This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File:                     E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier:          QfRTnJ1Ll6h/Lz0TPaOicHDozDlLfoZNktpCL57sLds=
Subject key identifier:   01:14:68:64:22:84:7B:A6:BF:78:79:5F:11:7F:03:2A:F6:86:24:F4
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer:       /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number:          F3
Signing time:             Sun 25 Jan 2026 04:30:46 +0000
Manifest this update:     Sun 25 Jan 2026 04:30:45 +0000
Manifest next update:     Sun 01 Feb 2026 04:30:45 +0000
Files and hashes:         1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: GasfCmBV79EUCu4zHo+4urwk9bgHtm/wUbcBb4CEzX8=)
                          2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: uCHzaAIAycwpBc70iXWJQqRjsJQk8uvEaTZJzV9udnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
                          rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
        Validity
            Not Before: Jan 25 04:30:45 2026 GMT
            Not After : Feb  1 04:30:45 2026 GMT
        Subject: CN=69759c76-a2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:e0:b7:40:06:3f:12:e4:a7:c0:e9:87:ea:
                    36:34:38:cf:78:d2:c4:ff:26:87:05:df:6d:d3:61:
                    2b:fd:b3:7e:99:cd:e9:65:fa:16:44:d7:8d:2f:1f:
                    aa:2e:55:a3:4b:14:d2:70:17:86:0a:36:b9:45:51:
                    86:b1:25:82:04:74:66:0d:2a:5a:d8:72:50:cd:00:
                    06:a4:2e:c4:29:86:53:9f:72:33:b5:56:23:e8:3d:
                    e7:47:cd:e1:e5:f2:cc:35:21:e4:0c:f6:7e:52:b1:
                    83:99:22:40:8d:bd:7c:88:4d:60:6b:73:89:68:87:
                    f5:bf:82:b0:8f:9d:7b:bd:39:e4:c5:73:d6:48:a4:
                    47:33:b3:e2:ba:22:f7:b9:50:61:4c:74:a6:26:ce:
                    57:8e:08:20:7d:fb:e7:96:00:5c:70:4b:95:c9:c0:
                    7d:07:b0:a7:54:ac:36:9b:51:eb:db:2b:f2:71:f5:
                    48:ae:0f:b5:6b:25:32:66:a0:0d:84:5b:1c:7d:e4:
                    11:63:84:76:8a:8c:f7:41:ce:14:eb:63:b9:60:71:
                    34:c7:81:23:e2:22:71:18:23:a9:95:95:b6:ef:6e:
                    da:a9:37:c7:0e:8d:5c:e1:b0:61:ce:1a:a6:d3:ab:
                    32:f3:61:22:12:a8:68:09:df:48:f2:37:74:b4:d6:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:14:68:64:22:84:7B:A6:BF:78:79:5F:11:7F:03:2A:F6:86:24:F4
            X509v3 Authority Key Identifier:
                keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:c0:ee:86:e7:12:06:ef:9a:83:e2:7c:ce:9f:5a:1a:35:
         a9:02:ad:d6:65:a8:9a:92:33:f0:3a:06:1f:db:d6:a4:ba:9a:
         51:2d:ca:16:a9:27:3c:a1:59:01:2b:e6:d6:8b:73:4b:51:57:
         1b:4b:fe:22:38:14:6b:81:db:f7:de:04:18:4f:fc:e0:99:79:
         ba:3b:ae:b1:4a:db:1c:7b:89:fe:28:e5:af:44:c6:15:17:1a:
         0b:ed:0a:53:7f:4e:bc:0e:e0:f6:b7:e7:60:89:32:aa:08:55:
         33:d8:98:8d:45:44:10:f5:4a:6b:c8:f9:f1:32:32:d6:aa:11:
         0b:ff:a6:49:cc:79:37:08:14:47:17:2a:26:52:41:7f:0c:12:
         a4:81:e3:80:2f:f8:83:5d:8c:ce:96:47:5e:31:cd:e1:73:a7:
         d8:0c:a1:d8:90:e0:a7:92:2b:4a:af:7a:05:30:2a:5c:fb:47:
         60:39:8b:db:69:65:f0:3f:96:ea:de:2f:f7:81:d1:1b:d5:54:
         57:be:d9:ec:d7:dc:97:d1:24:e0:97:eb:33:91:06:30:f1:15:
         a5:0e:5a:7d:cb:8b:c1:07:83:91:de:c2:08:68:13:24:e1:50:
         9d:bb:ec:8b:15:47:d4:32:45:2b:8e:b5:4d:46:4b:a7:74:a5:
         12:8a:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:59:15 2026 by rpki-client