This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File:                     MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier:          +g2QLoX3fLBkQDdoM5wWv50XzESrp7tStNa286WA3aI=
Subject key identifier:   18:E7:34:13:BF:C6:43:F3:07:F8:18:EE:50:8D:1A:92:CF:7D:9D:D6
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer:       /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number:          0B
Signing time:             Sun 25 Jan 2026 07:05:51 +0000
Manifest this update:     Sun 25 Jan 2026 07:05:51 +0000
Manifest next update:     Sun 01 Feb 2026 07:05:51 +0000
Files and hashes:         1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: YtDHN/ppXDse3GJLMT4M6Az1OvUWgGMoS6Z0JgSfYJk=)
                          2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: SGvplmYlhwKhnPRvbdKHRZTiyIgv3THw8GgCiwtHfIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
        Validity
            Not Before: Jan 25 07:05:51 2026 GMT
            Not After : Feb  1 07:05:51 2026 GMT
        Subject: CN=6975c0cf-55a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:68:95:bc:65:c7:9e:42:1b:46:d1:5d:43:
                    68:89:e5:f9:af:8d:73:e1:de:2b:39:fe:06:42:ca:
                    5c:33:d5:1f:e2:60:72:20:23:67:1d:6a:2d:95:6a:
                    94:f4:c4:30:32:5c:fc:76:ee:82:18:34:b0:80:77:
                    5d:10:12:a6:1f:d0:83:6e:1f:fd:ba:71:f5:4d:c8:
                    d8:61:22:9f:b4:63:71:81:2c:05:3d:b2:63:ac:9b:
                    fd:22:60:6f:a4:5e:52:6e:93:a4:a3:79:5e:10:51:
                    02:51:3c:c3:16:61:db:66:8d:68:46:6f:1f:93:8d:
                    b3:23:90:a7:6d:09:41:eb:8d:2c:12:a3:9f:31:3e:
                    01:4f:ba:6e:7b:cb:10:93:09:46:1a:c5:64:81:00:
                    64:22:24:03:67:9c:37:bc:80:61:d0:ad:89:6c:d3:
                    48:97:d7:35:19:fa:9a:5c:9f:67:6a:a4:c8:2a:ff:
                    b9:6f:99:52:0e:d9:fa:c5:6d:c9:a3:60:3b:bb:82:
                    62:4b:4a:78:ec:ba:ca:9b:b2:ce:8d:ee:36:3a:ac:
                    aa:c6:92:74:73:4b:ba:d0:dd:57:31:94:8b:af:b1:
                    09:82:b9:ee:1c:bd:36:54:a4:c6:b0:67:fe:51:04:
                    67:cb:83:00:0a:4a:4b:c4:04:ab:bc:83:76:8d:20:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:34:13:BF:C6:43:F3:07:F8:18:EE:50:8D:1A:92:CF:7D:9D:D6
            X509v3 Authority Key Identifier:
                keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5e:1b:bb:1b:4c:4d:45:2b:7b:a4:dc:7c:9b:56:bd:f0:79:
         4d:c6:fe:68:01:1d:ef:b4:f2:55:e6:73:64:99:fd:78:cb:14:
         d3:b7:ae:59:b5:a0:71:23:7a:08:b7:52:42:b8:30:21:f1:bb:
         b8:20:9c:80:34:29:fb:4d:ba:c7:70:28:67:05:bd:15:1f:84:
         5b:5f:ea:0a:59:76:6f:4a:e9:95:10:5a:a7:f2:23:af:4e:1d:
         08:7d:d5:b6:db:d4:f8:b8:eb:a3:24:4a:f1:29:5b:f2:40:bd:
         8f:03:4d:77:a2:cf:f4:15:32:54:d3:43:0a:80:ba:26:3b:05:
         68:34:64:84:44:d3:53:5d:a5:a8:80:62:be:e7:42:16:1f:44:
         65:8c:4a:50:58:01:e9:52:45:12:2f:cb:c2:9e:af:0c:5e:81:
         2b:9d:9b:28:f7:66:ba:89:53:75:4a:7e:51:6a:0f:0e:9d:8d:
         fe:8b:dc:81:8e:e7:90:0b:16:e0:9a:5d:05:6e:f8:e5:28:7e:
         8c:1b:91:63:2a:4d:a6:3a:07:3a:18:9c:2e:c3:64:3f:1a:78:
         e8:34:61:7f:ea:3d:eb:ff:a6:64:4c:8c:78:11:ff:5f:0d:c5:
         1e:7e:fd:c0:17:cf:25:5a:55:a2:01:e2:9d:2e:00:02:9b:9b:
         aa:8b:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:50 2026 by rpki-client