This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File:                     l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier:          dUml1CXT/NyLQ7rXPBreZuwE9Nhp5vJnF4oBRrZzzi0=
Subject key identifier:   46:61:E9:2C:DB:1D:F6:2D:EF:FF:B0:DB:7D:0C:FB:F2:A3:7B:78:36
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer:       /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number:          0182
Signing time:             Sun 25 Jan 2026 02:56:29 +0000
Manifest this update:     Sun 25 Jan 2026 02:56:28 +0000
Manifest next update:     Sun 01 Feb 2026 02:56:28 +0000
Files and hashes:         1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: 33Ksy8K74a3uXVbMRmbBuI6dLrdo+xl94UZz5EWfH5Y=)
                          2: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: sWbEBie3r4Rs9tqZdxaTO4p/g0MLaIAVIR769Fluhr4=)
                          3: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: lgKxQZBfyyGJs2ybuFT3lxPMvRUJgCHgG0F2ANjIDdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
                          rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
        Validity
            Not Before: Jan 25 02:56:28 2026 GMT
            Not After : Feb  1 02:56:28 2026 GMT
        Subject: CN=6975865d-10bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:2a:b3:d1:cb:c5:68:2e:65:6a:4d:4c:bc:
                    fd:ac:7d:56:4f:e6:60:57:28:7c:35:f8:3e:db:70:
                    b6:d3:6c:ed:e6:c6:8a:ea:f0:72:06:1b:43:db:12:
                    58:1e:db:d2:12:7f:a8:95:2f:c4:2c:b4:c2:d6:b8:
                    2f:36:fa:d3:09:c9:8f:0c:05:e8:ff:4d:76:08:19:
                    b4:cc:ab:69:9f:c7:c3:82:87:25:18:90:af:26:50:
                    ea:3f:b3:79:97:f8:70:22:7a:31:ca:4a:3a:9c:a4:
                    bf:6e:42:7a:c8:bb:7b:b6:32:5d:11:d3:5f:14:72:
                    88:f2:53:ec:43:5d:e0:b2:5c:06:53:0d:1e:25:b3:
                    9e:fc:ce:71:71:c7:9e:fc:c4:6d:a0:2f:cc:69:2a:
                    02:75:4f:66:34:ad:91:08:2d:d4:b5:a9:5d:c0:c6:
                    ec:6e:c0:57:37:6d:cc:d9:95:eb:87:86:2e:c1:d8:
                    01:ce:42:e2:24:52:ef:60:6f:78:06:2b:d0:0c:68:
                    dd:df:36:d0:ee:ff:a7:8d:d7:88:a7:9c:f0:d9:25:
                    7c:43:87:33:07:92:a0:2b:c1:ed:59:e3:e0:4c:fe:
                    83:d3:8c:db:8b:8a:1d:93:3a:d4:d1:22:e3:da:bb:
                    e2:04:8f:32:23:1d:b7:99:69:36:1e:eb:9b:86:99:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:61:E9:2C:DB:1D:F6:2D:EF:FF:B0:DB:7D:0C:FB:F2:A3:7B:78:36
            X509v3 Authority Key Identifier:
                keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:36:b5:4d:15:5a:97:0c:a8:79:b5:3d:93:f2:d5:50:a1:57:
         6d:12:67:0b:f3:dc:81:fe:11:32:7a:8b:5c:e6:b2:0d:fe:5a:
         d5:84:17:b3:d3:6a:c3:de:43:62:6f:d2:d7:86:3d:6d:a3:a2:
         61:b4:0c:fc:e2:76:b0:e5:22:dc:59:08:81:c3:ef:a4:dc:fb:
         d4:6a:ab:c9:c2:e9:80:44:8e:20:5d:9b:7d:85:dc:4e:89:78:
         89:29:27:80:88:f3:90:ed:11:2b:9e:8b:f0:28:87:2a:44:bf:
         b7:c2:5b:ac:09:df:51:0b:73:0b:cd:1c:3f:9a:bd:fa:a1:0f:
         62:be:76:be:60:d8:30:96:db:9e:5c:42:e6:c3:b9:58:2c:ac:
         72:fd:58:38:80:42:24:66:d4:01:2b:d4:8f:11:d0:0a:e6:92:
         b1:af:4e:d9:d0:54:b9:0a:2b:9e:df:4f:09:f7:bb:ca:89:d6:
         b5:f8:1c:b6:d1:19:b5:8c:37:8d:c8:58:7e:db:13:6f:9c:d8:
         4a:ba:4f:64:ef:70:6c:35:20:4c:fd:ba:4e:aa:06:36:ea:e8:
         1f:54:a7:9d:c1:85:93:1f:4c:f6:4e:ea:cf:bb:db:db:e0:27:
         15:b5:f0:8b:63:2b:ec:bd:de:59:17:02:ae:62:99:d4:8b:93:
         24:88:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:38 2026 by rpki-client