This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
File:                     dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json)
Hash identifier:          iwlIGqymsq6TSjVUazljJcEDm9+OXozP6HrJ1LICOZU=
Subject key identifier:   2B:29:4D:F5:2F:55:E7:DC:01:AF:08:86:09:EC:31:A9:45:80:92:79
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Certificate issuer:       /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
Manifest number:          3D
Signing time:             Sun 25 Jan 2026 06:30:16 +0000
Manifest this update:     Sun 25 Jan 2026 06:30:15 +0000
Manifest next update:     Sun 01 Feb 2026 06:30:15 +0000
Files and hashes:         1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: RwPsnF3dZKuRDOZDfjM2k/fg4KEqpBO1a1uByMAkwg0=)
                          2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: /OONPuUDLnHhTMEraEKTABbJUmrt5brSg9FbXWyrZbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
        Validity
            Not Before: Jan 25 06:30:15 2026 GMT
            Not After : Feb  1 06:30:15 2026 GMT
        Subject: CN=6975b878-9bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:29:1c:63:5c:b2:85:04:d9:86:7d:56:67:
                    c7:08:3e:d4:83:42:8b:e8:8a:8f:b8:ae:35:8a:de:
                    b5:17:37:71:87:e5:39:6c:23:23:09:8e:75:e1:bf:
                    5c:3a:50:98:69:aa:8e:75:4e:61:f4:0c:15:57:dd:
                    ac:b1:e3:3c:d7:20:ec:87:f2:61:98:97:01:40:1e:
                    56:a2:c1:c1:d1:67:35:64:32:d8:90:e6:63:af:23:
                    84:67:6a:4d:ec:ca:4e:02:5f:05:2f:e0:22:f0:dd:
                    a0:00:bd:06:67:2e:fa:92:b7:ca:0f:3f:6c:cc:ae:
                    58:99:d0:7e:09:93:f3:69:7f:80:37:8c:29:06:5e:
                    e1:bc:07:b5:bb:1d:60:75:0c:0d:86:f5:7f:ed:d1:
                    48:32:49:af:ba:a5:55:3f:f1:b1:2a:70:95:74:be:
                    21:36:3a:80:f2:82:73:3a:d6:c2:9b:ae:9d:42:c7:
                    54:41:4f:3c:e8:8f:b0:bf:b9:36:88:47:15:ba:18:
                    c2:30:d4:f3:f2:07:e8:db:68:12:0f:51:28:77:18:
                    5e:ef:aa:6e:70:13:39:64:fa:47:4b:6e:cc:2e:4e:
                    26:ac:97:cd:cc:23:d5:d8:f9:a3:16:9b:5e:2f:b6:
                    a6:88:01:75:59:75:ac:05:97:01:dd:f5:de:c5:19:
                    46:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:29:4D:F5:2F:55:E7:DC:01:AF:08:86:09:EC:31:A9:45:80:92:79
            X509v3 Authority Key Identifier:
                keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:21:7a:67:7d:b6:e8:9b:71:7c:33:ad:0a:dc:2c:ee:77:95:
         11:a0:0c:e6:e3:42:3b:d1:a9:66:bd:07:4f:16:ed:72:84:70:
         08:4d:e5:c0:ff:3e:d8:18:e4:93:13:65:60:05:1a:e7:9e:13:
         db:fd:d4:3c:d0:de:7b:e6:f8:37:72:e6:50:88:4d:01:dc:f7:
         38:3a:c4:cb:2d:8b:b9:f5:2e:d0:ed:ad:5e:be:2b:21:c2:e3:
         ec:d6:59:de:5f:0e:7b:8e:ab:32:10:6e:ef:91:cc:93:54:22:
         63:8c:31:10:8b:f5:bd:ed:0a:bc:ad:37:0a:2c:a2:d3:ac:8a:
         94:03:49:86:00:3a:17:59:35:4d:29:84:a0:a6:d8:a4:8d:00:
         a5:fb:63:fd:93:a7:0d:89:63:4e:8c:da:86:84:a4:03:87:b8:
         95:6a:1f:c0:5b:df:fd:b3:e6:e3:99:4d:af:d8:27:d8:ff:4e:
         88:67:de:1e:f7:a8:55:68:01:52:fa:23:92:f3:78:51:e6:d8:
         10:11:b3:9b:0e:da:26:1e:3e:90:a2:db:4a:7a:df:6d:1c:55:
         58:a4:44:fd:35:37:b8:dd:97:26:dc:ef:6c:b2:92:f4:8d:e0:
         7d:09:8d:2b:77:7e:61:90:0d:ff:4f:71:46:e8:a4:f8:04:52:
         be:7b:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:03:16 2026 by rpki-client