          l5QjVr8zyduxb4qgz4Jx8WfleiplV+yOCNLI4oMLz/M=
Subject key identifier:   88:83:32:F4:B2:C7:B6:B6:8C:03:1C:0E:3E:04:92:F6:32:67:DE:F1
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer:       /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number:          0121
Signing time:             Sun 25 Jan 2026 04:14:32 +0000
Manifest this update:     Sun 25 Jan 2026 04:14:32 +0000
Manifest next update:     Sun 01 Feb 2026 04:14:32 +0000
Files and hashes:         1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: 8bt+80pAN2eRzV+vEvuKhuW6cI2f6WLPqiddNzGadQA=)
                          2: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: 4eCQXPIoXqLFis62/nmMgnZplG75TTG2mCb5ZkTz7as=)
                          3: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: lyaciBaHQ7wicHWM/adA9CDhCXcjs8ttP7h7VzDSE2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
        Validity
            Not Before: Jan 25 04:14:32 2026 GMT
            Not After : Feb  1 04:14:32 2026 GMT
        Subject: CN=697598a8-a9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:71:df:c9:72:ae:81:24:c0:65:1f:44:2c:
                    dd:ab:b8:82:ae:cc:6b:ee:1c:f7:c9:31:22:a7:66:
                    5c:c4:a2:e1:1e:21:37:e1:fd:0d:a6:a3:84:3f:c0:
                    83:dc:4c:44:2e:06:3c:91:16:b1:ad:fb:b0:84:dd:
                    0f:c7:5b:28:ca:97:68:12:c6:f2:0a:a3:d3:4b:a7:
                    1a:9a:bf:c0:6f:57:38:2d:08:93:6c:a1:ab:77:8c:
                    e2:c0:06:03:db:08:01:f2:76:dd:27:1b:71:d1:7b:
                    73:5d:27:99:d7:fa:c8:0c:47:c4:14:8d:b8:32:1c:
                    38:cf:05:69:12:88:20:4f:d8:5d:50:af:0a:b5:5f:
                    1d:f7:77:01:69:19:52:01:4c:2f:ce:6d:f2:ef:11:
                    b6:9b:3e:db:5f:83:d9:49:6d:32:a5:9a:ce:20:72:
                    be:4a:33:d8:14:f0:23:ef:71:99:d7:b8:db:be:ce:
                    c4:27:b5:15:f3:66:b1:f9:77:99:ae:08:25:78:75:
                    52:a3:2c:59:d4:b4:a0:2a:be:6d:b9:21:40:f0:e3:
                    36:da:8f:46:c2:96:81:02:61:0e:ac:8f:2f:cf:9e:
                    be:b2:85:b1:c4:79:87:97:d5:3a:91:ea:66:6f:bf:
                    b6:fd:57:6f:81:57:10:de:d9:8e:d8:a4:82:d1:5f:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:83:32:F4:B2:C7:B6:B6:8C:03:1C:0E:3E:04:92:F6:32:67:DE:F1
            X509v3 Authority Key Identifier:
                keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3a:c7:58:71:7a:47:15:58:85:86:21:77:de:7d:8a:cc:69:
         90:67:af:cc:28:b3:f1:30:dc:e8:28:9a:38:07:a2:62:32:ed:
         b2:ac:6b:cb:52:de:3b:f8:74:4e:d3:9d:27:d9:1d:19:c1:7d:
         1f:b7:4c:86:10:e0:55:dc:6e:29:fb:9e:46:43:72:d1:55:e4:
         bd:01:95:81:41:e0:74:2d:21:4f:59:d3:98:1e:5a:47:63:c0:
         56:d1:d9:38:c4:ba:9d:58:cb:92:3b:08:15:b9:4e:e4:1d:0f:
         6e:fd:d2:a3:73:1f:5f:df:56:55:15:d4:68:58:22:f8:18:9e:
         af:15:f8:48:76:d0:c9:5b:73:6d:07:f7:1c:5e:d4:8c:06:24:
         ef:9f:3e:fd:7c:ce:db:55:4b:bf:f3:e1:05:47:0b:c4:9e:e9:
         25:5a:d1:13:d3:6e:04:04:21:72:0c:34:4b:c9:94:b0:ae:22:
         d8:4b:09:c1:93:8c:a0:4a:29:1d:48:0e:ac:72:00:2b:36:8f:
         91:3d:e8:c8:c9:0e:15:5c:18:7f:f1:4c:1b:d5:81:da:09:90:
         df:bd:6b:4f:fb:bc:cd:12:84:5a:06:b6:a5:61:ed:19:8d:a7:
         47:f6:10:3f:65:e5:b1:5c:7f:78:ae:52:4b:88:3c:f6:3f:20:
         d2:ee:89:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD
MTRDQ0ZFM0IwHhcNMjYwMTI1MDQxNDMyWhcNMjYwMjAxMDQxNDMyWjAYMRYwFAYD
VQQDDA02OTc1OThhOC1hOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKBx38lyroEkwGUfRCzdq7iCrsxr7hz3yTEip2ZcxKLhHiE34f0NpqOEP8CD
3ExELgY8kRaxrfuwhN0Px1soypdoEsbyCqPTS6camr/Ab1c4LQiTbKGrd4ziwAYD
2wgB8nbdJxtx0XtzXSeZ1/rIDEfEFI24Mhw4zwVpEoggT9hdUK8KtV8d93cBaRlS
AUwvzm3y7xG2mz7bX4PZSW0ypZrOIHK+SjPYFPAj73GZ17jbvs7EJ7UV82ax+XeZ
rggleHVSoyxZ1LSgKr5tuSFA8OM22o9GwpaBAmEOrI8vz56+soWxxHmHl9U6kepm
b7+2/VdvgVcQ3tmO2KSC0V/hAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiDMvSy
x7a2jAMcDj4EkvYyZ97xMB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy
NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2
Q09sN0l1VzJDYXZCVE1fanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8OsdYcXpHFViFhiF33n2KzGmQZ6/MKLPxMNzoKJo4B6JiMu2yrGvL
Ut47+HRO050n2R0ZwX0ft0yGEOBV3G4p+55GQ3LRVeS9AZWBQeB0LSFPWdOYHlpH
Y8BW0dk4xLqdWMuSOwgVuU7kHQ9u/dKjcx9f31ZVFdRoWCL4GJ6vFfhIdtDJW3Nt
B/ccXtSMBiTvnz79fM7bVUu/8+EFRwvEnuklWtET024EBCFyDDRLyZSwriLYSwnB
k4ygSikdSA6scgArNo+RPejIyQ4VXBh/8Uwb1YHaCZDfvWtP+7zNEoRaBralYe0Z
jadH9hA/ZeWxXH94rlJLiDz2PyDS7onN
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:48 2026 by rpki-client