This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File:                     7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier:          Y3gUUOtLAyVUzCQiXug+w65ED6CKCrUUkNUc1pBmMFU=
Subject key identifier:   D4:F9:66:0F:1E:01:45:68:76:5A:FB:9F:36:6F:48:4E:31:92:11:8B
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer:       /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number:          2D
Signing time:             Fri 23 Jan 2026 06:39:11 +0000
Manifest this update:     Fri 23 Jan 2026 06:39:11 +0000
Manifest next update:     Fri 30 Jan 2026 06:39:11 +0000
Files and hashes:         1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: WVF8WKADJdDVJsn5ARBXTu6imz2I4DvB+ZmGGPxbVRM=)
                          2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: b+1hqemSQst2M7DCyOrAvb7h4SpsImJMoRs35hPQsyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
                          rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
        Validity
            Not Before: Jan 23 06:39:11 2026 GMT
            Not After : Jan 30 06:39:11 2026 GMT
        Subject: CN=6973178f-756d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:59:9b:04:ad:d5:a8:2c:7a:1c:8c:e3:1e:
                    78:17:f3:eb:0f:1a:cd:9d:d1:95:8b:b0:04:a6:a5:
                    dd:d7:d9:9e:60:28:8b:19:5e:6e:be:e1:2d:41:52:
                    fb:9d:d9:52:62:c0:d8:dc:ed:e6:9e:c4:43:f8:bc:
                    65:81:46:6e:29:60:58:83:fc:e4:1b:8f:a8:ab:d7:
                    4e:7c:4f:4f:d4:ef:7b:4c:a1:af:0c:ea:76:ea:e0:
                    52:d7:be:8b:fe:41:32:3f:62:b2:cc:f1:25:0c:3b:
                    89:24:78:94:d4:ff:21:d4:a2:5a:b3:f1:92:ae:88:
                    7f:20:26:78:8a:22:d4:8e:c6:05:e4:99:62:b4:04:
                    ed:7d:dc:92:8c:d7:96:63:14:9b:b1:77:fa:4e:ca:
                    0c:d5:66:1a:b5:53:62:c0:47:ac:b6:c2:fa:ff:42:
                    5b:ce:39:d6:6b:90:03:3e:6a:e7:4c:78:77:b6:ea:
                    32:43:ba:46:8c:fa:95:76:e9:57:fb:39:f4:49:b7:
                    0e:a6:e6:36:7a:96:4a:dd:34:1b:c7:6e:cd:d4:47:
                    ef:a1:12:62:05:d1:e6:ba:fd:6f:5f:e0:f0:67:8b:
                    b7:ed:aa:07:4d:81:ca:05:0b:32:35:80:8b:49:5d:
                    89:1f:47:33:e5:a7:d4:90:2f:11:fd:f8:13:66:99:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F9:66:0F:1E:01:45:68:76:5A:FB:9F:36:6F:48:4E:31:92:11:8B
            X509v3 Authority Key Identifier:
                keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d2:bc:b5:3b:23:a7:97:9d:7e:0d:ba:25:bb:98:e7:5e:cb:
         c0:53:36:81:a5:2b:31:7b:52:85:c6:2a:de:1e:19:c6:5d:18:
         bd:4a:f7:05:7e:e4:5e:93:8b:32:63:cb:55:f3:cb:a0:5e:57:
         fb:ad:dd:7b:76:ca:5b:56:2e:1c:e0:db:51:49:07:8c:6f:e6:
         71:d5:42:37:ce:0b:d2:63:da:31:20:92:47:cf:65:3e:6f:38:
         53:e7:bf:41:8e:ca:ce:26:ba:22:d9:99:c5:87:9d:06:e3:f4:
         99:2e:19:3a:4a:87:b7:36:fd:d1:24:aa:dd:42:de:70:3a:4e:
         f7:89:99:b2:4a:1e:49:b3:62:c7:3f:a8:db:53:7d:43:9b:6f:
         30:61:19:dc:9f:c6:f6:2d:0e:da:1d:af:8e:4a:ed:ad:e9:52:
         1f:4a:c1:a9:62:b2:ea:b1:82:0b:95:c2:a7:bc:a5:77:3c:7b:
         a9:c3:6f:e5:d9:5a:4a:a8:aa:39:85:21:23:af:07:9a:69:1a:
         4f:27:09:ea:a6:99:3a:ce:88:bb:28:8d:de:4b:4a:b0:b7:f3:
         f2:f5:08:3f:d2:6d:42:72:06:cc:13:4c:0f:1b:38:fe:af:b1:
         e2:ac:52:a5:02:e3:e2:ca:84:91:69:69:7f:95:66:24:d9:49:
         a8:70:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:43 2026 by rpki-client