This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File:                     jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier:          SI2KUPDBGenocz1AOCscqc+DGluuxPi97qfXrzv2+8A=
Subject key identifier:   3F:7E:89:FA:CC:B7:2F:AB:5A:65:C3:91:72:B9:C7:43:E9:0B:21:54
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number:          026A
Signing time:             Sun 25 Jan 2026 00:48:30 +0000
Manifest this update:     Sun 25 Jan 2026 00:48:29 +0000
Manifest next update:     Sun 01 Feb 2026 00:48:29 +0000
Files and hashes:         1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: R9KI0c+EdoKG8YWQA15KZxWNOGfa/qI4yhNK3azOmvA=)
                          2: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: egVVNLsPdwUoef36phQTdD6372WDtBPUXE4iD/r+2cc=)
                          3: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: IyWwjIStMD7CLHAYI80G9u0bSfl+ZxcEcIIy1oHhXzo=)
                          4: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: cQgwz6VDyiOHU3CVFbp+dck6b+15ezgPGKxe1LIqxfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: Jan 25 00:48:29 2026 GMT
            Not After : Feb  1 00:48:29 2026 GMT
        Subject: CN=6975685d-bef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:50:52:8d:71:39:cb:c2:41:9c:26:52:dd:
                    1d:41:a2:ee:0b:c6:b7:a4:aa:4e:69:cc:37:7d:39:
                    d4:03:2f:3b:b8:a1:3e:c3:ba:6f:c3:a7:70:28:33:
                    43:be:bb:4b:b0:79:2e:d5:73:aa:23:d9:96:19:ea:
                    d3:f0:44:54:ed:77:9a:02:28:01:ad:37:ef:e4:d5:
                    51:b4:1e:60:d6:63:eb:be:88:f7:3d:f6:6d:c6:89:
                    a6:93:3f:09:c3:cd:ce:d7:58:b6:72:61:cb:a0:4f:
                    4a:6e:29:a9:d4:20:4a:f2:36:9d:2b:0c:a6:88:66:
                    59:8f:a7:14:99:6e:08:58:94:40:26:17:62:71:a5:
                    f6:0a:22:be:3e:b4:52:bb:28:5f:d4:50:17:ac:61:
                    9b:c6:a3:45:ee:9c:9c:30:ac:84:c6:ed:4b:4c:d1:
                    be:a5:bb:9e:79:8c:ab:14:ce:3e:11:e7:77:a6:7e:
                    de:35:a9:0f:87:2f:02:b8:4d:7d:9d:ad:80:ab:be:
                    66:21:23:77:a7:14:2b:fc:eb:13:ec:f7:d2:4e:31:
                    16:dc:13:67:7c:ef:3f:8c:2e:38:ab:2e:ea:b1:2e:
                    f6:48:d9:b3:6d:25:57:73:c7:96:79:fc:93:c7:27:
                    62:3b:6a:45:94:0c:70:ea:a1:c2:93:eb:b0:6c:2a:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7E:89:FA:CC:B7:2F:AB:5A:65:C3:91:72:B9:C7:43:E9:0B:21:54
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ab:19:2a:4e:7b:28:e9:2c:ec:98:d4:7d:49:99:77:74:49:
         75:d0:70:7a:bd:29:f7:f8:d5:15:f7:e9:05:29:45:75:b0:11:
         15:ca:81:70:c7:3e:af:bf:d6:e8:79:9e:5e:47:c9:0b:65:ab:
         eb:ca:ba:d3:cf:ef:ed:28:bb:b0:e2:08:08:9f:d3:41:a7:86:
         0c:9e:7e:8f:e2:03:7b:38:a8:ac:46:a5:26:4e:7b:58:25:52:
         bf:f9:4b:6a:3b:41:38:69:b8:6b:21:e0:95:ef:de:77:0a:f1:
         6b:70:d1:d6:ff:b7:a7:d3:a0:20:66:53:d9:11:e6:e6:f9:87:
         3c:ca:b9:a1:c5:6d:d7:95:5b:12:2a:18:cc:f6:36:ce:47:1d:
         50:64:7b:b7:b9:56:44:ad:56:42:59:c3:55:82:f3:de:32:4e:
         9f:13:36:e9:9c:02:29:13:f5:45:52:9f:9c:1e:63:41:b0:38:
         c2:d1:81:89:fa:b5:43:db:3e:ae:1a:f3:7d:41:ab:b8:3b:27:
         14:5f:52:ba:eb:3c:f9:1b:b8:3e:8f:18:b7:f2:85:17:b1:f1:
         01:eb:50:f3:33:f0:67:a9:de:47:39:46:43:24:fe:fa:65:38:
         76:02:1f:ea:98:b7:aa:99:be:5e:17:de:7b:b2:7e:58:0f:5d:
         23:69:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:09 2026 by rpki-client