This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
File:                     JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json)
Hash identifier:          xWHbhicJiHxLST1EwZWbO+1OCeyUDQUs6XsHbfQuYVo=
Subject key identifier:   F8:0D:82:EC:2D:C8:4E:6A:2D:3D:D8:0F:85:A2:00:CC:EB:E9:77:6A
Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09
Certificate issuer:       /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
Manifest number:          9F
Signing time:             Sun 25 Jan 2026 05:33:36 +0000
Manifest this update:     Sun 25 Jan 2026 05:33:36 +0000
Manifest next update:     Sun 01 Feb 2026 05:33:36 +0000
Files and hashes:         1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: Hsj7qdk4405r3ftTRkOVk+pM+6pNL3gD8OPuUdAUF1o=)
                          2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: gLLXVBbnqOuYpmPZP1sg2HQN+ZDT78K787nO1Ano868=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl
                          rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
        Validity
            Not Before: Jan 25 05:33:36 2026 GMT
            Not After : Feb  1 05:33:36 2026 GMT
        Subject: CN=6975ab30-9611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:74:62:7e:31:96:a6:25:2b:c0:66:fd:91:
                    41:6b:8d:08:22:52:93:0a:c8:49:50:b8:10:d3:71:
                    1a:9c:5b:be:6b:b7:45:91:68:e6:3c:3f:52:8c:27:
                    97:46:ab:46:83:77:0f:9b:d3:e7:6d:cf:34:b4:55:
                    37:bb:8b:8e:a6:52:19:54:88:1a:2c:f4:00:79:e6:
                    86:44:5f:ed:12:5d:46:af:09:0e:15:3b:36:60:8a:
                    81:96:ce:68:df:75:dd:ca:71:06:69:2b:a1:1e:72:
                    e8:13:52:48:0f:08:f3:1d:d5:31:2b:c3:4f:55:f6:
                    63:ce:c2:97:1b:e8:a2:22:aa:3e:b9:bf:d5:94:03:
                    23:b9:ec:c4:6c:59:14:cc:e2:2b:9f:80:71:e9:1e:
                    d8:86:c6:ef:d3:fa:d9:9b:47:37:de:d9:dd:9c:0f:
                    c4:06:1c:3d:12:18:6d:37:22:c7:88:35:de:59:57:
                    e7:be:6b:09:76:53:85:15:5b:8f:2f:18:b2:47:ef:
                    a3:10:0a:31:0b:e1:7d:36:5f:1e:f0:a8:6f:78:75:
                    d8:8a:8a:4e:d9:32:00:7c:3a:bb:48:f8:8b:6e:e8:
                    f4:71:17:c3:65:fe:54:ed:6a:fa:04:68:a7:84:37:
                    f7:9d:ad:0e:58:0a:07:ba:7a:de:81:4e:11:33:34:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:82:EC:2D:C8:4E:6A:2D:3D:D8:0F:85:A2:00:CC:EB:E9:77:6A
            X509v3 Authority Key Identifier:
                keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ea:69:6a:63:ba:5b:2b:6e:c9:07:93:da:d4:91:50:88:f4:
         90:99:5d:99:09:17:ef:7b:7e:46:a2:fa:7a:16:5a:f6:2f:69:
         08:9f:8c:2f:41:31:98:6d:c1:29:3f:be:9b:e9:7d:0c:38:cf:
         0a:34:ea:d6:54:6a:3b:9f:66:45:88:b4:a5:d6:7f:38:74:9b:
         7e:f0:c1:e7:07:51:cd:86:c8:8b:17:a5:6d:be:1a:34:c1:a4:
         b7:a5:39:4d:e6:ca:3e:3a:ba:0d:a0:0b:b0:b1:48:63:b0:30:
         28:94:cc:5a:79:55:8c:c2:b9:fb:74:c9:9a:03:47:c6:58:8e:
         6d:f8:b1:79:3c:7e:db:47:a2:b5:e6:c4:27:a8:fb:2d:39:eb:
         3c:d5:e4:f6:45:f3:36:09:be:4b:fc:80:e0:56:fc:b1:12:ac:
         ff:12:33:f0:94:90:15:a6:8b:cd:4d:41:77:f1:6d:65:52:8d:
         d4:46:11:c5:d4:dd:2c:61:0e:8d:46:5a:6e:08:13:33:1d:f0:
         2f:c6:bd:c6:f1:b7:cc:7e:86:53:3c:98:17:65:83:01:a6:a8:
         e9:7c:51:9b:29:73:92:d9:a5:3c:a3:f6:45:57:94:82:49:fa:
         b0:35:c4:e9:ed:af:04:94:63:c3:36:52:19:20:e7:2f:ae:76:
         bf:f2:b8:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwQ0MxMTAvBgNVBAUTKDI0NTNDRTdDNDI1M0RCQjJDN0FDM0QyOTAxM0U5MEQ1
RjUzQzVEMDkwHhcNMjYwMTI1MDUzMzM2WhcNMjYwMjAxMDUzMzM2WjAYMRYwFAYD
VQQDDA02OTc1YWIzMC05NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzax0Yn4xlqYlK8Bm/ZFBa40IIlKTCshJULgQ03EanFu+a7dFkWjmPD9SjCeX
RqtGg3cPm9Pnbc80tFU3u4uOplIZVIgaLPQAeeaGRF/tEl1GrwkOFTs2YIqBls5o
33XdynEGaSuhHnLoE1JIDwjzHdUxK8NPVfZjzsKXG+iiIqo+ub/VlAMjuezEbFkU
zOIrn4Bx6R7Yhsbv0/rZm0c33tndnA/EBhw9EhhtNyLHiDXeWVfnvmsJdlOFFVuP
LxiyR++jEAoxC+F9Nl8e8KhveHXYiopO2TIAfDq7SPiLbuj0cRfDZf5U7Wr6BGin
hDf3na0OWAoHunregU4RMzSXywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgNguwt
yE5qLT3YD4WiAMzr6XdqMB8GA1UdIwQYMBaAFCRTznxCU9uyx6w9KQE+kNX1PF0J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDQy9CREQ0QUYzQzBC
RDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3TEhyRDBwQVQ2UTFmVThY
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0pGUE9mRUpUMjdMSHJEMHBBVDZRMWZVOFhRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjBDQy9CREQ0QUYzQzBCRDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3
TEhyRDBwQVQ2UTFmVThYUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC76mlqY7pbK27JB5Pa1JFQiPSQmV2ZCRfve35Govp6Flr2L2kIn4wv
QTGYbcEpP76b6X0MOM8KNOrWVGo7n2ZFiLSl1n84dJt+8MHnB1HNhsiLF6Vtvho0
waS3pTlN5so+OroNoAuwsUhjsDAolMxaeVWMwrn7dMmaA0fGWI5t+LF5PH7bR6K1
5sQnqPstOes81eT2RfM2Cb5L/IDgVvyxEqz/EjPwlJAVpovNTUF38W1lUo3URhHF
1N0sYQ6NRlpuCBMzHfAvxr3G8bfMfoZTPJgXZYMBpqjpfFGbKXOS2aU8o/ZFV5SC
SfqwNcTp7a8ElGPDNlIZIOcvrna/8rgP
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:46:47 2026 by rpki-client