This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File:                     mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier:          yw1DbyyUtTm9H4STauZLujzKbZOD+gTjmf8tUcv7RDk=
Subject key identifier:   58:31:98:5A:9C:AC:8A:1A:1F:96:30:FC:4E:B5:84:71:13:F8:D1:AE
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer:       /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number:          0204
Signing time:             Sun 25 Jan 2026 01:41:25 +0000
Manifest this update:     Sun 25 Jan 2026 01:41:25 +0000
Manifest next update:     Sun 01 Feb 2026 01:41:25 +0000
Files and hashes:         1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: KBpVqdm5y+LkFPy3fkeB4Pq6eQp2uF7ALyQJnGIpI60=)
                          2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: 2aRPKdC2caR+1nzmwQGCZ8933jgrgaw6kF4+sg+Y8jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
                          rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
        Validity
            Not Before: Jan 25 01:41:25 2026 GMT
            Not After : Feb  1 01:41:25 2026 GMT
        Subject: CN=697574c5-15b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:7c:b8:24:0c:80:90:39:f7:93:a5:c0:e0:
                    44:db:7c:22:17:61:86:77:75:55:af:97:9d:d1:6f:
                    c9:46:f1:38:59:95:19:e5:5d:fd:10:ee:3a:10:e6:
                    61:56:5a:96:b0:50:03:de:79:01:d3:ae:33:d2:b3:
                    26:d5:5f:8a:68:8e:d2:05:4a:81:43:7e:1b:7a:09:
                    b1:ec:05:46:8f:2e:4e:5e:f3:4d:f9:4b:68:9e:e5:
                    f1:4b:50:28:39:b6:b6:d9:8c:d9:11:70:27:a5:ee:
                    42:be:fd:3d:1e:d5:46:08:fd:0b:da:ec:a8:f2:f5:
                    51:78:e0:a6:2c:d8:3b:fa:fb:d4:3a:e7:cc:c5:fb:
                    d3:30:ca:a3:cd:79:ab:2c:ce:8b:18:f9:85:5d:28:
                    b8:a3:b1:b7:a7:3b:3b:4c:17:42:09:31:5c:42:58:
                    28:6e:dd:c5:67:39:2c:c5:03:fe:84:cf:2a:51:dd:
                    16:a9:52:70:5a:36:ac:5f:5c:57:4a:ad:40:68:57:
                    79:c0:1b:f4:6c:08:fe:dc:76:76:62:1d:8f:5c:d2:
                    64:33:a1:34:82:12:f5:ff:94:07:70:3b:bf:1c:a3:
                    5d:56:fc:26:b9:a8:55:e4:32:9f:59:69:0c:af:36:
                    3b:30:d0:82:b3:67:23:34:d2:80:44:8d:30:49:84:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:31:98:5A:9C:AC:8A:1A:1F:96:30:FC:4E:B5:84:71:13:F8:D1:AE
            X509v3 Authority Key Identifier:
                keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:53:58:f0:27:19:03:a1:d7:f2:37:02:83:8f:6b:7a:65:12:
         be:a8:81:35:92:b1:11:bc:07:ed:8b:47:c3:3a:ec:2c:7e:42:
         26:71:23:12:73:bf:e2:bc:18:06:ad:ba:96:0e:d5:e2:fa:3f:
         95:0c:1b:3b:a5:fd:65:d4:32:9b:e4:f9:c0:18:8e:b7:c6:dd:
         4b:b7:b2:95:38:31:8c:36:9e:aa:81:d3:77:f0:d1:99:40:05:
         31:87:d7:d6:08:64:7e:15:79:f0:61:11:2c:34:65:15:a7:d7:
         a8:20:8e:b8:dd:eb:7b:b9:15:e9:d4:db:c9:9a:bf:be:90:f7:
         0a:db:01:0e:02:98:e8:ef:61:9c:38:e7:d8:a8:51:50:1e:1f:
         a7:b5:e5:db:75:33:e5:c0:4b:24:43:a7:5b:70:78:03:29:52:
         a7:96:df:ed:5e:09:74:8f:9b:ce:3d:45:75:ba:3d:af:08:52:
         7f:89:e9:0f:f1:69:36:b5:df:b1:9e:c8:f5:83:66:31:37:9a:
         13:a0:a9:45:fe:83:b8:70:e8:27:37:ca:07:56:54:d4:bb:2c:
         1b:bb:a6:b2:93:85:a6:01:18:46:77:83:e2:46:84:53:fc:01:
         fa:8a:2e:d4:28:3f:f9:62:62:40:ef:b9:3b:aa:25:b2:a4:77:
         0a:bc:f2:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQzNTkxMTAvBgNVBAUTKDk5OUJBMzc0MTEwMjhBNjJGQjUxNURDRjAyOENEQTJE
QzlBQkM5RDEwHhcNMjYwMTI1MDE0MTI1WhcNMjYwMjAxMDE0MTI1WjAYMRYwFAYD
VQQDDA02OTc1NzRjNS0xNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAov58uCQMgJA595OlwOBE23wiF2GGd3VVr5ed0W/JRvE4WZUZ5V39EO46EOZh
VlqWsFAD3nkB064z0rMm1V+KaI7SBUqBQ34begmx7AVGjy5OXvNN+UtonuXxS1Ao
Oba22YzZEXAnpe5Cvv09HtVGCP0L2uyo8vVReOCmLNg7+vvUOufMxfvTMMqjzXmr
LM6LGPmFXSi4o7G3pzs7TBdCCTFcQlgobt3FZzksxQP+hM8qUd0WqVJwWjasX1xX
Sq1AaFd5wBv0bAj+3HZ2Yh2PXNJkM6E0ghL1/5QHcDu/HKNdVvwmuahV5DKfWWkM
rzY7MNCCs2cjNNKARI0wSYQ5zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgxmFqc
rIoaH5Yw/E61hHET+NGuMB8GA1UdIwQYMBaAFJmbo3QRAopi+1FdzwKM2i3Jq8nR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDM1OS8zMzVFNjU2MkU0
QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2ltTDdVVjNQQW96YUxjbXJ5
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21adWpkQkVDaW1MN1VWM1BBb3phTGNtcnlkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDM1OS8zMzVFNjU2MkU0QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2lt
TDdVVjNQQW96YUxjbXJ5ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0U1jwJxkDodfyNwKDj2t6ZRK+qIE1krERvAfti0fDOuwsfkImcSMS
c7/ivBgGrbqWDtXi+j+VDBs7pf1l1DKb5PnAGI63xt1Lt7KVODGMNp6qgdN38NGZ
QAUxh9fWCGR+FXnwYREsNGUVp9eoII643et7uRXp1NvJmr++kPcK2wEOApjo72Gc
OOfYqFFQHh+nteXbdTPlwEskQ6dbcHgDKVKnlt/tXgl0j5vOPUV1uj2vCFJ/iekP
8Wk2td+xnsj1g2YxN5oToKlF/oO4cOgnN8oHVlTUuywbu6ayk4WmARhGd4PiRoRT
/AH6ii7UKD/5YmJA77k7qiWypHcKvPKw
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:05 2026 by rpki-client