This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File:                     SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier:          6AVQC9X87HHQ/QPiqwjDQKBoearYS+k8yWTqSi68eOw=
Subject key identifier:   5E:3E:C8:8D:BC:8C:16:87:27:A4:54:C9:7D:34:4E:7C:89:A1:55:F5
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer:       /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number:          02
Signing time:             Thu 22 Jan 2026 15:37:00 +0000
Manifest this update:     Thu 22 Jan 2026 15:37:00 +0000
Manifest next update:     Thu 29 Jan 2026 15:37:00 +0000
Files and hashes:         1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: aJsBjtqE12XhC1xWekhtKBP6Bykz/iivU3RsSskWmt8=)
                          2: 29901346F7A811F0A1A77FC5556F56BC.roa (hash: Hc57QldmWsFbEIDgDqZpoiZGwCTKoGFsC8oPsZee7C0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Jan 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
        Validity
            Not Before: Jan 22 15:37:00 2026 GMT
            Not After : Jan 29 15:37:00 2026 GMT
        Subject: CN=6972441c-11a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:ae:8b:88:5e:8c:40:25:11:50:b4:96:07:
                    ef:e5:91:02:eb:96:5b:45:9c:9d:7b:0d:70:ec:86:
                    74:56:97:7f:a0:f8:57:14:1f:94:ec:e8:44:77:a1:
                    01:16:8e:8b:10:c2:f3:e1:a2:2e:92:82:4b:dd:48:
                    61:6a:54:85:30:88:c8:b6:62:38:e8:2d:01:35:8b:
                    69:fc:c4:e7:d1:f2:c3:91:42:bf:e2:06:c9:b0:08:
                    b6:49:2a:1a:dd:a8:d6:9c:ff:ed:31:14:32:45:43:
                    56:82:d3:27:b6:3d:9a:d7:ae:24:60:ba:90:6c:3c:
                    f2:b7:bd:70:d5:86:f2:35:5f:32:3a:35:b3:bf:33:
                    5c:e0:43:3d:aa:be:d6:75:df:a2:92:b4:29:49:3e:
                    bf:49:0c:66:db:53:70:42:44:e8:15:b2:ff:cd:27:
                    54:28:4f:ab:51:4f:fc:72:77:a0:d3:72:5b:48:c5:
                    dd:93:b1:04:94:ee:1b:b4:c5:04:01:63:4a:78:8b:
                    70:ae:f9:2d:80:f5:1d:1a:6e:e4:1e:06:8c:18:7b:
                    85:67:1d:f2:07:cd:6e:44:41:cd:00:e8:4f:c6:72:
                    19:7b:03:b2:b7:91:ad:5c:a4:a7:fb:a8:ec:d1:84:
                    8a:09:fa:34:54:57:f1:45:b9:a7:aa:30:c8:dd:f6:
                    bb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3E:C8:8D:BC:8C:16:87:27:A4:54:C9:7D:34:4E:7C:89:A1:55:F5
            X509v3 Authority Key Identifier:
                keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:59:cd:e3:3a:30:2c:a5:87:9a:7b:ee:6a:78:25:fe:5b:
         a5:5f:54:92:83:cd:a7:b3:8b:1e:c0:00:6b:83:e4:74:38:0f:
         01:9c:73:c9:f3:f5:4f:59:94:89:1a:79:4e:20:3e:48:52:9b:
         39:52:95:74:eb:15:aa:1c:d0:01:18:28:db:72:2c:7d:7e:11:
         3e:c6:17:2d:a2:7d:49:a4:1c:87:71:aa:0e:13:b3:4d:35:f9:
         8f:22:d6:8e:0f:e7:6f:11:ac:b4:86:b8:7c:f2:5f:f1:94:86:
         f9:56:db:df:56:3b:6f:dd:d6:c4:dc:68:2a:54:ee:fe:c4:eb:
         a8:b7:25:b7:b0:8a:50:e0:a8:02:d6:80:46:3a:d3:d4:d9:40:
         84:7f:3b:04:13:47:18:b1:52:a4:ab:06:79:96:ab:5b:f6:6b:
         d3:1a:58:1d:64:21:7f:4a:3c:82:d5:ab:51:55:a7:55:d6:08:
         d1:7b:20:0c:7f:83:2a:97:9b:42:97:2b:16:1d:d3:6b:64:59:
         7e:01:de:6c:5a:7b:fa:4e:26:74:bf:21:43:ae:60:13:8a:be:
         4d:f4:27:73:40:63:c7:1c:04:fb:80:d2:a2:4a:d1:f6:79:1a:
         45:39:13:90:d7:d0:e4:93:bd:73:64:89:a2:6a:65:25:16:91:
         28:88:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:28 2026 by rpki-client