This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File:                     9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier:          qrqaHL4QujLSBkO6So7ac+e+aJhi5DWoo196g7/O5+A=
Subject key identifier:   66:20:3D:48:17:3A:FE:16:D1:9B:CD:D8:CF:91:AA:8D:81:CB:66:7E
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer:       /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number:          DE
Signing time:             Sun 25 Jan 2026 04:49:59 +0000
Manifest this update:     Sun 25 Jan 2026 04:49:58 +0000
Manifest next update:     Sun 01 Feb 2026 04:49:58 +0000
Files and hashes:         1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: IgFYTBjdV88pQgW8yonaEo3m3faFy77GywxMJ287cFg=)
                          2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: i0ORlhZOKsAGkbvWhGFe0p7d5mIlyQ7Mxy4cSYnkDVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
        Validity
            Not Before: Jan 25 04:49:58 2026 GMT
            Not After : Feb  1 04:49:58 2026 GMT
        Subject: CN=6975a0f7-7fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:26:42:73:ae:da:b3:f7:ab:87:c5:9e:45:
                    7b:be:8a:e7:ef:e5:cd:01:d3:0c:86:cc:18:1b:80:
                    f8:ed:9f:9e:db:90:7d:d0:89:7e:72:c0:f3:4d:73:
                    87:46:b5:03:38:ae:e2:09:89:b5:db:5d:53:a4:6c:
                    b5:37:19:39:ff:2d:47:f9:15:35:9f:6a:95:d3:d3:
                    e4:a0:7b:a9:6b:56:87:b8:83:bc:b3:24:36:6b:eb:
                    fd:37:f8:6e:8a:ab:85:24:63:84:88:27:3c:e8:4f:
                    d8:4e:56:92:57:ba:42:f6:3f:6b:89:01:fc:fc:1d:
                    4b:b9:0c:1a:64:14:13:2f:f9:f9:6f:07:2f:47:03:
                    d1:45:00:14:4c:c9:8e:59:a7:d3:5f:4b:4f:1b:02:
                    af:aa:16:25:eb:45:53:08:d6:c1:36:a7:59:c6:67:
                    ea:15:79:0f:1a:09:b5:39:f7:bc:1f:fc:ab:51:fc:
                    d2:91:21:d2:d4:93:c1:83:63:2d:39:74:da:0f:39:
                    f0:c8:35:6f:1c:61:76:09:cb:df:ff:32:25:11:f7:
                    08:7e:e2:81:6f:97:9e:8e:23:a2:fc:dc:cc:27:14:
                    75:c5:e9:05:bf:44:ea:2f:98:1f:8d:69:81:e5:54:
                    e0:ad:a6:60:ba:10:1b:b1:0b:2a:fa:17:ba:13:f3:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:20:3D:48:17:3A:FE:16:D1:9B:CD:D8:CF:91:AA:8D:81:CB:66:7E
            X509v3 Authority Key Identifier:
                keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:49:80:9e:33:2d:fd:54:83:8b:ed:05:99:2a:3a:3f:25:43:
         04:cf:19:bc:30:33:49:9b:f2:ef:99:5a:b0:23:8a:dc:12:c1:
         a3:57:43:6d:a5:bb:ff:41:fd:76:3e:fe:0a:90:5c:96:97:10:
         dc:c5:a7:8c:0e:82:18:1b:05:80:03:7a:93:a9:d7:3e:a6:71:
         58:4c:6f:59:36:a2:6f:f0:6d:f2:37:06:1c:f4:0d:3d:89:2a:
         30:34:da:e7:f8:41:0c:11:40:73:3d:b7:60:6b:13:39:43:5f:
         6b:78:5c:2e:17:b4:1d:16:67:81:ef:9b:31:0b:6e:7e:5a:20:
         db:74:83:4d:cc:ee:e6:07:23:c3:a4:af:5f:2d:63:74:32:b8:
         8d:df:7b:af:40:7b:ff:f4:88:de:ea:56:63:87:39:be:7e:1e:
         76:af:f6:cf:ec:13:26:cc:4c:6a:87:49:5c:23:a9:47:ae:c2:
         51:72:e6:eb:24:f8:43:51:6c:4e:3d:f9:bd:93:83:47:c0:82:
         08:ae:c3:4e:89:03:e3:20:9e:6e:e5:89:76:c2:89:e6:38:fd:
         48:db:27:be:90:79:3c:58:d8:7d:6f:b0:20:ce:9d:51:a8:3f:
         f0:fc:c2:ed:7e:ce:f3:55:a8:02:2a:4a:d5:03:36:1d:bf:37:
         fa:2a:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:20 2026 by rpki-client