This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
File:                     n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json)
Hash identifier:          IRKHGjMd/rDp77o/BO2j4Op90ZDyKqg1E9vFCJydAmU=
Subject key identifier:   63:E3:07:21:EC:CB:F2:40:25:2E:BC:E4:C1:CD:B7:06:D4:88:55:B9
Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2
Certificate issuer:       /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
Certificate serial:       07E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
Manifest number:          07E2
Signing time:             Sat 24 Jan 2026 20:34:56 +0000
Manifest this update:     Sat 24 Jan 2026 20:34:56 +0000
Manifest next update:     Sat 31 Jan 2026 20:34:56 +0000
Files and hashes:         1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: 6HvvPAz/RtJXC+dsa14Xnk4yA7fR/eYC2vJOTE58Xeo=)
                          2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: LAOdJFFawenc1AsXXDOL+3qQmHgUCEKitPEgiKRJnTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl
                          rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
        Validity
            Not Before: Jan 24 20:34:56 2026 GMT
            Not After : Jan 31 20:34:56 2026 GMT
        Subject: CN=69752cf0-514f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:32:59:a4:c8:ce:78:84:88:3d:78:c6:86:
                    d8:57:a0:51:c7:39:d2:4b:31:fe:fe:be:b0:db:6a:
                    f7:90:07:7c:9c:5a:49:f4:c0:7c:54:36:6f:c3:a7:
                    09:f7:9a:90:b7:91:83:a4:51:60:04:2c:d4:62:8e:
                    86:db:63:46:c9:d0:88:d0:cb:45:cc:5b:88:4e:6f:
                    7c:9c:35:08:b3:15:a4:10:cd:e7:69:00:63:3c:d1:
                    0a:15:29:d9:de:81:d5:5a:9c:4e:f3:f4:c3:ee:28:
                    d8:44:a9:78:a2:4b:78:2f:9b:a0:d4:79:9b:37:be:
                    64:de:a2:4d:c9:82:4f:82:9b:ec:68:f1:96:b6:53:
                    b5:fd:d6:cf:d6:e4:f1:4e:52:37:24:ff:76:e1:c3:
                    1d:9f:25:fb:1f:23:c2:53:1d:6a:0d:3b:b3:4c:30:
                    ef:5a:5a:0b:4f:7c:49:bb:a7:cb:42:71:5f:54:a5:
                    8e:ff:c7:9e:88:43:f1:61:0b:73:ea:59:4d:00:d0:
                    0a:18:6e:66:84:a2:4e:f6:d5:07:25:25:a2:98:4b:
                    9a:21:4b:88:07:42:96:bc:cf:48:d7:11:db:5a:ac:
                    61:c9:a0:1c:22:d2:e7:71:ac:14:08:9b:8b:be:43:
                    ac:56:80:0e:af:71:ab:22:96:81:c3:e4:b3:d4:f7:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E3:07:21:EC:CB:F2:40:25:2E:BC:E4:C1:CD:B7:06:D4:88:55:B9
            X509v3 Authority Key Identifier:
                keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:3b:db:0a:bf:d9:f9:e8:ab:fa:47:39:ea:b4:47:34:3d:
         39:bd:7d:e9:0b:21:d7:52:dc:5b:9e:8e:f7:bb:93:ff:60:8c:
         b6:d6:2f:0e:4b:d2:d9:2b:3c:5c:52:b8:5a:de:94:e7:ee:59:
         9d:3a:53:81:1a:d9:aa:f1:74:c5:be:0d:03:39:f3:de:c9:1b:
         5d:64:67:8e:20:ab:59:69:ab:ae:9e:b8:a0:87:87:ec:a8:01:
         f5:da:af:10:4e:e4:09:a1:90:9d:d5:cd:f1:ab:89:e0:d9:1e:
         f4:f6:99:83:47:08:ff:38:d6:03:b4:0a:64:ec:0c:3d:8c:48:
         e9:64:47:c6:4e:97:2d:c8:86:81:23:e2:7c:54:38:4d:ec:61:
         6c:a8:e3:8a:9b:21:b3:8f:04:b0:da:8a:f4:ca:46:c0:5f:54:
         75:3e:2f:4e:8a:4a:01:07:77:20:46:3b:37:54:34:2e:ef:f6:
         93:2d:ca:ac:63:55:cb:19:2d:13:3d:fd:55:64:c6:98:ab:84:
         c5:7c:32:4a:e4:3f:e7:e4:ab:8a:f9:53:9a:80:8e:de:6d:aa:
         11:48:db:f8:c0:6f:16:5d:cc:6f:f2:f4:44:1d:50:c3:6f:d3:
         b3:14:99:7e:1d:9e:93:40:43:ea:68:03:ed:b2:03:01:d9:7c:
         f4:db:b5:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1
NDcxNjA1RjIwHhcNMjYwMTI0MjAzNDU2WhcNMjYwMTMxMjAzNDU2WjAYMRYwFAYD
VQQDDA02OTc1MmNmMC01MTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnTMyWaTIzniEiD14xobYV6BRxznSSzH+/r6w22r3kAd8nFpJ9MB8VDZvw6cJ
95qQt5GDpFFgBCzUYo6G22NGydCI0MtFzFuITm98nDUIsxWkEM3naQBjPNEKFSnZ
3oHVWpxO8/TD7ijYRKl4okt4L5ug1HmbN75k3qJNyYJPgpvsaPGWtlO1/dbP1uTx
TlI3JP924cMdnyX7HyPCUx1qDTuzTDDvWloLT3xJu6fLQnFfVKWO/8eeiEPxYQtz
6llNANAKGG5mhKJO9tUHJSWimEuaIUuIB0KWvM9I1xHbWqxhyaAcItLncawUCJuL
vkOsVoAOr3GrIpaBw+Sz1Pcl6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPjByHs
y/JAJS685MHNtwbUiFW5MB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC
NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG
Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2yzvbCr/Z+eir+kc56rRHND05vX3pCyHXUtxbno73u5P/YIy21i8O
S9LZKzxcUrha3pTn7lmdOlOBGtmq8XTFvg0DOfPeyRtdZGeOIKtZaauunrigh4fs
qAH12q8QTuQJoZCd1c3xq4ng2R709pmDRwj/ONYDtApk7Aw9jEjpZEfGTpctyIaB
I+J8VDhN7GFsqOOKmyGzjwSw2or0ykbAX1R1Pi9OikoBB3cgRjs3VDQu7/aTLcqs
Y1XLGS0TPf1VZMaYq4TFfDJK5D/n5KuK+VOagI7ebaoRSNv4wG8WXcxv8vREHVDD
b9OzFJl+HZ6TQEPqaAPtsgMB2Xz027Vg
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:55:28 2026 by rpki-client