This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File:                     33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier:          KkUIJOvkgjSCUZX9fJBlh2/e/o6H1KPpqlrzm2T+2KM=
Subject key identifier:   09:3B:15:C5:B0:E5:24:A1:73:29:10:CC:5C:2C:29:E5:A6:26:3C:3F
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number:          04C0
Signing time:             Sat 24 Jan 2026 23:06:27 +0000
Manifest this update:     Sat 24 Jan 2026 23:06:27 +0000
Manifest next update:     Sat 31 Jan 2026 23:06:27 +0000
Files and hashes:         1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: iDeNoSN0rXaFnLM8a5STfA5ugynSymoOYDoRyA1JLwg=)
                          2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: H8OBeRqs2B2zDmPzaFX4iRN3UQF65d9TwV3ksnnmLrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Jan 24 23:06:27 2026 GMT
            Not After : Jan 31 23:06:27 2026 GMT
        Subject: CN=69755073-2ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:ae:ad:b4:2e:bf:d8:67:87:3b:03:d1:e6:
                    f1:89:47:55:ce:6f:3e:17:35:d5:64:04:32:eb:67:
                    80:20:9e:28:e1:1f:b0:4a:fc:0d:6a:40:de:59:46:
                    c4:95:aa:9b:eb:ea:d4:f7:56:3e:90:c9:69:34:1b:
                    b5:e0:b1:b5:ab:6f:ac:aa:7e:ba:85:4d:b9:6e:4b:
                    ad:cd:dc:45:05:b7:c8:d8:a1:e4:49:ef:99:cc:5c:
                    3c:c7:05:a7:b7:ae:89:06:86:bf:20:93:fc:ff:2a:
                    fe:9e:37:de:cf:fc:0f:a4:82:af:06:f5:82:de:80:
                    df:6c:c9:46:35:44:93:f6:87:d0:81:3f:2e:ea:d6:
                    82:2a:4d:0f:a9:54:63:e5:01:60:51:f0:3a:74:c6:
                    99:e8:80:e0:13:b8:66:1b:38:e1:fb:c2:3c:79:62:
                    90:e0:6d:2d:4b:2c:c1:5a:d5:a0:ab:40:c2:47:4d:
                    c9:c7:ab:67:7b:1a:36:34:78:c4:dc:72:7b:16:bb:
                    12:ff:b1:e1:5a:05:c8:23:21:33:59:7d:11:e2:10:
                    04:ed:e1:ab:85:df:1c:08:66:39:41:34:a0:18:41:
                    9a:eb:82:3e:73:4e:d3:22:40:d6:3c:57:a0:6d:78:
                    6b:a7:7f:62:fe:f8:4e:a4:e2:05:46:6b:b8:d9:38:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3B:15:C5:B0:E5:24:A1:73:29:10:CC:5C:2C:29:E5:A6:26:3C:3F
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:73:b8:5f:f6:00:07:0d:9e:4f:2d:da:fa:0a:3e:7e:a3:fa:
         df:01:fc:04:6d:ce:74:66:61:4f:11:22:42:b5:fe:1c:61:e7:
         28:69:e4:73:f5:c0:54:08:42:d9:66:11:10:e0:da:ee:0c:d0:
         67:cf:a4:1a:2e:0b:43:f2:37:97:5a:50:3d:64:2e:01:57:fe:
         c9:da:67:3c:b6:53:2a:a8:1b:1b:3d:98:af:66:ba:58:5e:b9:
         f0:c2:3b:6a:be:78:84:3e:46:37:4c:91:9a:c2:9d:3d:8d:56:
         0e:69:2b:71:12:fa:9a:c2:eb:0d:07:fd:06:f0:58:3a:04:b4:
         40:ba:92:ac:34:74:2e:34:4a:5b:cb:9f:32:ba:57:b5:34:f9:
         eb:b5:08:02:49:a2:97:5a:3d:a0:63:4d:c0:e5:86:34:4c:5d:
         f4:63:1a:af:95:4e:5e:43:37:f8:d4:65:8f:92:42:12:97:a3:
         61:ce:c0:d2:3c:52:48:57:65:96:94:de:80:44:eb:c8:b5:4d:
         dd:7e:a7:4b:90:9a:7c:7d:3e:c8:7e:e3:e0:59:d8:89:c9:17:
         8e:c6:d9:11:72:57:a3:1c:ba:73:6a:f8:6f:4d:64:f0:90:cc:
         a8:6a:c6:ff:c7:d9:85:f9:3e:d4:6e:41:67:54:42:a7:8b:c4:
         3d:47:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:25:14 2026 by rpki-client