This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          ASeZhpHlcQG5ulISVBijLarwVWchMEHtajdSuHa5qgc=
Subject key identifier:   9F:FD:08:ED:F0:09:3E:66:83:60:48:98:DA:31:E6:FF:8A:A5:32:51
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       0468
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          0454
Signing time:             Sat 24 Jan 2026 22:13:26 +0000
Manifest this update:     Sat 24 Jan 2026 22:13:25 +0000
Manifest next update:     Sat 31 Jan 2026 22:13:25 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: O5HxxcKjP1EiJXmAcJ34i/ECkmTdCXdLj56t9EQY12A=)
                          2: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: ucXZf4eu0/AY5wwnvuYXaUOhU2IDoNXJmo5ZEBv0MfQ=)
                          3: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: 6vANpzfgkdA95BOGghUjzousLRYpV7ZyXI+Ad3LxlZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Jan 24 22:13:25 2026 GMT
            Not After : Jan 31 22:13:25 2026 GMT
        Subject: CN=69754405-d21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:57:8f:8c:87:64:e8:67:d3:79:ee:80:1a:
                    ef:37:6e:fc:4b:49:36:ab:bf:1f:df:65:be:89:2c:
                    f2:33:ec:ad:f9:73:f6:d8:c6:82:77:31:ed:0f:df:
                    d9:4b:30:fe:4e:d5:97:98:a7:31:b6:88:9d:ff:b0:
                    7d:cc:f0:33:fd:e2:08:e8:06:70:4b:0e:1b:f9:a8:
                    0d:2b:57:eb:fa:c3:f7:b0:d2:f6:4b:ca:ca:e9:73:
                    cb:5b:63:44:6a:7c:6f:9a:16:8e:1e:8e:76:ee:6b:
                    a2:83:b5:77:05:17:78:b5:78:a5:0b:f1:71:72:5e:
                    98:48:75:c4:f5:e2:d7:82:95:5a:04:00:eb:a6:c7:
                    f5:7a:63:11:44:76:2a:f1:e7:dd:d5:ec:ea:77:4b:
                    79:c4:d5:6f:36:b2:94:cb:72:1f:54:41:87:53:17:
                    b9:dd:19:00:30:d6:2b:ad:c8:67:27:4f:62:f2:be:
                    05:35:f9:1e:11:6f:6d:c9:7e:16:e2:ab:76:6f:01:
                    46:fb:c2:3b:5f:37:8e:bc:18:8a:74:01:dc:0e:3a:
                    64:10:0d:84:f7:6b:9a:41:78:72:a0:18:4b:1f:24:
                    e9:f6:a8:52:97:80:81:1b:d9:4d:60:6f:b4:9d:89:
                    1a:24:c1:50:d3:6c:85:36:8e:d0:01:9e:41:11:77:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:08:ED:F0:09:3E:66:83:60:48:98:DA:31:E6:FF:8A:A5:32:51
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8b:ae:83:94:96:02:7c:b2:1c:f8:12:0b:42:54:04:ce:13:
         71:07:a2:d1:e6:69:21:63:52:1f:ad:2f:8f:d2:5e:80:32:13:
         91:b9:18:cb:62:6b:05:11:21:0c:64:ff:15:57:f1:ab:62:32:
         74:4f:00:3c:c1:4f:4e:ad:80:ac:52:af:d2:0d:9e:e9:79:9b:
         84:8c:1e:72:e9:98:af:22:b9:eb:7a:7d:cd:bd:bf:6f:e6:1d:
         ab:99:88:9a:fb:14:62:0e:8e:bc:0b:8c:bd:7f:c6:2d:d2:6e:
         bc:6d:af:ec:6e:fb:41:26:c6:ce:f7:50:25:00:3b:3a:e4:cb:
         83:e7:c1:f0:c0:28:93:2e:ac:e9:56:13:90:4e:07:20:e7:b6:
         5b:3e:1d:b4:14:84:a7:73:0e:de:46:36:ba:a4:00:08:69:de:
         8a:7c:8f:4f:bc:b8:aa:5b:76:6a:8a:1d:7c:aa:c5:1f:6b:b4:
         dd:95:1d:58:8d:0c:93:be:3b:62:a5:a8:8b:2e:95:c4:7c:b7:
         32:93:37:e0:70:e8:f1:9d:84:3c:e2:5e:2c:e0:a6:20:15:d0:
         c2:de:70:14:04:0a:20:1a:ac:31:ef:a8:b3:6b:18:60:fb:da:
         ae:98:31:71:24:61:be:fb:04:62:67:06:75:9e:66:6f:00:3a:
         40:03:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:48 2026 by rpki-client