This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
File:                     t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft (raw, json)
Hash identifier:          KfYfMoBjjwF0l7sZbYgRZpCxCJZMDpwAxyfY++vzJMI=
Subject key identifier:   6C:F2:B6:9E:A0:7D:EE:88:27:59:BA:17:4B:F6:8E:17:74:F8:5B:94
Authority key identifier: B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43
Certificate issuer:       /CN=A9191EE7/serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43
Certificate serial:       0715
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
Manifest number:          070D
Signing time:             Sat 24 Jan 2026 21:12:03 +0000
Manifest this update:     Sat 24 Jan 2026 21:12:02 +0000
Manifest next update:     Sat 31 Jan 2026 21:12:02 +0000
Files and hashes:         1: t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl (hash: BqKgjOBB0CkgcUedCMFGX4KkgWY0pUfkkx3PNkogHg0=)
                          2: BF289EBC6F7911EBA5D39C85C4F9AE02.roa (hash: rYmfs/RpISA0+rLDC4rvjoN2LC7fOP83NH3OmfB3ty0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl
                          rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191EE7, serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43
        Validity
            Not Before: Jan 24 21:12:02 2026 GMT
            Not After : Jan 31 21:12:02 2026 GMT
        Subject: CN=697535a2-d417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:69:32:71:cb:f7:96:51:24:cb:af:b1:bb:
                    a2:d5:71:10:c2:00:b5:5d:04:ae:c1:5c:9b:f8:99:
                    d0:fa:1f:e0:58:7a:0c:e2:4b:f4:4e:bc:10:c8:6a:
                    f0:67:f3:e2:f5:70:ae:d5:9b:d9:e9:41:61:09:d4:
                    2d:eb:c9:5a:a8:05:10:42:f9:02:68:86:f2:9f:72:
                    43:3e:45:55:a0:d2:fc:29:b8:17:b9:9d:4c:8e:26:
                    93:ee:72:ae:bd:75:26:1a:84:19:a9:1c:28:fa:32:
                    21:81:4e:c8:8e:39:6d:36:c9:13:a9:8b:de:d2:a0:
                    c1:21:4c:ba:60:bc:6d:b7:10:16:78:98:6e:e3:01:
                    47:00:bd:77:74:41:dd:68:c2:2b:87:84:63:76:8f:
                    88:10:c2:70:bc:be:f0:e6:fe:ed:c5:30:9a:06:9b:
                    82:9e:f3:5d:2a:f6:ba:e2:dc:fd:76:2c:81:d9:8c:
                    6e:0a:3a:2f:99:50:31:58:4d:1b:7c:cb:f3:e9:58:
                    10:f5:f3:f8:0d:55:02:84:9f:2f:0c:93:97:6d:93:
                    1b:47:78:d8:5c:2a:64:59:15:99:cd:04:29:fa:d7:
                    7b:49:50:78:04:7a:61:8e:cb:4b:91:f0:b8:e1:96:
                    c9:21:99:9e:eb:c7:36:30:06:f4:f2:63:8e:5f:7d:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:B6:9E:A0:7D:EE:88:27:59:BA:17:4B:F6:8E:17:74:F8:5B:94
            X509v3 Authority Key Identifier:
                keyid:B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:cd:2d:77:8a:9a:3a:49:31:ff:8e:bb:5c:8b:86:af:a8:
         06:e6:44:d8:b6:8b:db:6f:c6:73:fe:ea:da:1f:36:4d:72:b0:
         5f:5f:9c:87:4b:24:90:5f:fd:6a:56:39:37:1d:20:17:76:46:
         32:2b:69:b4:bf:ea:6a:1b:b0:47:e3:4f:bd:b4:86:8d:60:c4:
         8f:af:8d:9c:41:ed:8f:7b:33:ba:94:ef:b5:be:3b:32:cb:a5:
         e1:f5:4b:d5:f2:d7:92:7f:f4:70:00:11:90:3d:6c:1f:45:8d:
         29:33:9c:a1:99:69:bd:b3:59:31:77:45:84:d8:fd:17:36:7d:
         14:dd:9b:18:46:45:c6:cc:98:00:51:fa:de:0d:18:b3:72:d8:
         61:a1:2e:53:fb:2e:c6:dd:76:07:59:b3:5c:99:5f:29:10:51:
         aa:25:22:69:17:07:82:bc:fe:47:fa:da:d5:5e:46:13:07:df:
         00:b9:b8:69:02:81:17:50:7d:9c:71:db:a9:87:f7:b7:d3:91:
         89:d8:9f:b5:1e:c1:29:58:54:4e:ad:dd:b4:f0:49:29:ff:b3:
         73:2f:0b:b8:64:3f:a3:27:d0:79:da:87:55:0b:10:c4:d1:e8:
         0a:da:55:cd:60:5b:ed:92:33:8a:7e:23:5f:77:7e:26:ad:4c:
         61:40:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:04 2026 by rpki-client