This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
File:                     pK73BplO997sjIomg0NykQSEsbA.mft (raw, json)
Hash identifier:          Q5Kq+L5sipl4EO0gEoGKJunV/hdsDhW9ERsu0CQdQwo=
Subject key identifier:   92:3A:2A:2E:9B:F6:06:17:60:5A:5F:9F:60:5B:79:F1:0B:82:21:8F
Authority key identifier: A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0
Certificate issuer:       /CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
Manifest number:          0717
Signing time:             Sat 24 Jan 2026 21:12:35 +0000
Manifest this update:     Sat 24 Jan 2026 21:12:34 +0000
Manifest next update:     Sat 31 Jan 2026 21:12:34 +0000
Files and hashes:         1: pK73BplO997sjIomg0NykQSEsbA.crl (hash: jYuIZVMrbLgMewxz5bKu+sKcBwSDrqr/g0AgtPmhQ+o=)
                          2: 7568D85E731211EBAFF0B481C4F9AE02.roa (hash: 4hu+Ea1WW3aPEC6/j9KPgOfcmbDhbVy01ftALoJDrTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl
                          rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196412, serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
        Validity
            Not Before: Jan 24 21:12:34 2026 GMT
            Not After : Jan 31 21:12:34 2026 GMT
        Subject: CN=697535c3-2ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:05:46:da:10:4c:36:e8:1c:09:f8:a8:d6:
                    d3:3e:33:d8:9e:30:0c:b9:fa:4e:21:50:65:01:63:
                    a8:55:8f:16:2d:29:9e:eb:b0:10:35:9d:5e:b0:63:
                    3e:78:7b:78:28:fa:a6:d0:bc:9b:db:5c:04:2d:9d:
                    d1:3c:f4:70:36:6e:5e:f6:8a:e7:5b:1c:40:a8:03:
                    52:a9:5e:72:b0:9a:07:7c:ba:87:b5:ec:6f:7f:9b:
                    ff:f3:7d:08:79:39:c0:cd:31:83:ab:10:b7:ab:b2:
                    63:fb:20:bf:d7:46:f2:e9:36:2f:ba:e8:4e:2f:1b:
                    b4:e6:16:b1:73:50:53:2e:01:59:31:0d:df:08:eb:
                    9f:da:08:76:ec:bc:38:da:31:b6:65:eb:de:8a:1f:
                    71:0d:c9:ef:57:0c:00:42:ec:9c:cc:66:1d:36:cc:
                    9e:56:a1:78:b3:75:b5:10:24:25:58:34:ff:4b:1d:
                    4e:c1:15:b3:02:7e:dc:e2:93:95:6b:72:63:44:e3:
                    d5:b9:b6:8f:da:f1:be:d0:22:0c:f2:4e:a7:44:25:
                    5c:71:11:4c:f6:6a:5f:29:f2:45:fb:02:4d:bb:95:
                    75:54:5a:4e:5d:5b:17:57:2b:e6:19:dc:e9:f7:23:
                    79:c3:f4:fc:3c:cd:1b:c8:6f:45:47:18:73:1c:1c:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3A:2A:2E:9B:F6:06:17:60:5A:5F:9F:60:5B:79:F1:0B:82:21:8F
            X509v3 Authority Key Identifier:
                keyid:A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:48:31:03:76:92:f9:31:d7:60:1f:2d:9a:22:8d:b8:44:06:
         9d:11:04:a7:c5:a7:44:48:f3:a8:e8:f1:0a:e3:98:78:05:d6:
         d8:55:0b:f7:88:ad:ae:3d:70:56:85:c8:b3:4a:e7:6b:9f:3b:
         d2:66:74:56:b2:2b:8c:06:6e:c3:dc:5f:b7:f3:12:72:68:1e:
         11:20:5b:a0:4e:ca:6f:84:df:0f:ef:d6:58:2e:7e:e3:7f:22:
         bc:7c:43:68:5d:b3:5c:ea:f5:c5:f1:47:63:12:05:97:41:e6:
         d7:68:b0:20:cb:c0:2a:42:53:38:49:03:5b:5d:62:79:71:b2:
         bb:82:de:5b:15:c7:6b:a8:c6:04:a3:2f:45:2f:36:3e:b1:60:
         ba:cf:b3:b1:e9:0e:fe:13:89:66:96:4b:f2:2e:aa:6a:24:b8:
         15:cc:da:e7:84:28:f3:9c:d4:63:03:1b:79:55:17:b7:75:d3:
         7c:7c:5a:e5:0b:b7:70:8f:50:5a:77:09:4c:26:f8:40:07:50:
         24:d7:42:2a:e6:88:3c:12:21:86:8a:0b:e8:81:84:cf:8f:74:
         d0:b9:24:f0:25:2a:73:4b:42:7c:f0:3b:4d:47:31:fd:2a:04:
         3a:48:5f:f9:43:99:d4:b0:0c:f1:d4:62:17:1e:5a:73:54:f8:
         e5:f9:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:23 2026 by rpki-client