This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
File:                     rIf9aQzGskx4_D9x0y3eDbookNs.mft (raw, json)
Hash identifier:          6jTIp1iTbqXQNWZJ8yZV3oIUiNSrtAWKymKJEOlLSRQ=
Subject key identifier:   3C:7D:F5:B7:1B:8C:35:10:42:AC:F8:25:3C:54:66:D0:08:06:04:43
Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Certificate issuer:       /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
Manifest number:          92
Signing time:             Fri 23 Jan 2026 05:36:54 +0000
Manifest this update:     Fri 23 Jan 2026 05:36:53 +0000
Manifest next update:     Fri 30 Jan 2026 05:36:53 +0000
Files and hashes:         1: rIf9aQzGskx4_D9x0y3eDbookNs.crl (hash: QVYFJtlcpfZdNKqtOGs1orcSzhKvfNWIBqZyJ+Vd/Q8=)
                          2: 82B7AD281C2811F0AF6EDC47C4F9AE02.roa (hash: TOct4YZ3x0uVg6PIqVFGhW7Pj8+y8nCLAaZLvcpqBvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
                          rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
        Validity
            Not Before: Jan 23 05:36:53 2026 GMT
            Not After : Jan 30 05:36:53 2026 GMT
        Subject: CN=697308f5-dc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:89:6f:5c:78:00:25:ce:9a:11:bb:23:f2:
                    f3:64:f5:6f:0f:41:03:af:15:68:1e:b7:60:85:51:
                    c2:5a:0a:82:3a:6e:e4:24:36:b1:32:5b:f4:bf:4e:
                    b8:c4:84:4a:9d:6b:61:ff:4d:8c:2a:d1:99:c3:ac:
                    68:1c:67:79:4c:c5:03:5e:dc:7d:a6:44:44:45:9e:
                    9d:f1:c5:ca:6b:20:be:f6:70:72:e3:e6:3e:07:f9:
                    89:ef:1d:a7:08:b5:80:71:b6:be:fa:e0:0e:3a:50:
                    16:5d:0b:5b:44:f2:82:52:09:1c:4d:69:9a:d1:9e:
                    69:c1:82:78:a0:9c:3d:83:24:64:e0:46:b6:91:f9:
                    f2:b2:8b:57:85:9d:d2:46:56:15:e3:58:8b:dc:ab:
                    f5:81:8d:6b:d2:85:8e:cb:44:36:1e:ce:15:5a:9d:
                    da:a0:69:df:7e:97:47:24:a2:51:3b:ea:c9:7a:65:
                    c3:21:77:94:95:06:e9:78:ed:09:fd:d3:73:80:bb:
                    cb:34:9e:e7:24:e1:e7:91:27:23:dc:71:d8:4f:78:
                    1d:3b:bf:dd:2b:46:da:1a:60:b8:5c:45:55:f4:b2:
                    d6:b5:6d:f6:3e:fb:5a:8d:38:f0:7f:f3:a5:de:69:
                    e8:9e:7e:92:15:1e:52:a8:15:fe:51:e0:c7:b2:d3:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:F5:B7:1B:8C:35:10:42:AC:F8:25:3C:54:66:D0:08:06:04:43
            X509v3 Authority Key Identifier:
                keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:67:5f:80:70:80:9d:de:51:df:97:f8:44:85:16:26:db:d0:
         60:93:19:cb:91:a8:7e:01:ae:e5:54:30:0c:b8:dd:ee:ba:33:
         19:84:f2:45:f7:bc:0c:73:1c:7d:b7:f2:c0:85:33:16:52:13:
         8b:2a:f8:da:69:63:cf:13:1a:5a:14:54:0f:6f:8b:6b:93:9f:
         90:15:5d:10:84:f8:05:6c:a1:8d:bb:5d:a7:26:32:cc:95:f2:
         d0:cd:d5:7f:24:af:e7:2e:ee:c2:f7:00:ce:89:a7:09:b6:6a:
         60:ad:0c:86:bb:be:c3:b7:97:f0:a6:0b:ea:91:ea:19:23:c6:
         78:e1:f6:56:7a:d3:19:b2:8c:d2:91:eb:b9:57:70:60:94:9a:
         2b:17:88:d2:24:e0:61:55:15:ef:69:51:38:fa:70:e2:c8:92:
         4f:a1:79:21:aa:3c:9b:ee:ba:1f:e2:46:c0:c3:c1:ef:3e:e4:
         fe:2d:1c:43:a2:47:23:62:9b:bd:f5:9c:fa:34:17:87:e7:a0:
         68:72:4b:84:30:b3:a0:e2:dd:da:0b:be:46:ac:89:0c:5f:c8:
         cf:c4:07:eb:90:c8:c0:9b:7a:63:df:4d:f3:f5:e9:4c:ab:a2:
         7b:40:37:35:30:7a:4b:fc:8d:eb:7b:9f:44:c0:45:dc:d0:24:
         b2:74:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:06 2026 by rpki-client