This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File:                     pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier:          ygtA5fQsawjBKrPr+/2SlQYcL/G2C+d1B89zWve+7+Q=
Subject key identifier:   5C:75:8E:5B:E2:C5:B8:4C:CB:99:BF:80:7C:88:5B:AE:A2:C4:F2:92
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer:       /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number:          EE
Signing time:             Sun 25 Jan 2026 04:35:58 +0000
Manifest this update:     Sun 25 Jan 2026 04:35:57 +0000
Manifest next update:     Sun 01 Feb 2026 04:35:57 +0000
Files and hashes:         1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: zfj4bgEOLsAPFQ8r4pZTU7cLhiYEAx4HUQKLYlPttL8=)
                          2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: GgkYKX0rvLLAl9jFjsCJGv7qCn12Qh8j9soV+v0r+iY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
                          rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
        Validity
            Not Before: Jan 25 04:35:57 2026 GMT
            Not After : Feb  1 04:35:57 2026 GMT
        Subject: CN=69759dae-1b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:c8:24:48:a1:96:c2:b3:c9:59:60:c4:0a:
                    40:57:12:3d:93:fd:c0:8d:ff:34:c9:3d:f6:a9:0d:
                    f7:41:f8:59:e0:0d:44:e9:60:01:09:fe:9a:8d:8a:
                    36:11:7f:ec:c7:40:ae:49:38:aa:1e:2c:46:6a:43:
                    84:28:78:b7:95:2d:29:db:e4:0a:a7:5e:80:6b:8c:
                    52:5e:67:c2:47:e8:34:0c:aa:cb:0f:67:55:94:a5:
                    20:bb:3e:62:ff:3b:57:4f:8d:4e:54:6f:56:61:b8:
                    91:4e:21:92:94:40:3b:78:35:1a:1a:c7:7d:3c:64:
                    dd:2a:b6:1c:35:cb:2e:e1:9b:32:3d:c8:cf:73:f1:
                    61:00:c3:77:02:61:fa:22:f4:00:77:8c:dd:5d:a1:
                    2c:4a:13:81:50:fc:79:26:79:85:42:50:54:33:df:
                    27:b6:3e:9e:24:86:e3:09:9d:40:f7:84:cc:31:2d:
                    4f:94:ae:41:d2:63:48:7f:ad:f8:ad:ef:ed:73:97:
                    ad:54:66:27:a7:ea:39:38:38:14:a0:64:e3:ac:5a:
                    61:32:e6:42:d2:50:2c:1b:23:1e:ba:41:a3:f9:d2:
                    08:de:20:33:60:56:29:f4:88:36:b4:9b:f9:4a:e8:
                    b5:39:42:dd:25:1d:1d:e1:6e:31:03:2c:2e:a3:fa:
                    c6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:75:8E:5B:E2:C5:B8:4C:CB:99:BF:80:7C:88:5B:AE:A2:C4:F2:92
            X509v3 Authority Key Identifier:
                keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:15:b1:f8:99:0b:b6:15:69:39:26:2a:a3:5c:31:af:dd:8a:
         43:d4:79:da:6c:16:44:b1:a3:e4:62:df:8e:99:dc:67:42:26:
         c3:bd:59:d6:d9:63:32:2e:8a:62:5e:5b:e4:17:5b:e8:2f:7c:
         01:5d:58:8f:85:45:a2:f1:8f:64:65:a3:79:b8:c7:d1:b5:42:
         29:ca:a7:d6:12:fe:fa:42:e1:60:f3:ca:b5:91:fc:56:25:14:
         91:5c:06:bd:b3:6d:0e:59:11:42:93:28:45:24:ee:b3:67:ca:
         de:6e:ef:7f:71:89:0b:69:f9:77:50:3c:99:86:47:a9:8b:8e:
         90:d8:49:6f:cf:6a:b2:cb:19:b4:70:e6:74:a7:f4:00:0c:73:
         e5:da:6d:67:5b:5a:9e:88:86:b1:7a:d5:8a:10:7c:ba:0e:88:
         56:0a:7e:87:da:4f:5a:6a:f5:ef:b9:3e:8c:ff:9b:b6:9e:02:
         b4:99:62:83:64:f2:21:1c:6b:fa:4c:e0:80:db:5a:6f:1c:42:
         e4:a5:b7:bb:b0:9d:4c:48:8b:f4:fd:7c:a3:55:ff:32:dd:6e:
         18:fb:e6:a6:c4:e0:18:69:2c:7e:01:6c:e4:cf:1c:ad:3c:f9:
         c3:a3:aa:c6:51:c1:39:52:61:5b:a8:d9:89:ea:20:95:f2:40:
         6d:da:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:24 2026 by rpki-client