This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
File:                     9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json)
Hash identifier:          /1irqTjcZaKms+oJFvn8ev4aS8DOrS0KYuCiUofc8+I=
Subject key identifier:   CF:64:3C:88:75:E0:16:41:52:D7:98:D7:A4:3E:93:81:9C:87:58:81
Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
Certificate issuer:       /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
Manifest number:          01A9
Signing time:             Sun 25 Jan 2026 02:32:59 +0000
Manifest this update:     Sun 25 Jan 2026 02:32:58 +0000
Manifest next update:     Sun 01 Feb 2026 02:32:58 +0000
Files and hashes:         1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: 9DSUARrgGvAqkT8p2lWnkED7pSSBJNocqUkGst8v6O0=)
                          2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: 0EXIo+3jT2LrdvdE+EYM/ALiqqQUvx4lMi+70Kb3xlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
        Validity
            Not Before: Jan 25 02:32:58 2026 GMT
            Not After : Feb  1 02:32:58 2026 GMT
        Subject: CN=697580db-2577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:9d:4d:34:48:12:24:a7:58:0b:aa:61:0a:
                    e9:63:c6:11:28:3b:e7:1b:2c:36:d3:18:01:8c:c1:
                    af:c0:a7:33:6a:91:12:04:f8:51:24:19:c3:07:0e:
                    f5:a9:f1:c5:16:a1:78:eb:5e:78:9c:8f:e9:79:3d:
                    9f:d7:f7:1f:33:e9:91:f9:d1:76:a3:1d:2e:c6:dd:
                    71:be:be:ac:42:f3:3e:f8:6f:a3:01:c2:fe:2e:a9:
                    5c:50:b7:8e:34:0c:a9:a9:b7:01:22:2f:d0:e2:09:
                    fa:9c:c5:01:59:76:53:8c:89:11:4b:a4:31:6d:7b:
                    1b:e4:c3:fc:ff:48:7e:a1:62:dc:3d:09:2a:d2:97:
                    53:eb:e6:7d:b6:9c:87:8c:cc:94:1e:85:8d:79:da:
                    cd:b6:c1:f6:19:68:ca:6f:25:3a:c8:a8:e2:15:63:
                    3f:fa:20:30:a8:32:56:1f:01:14:e2:99:78:e7:dc:
                    e3:e8:28:1d:0d:54:9b:2d:ea:c4:b4:60:17:de:80:
                    42:86:ff:ff:c2:4c:03:56:f7:15:7f:7d:64:9b:a3:
                    cf:7f:53:1b:12:17:90:41:13:e8:ab:4b:c6:2c:07:
                    16:19:16:8c:a1:39:0a:74:ee:67:ae:5e:73:87:c8:
                    87:9f:54:06:0a:b8:63:b0:a8:63:05:ec:2e:5a:be:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:3C:88:75:E0:16:41:52:D7:98:D7:A4:3E:93:81:9C:87:58:81
            X509v3 Authority Key Identifier:
                keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ff:29:c0:b8:4d:2c:0f:d9:cc:81:90:2f:8c:cf:9a:97:3a:
         6e:c0:4d:98:5c:89:0a:45:ba:78:49:9a:63:c7:45:a3:ee:1c:
         72:b2:2a:bf:a7:ae:4c:0c:3f:66:db:d8:fc:f1:e7:c2:ea:19:
         6d:c0:2a:8b:20:25:ac:0d:2b:b7:0e:ff:eb:3c:a2:53:f9:2b:
         6e:10:f7:3d:9d:74:08:0c:ef:fa:9f:eb:5d:50:37:23:21:fc:
         c6:18:6c:2b:b7:ff:30:2a:a6:50:2e:af:c5:31:57:e2:67:04:
         1d:ef:5f:ad:61:82:8d:17:a9:9e:29:f0:fd:55:46:63:65:23:
         60:57:86:11:a4:18:ac:00:6c:28:8a:52:36:c7:40:a1:37:9e:
         7b:e3:06:c2:b9:cf:df:07:b5:24:6b:af:9f:6a:a6:b7:c1:f2:
         b6:a4:35:92:79:ad:6f:4b:59:60:26:99:78:9a:ab:46:22:9c:
         dc:11:40:4e:6d:0c:8f:9e:49:c0:e0:7a:39:86:aa:b5:a5:b7:
         4c:cc:21:c7:4f:55:29:7e:14:30:69:df:2b:73:8e:33:80:77:
         02:42:07:2c:09:90:8e:69:cb:cc:2a:35:44:5b:27:63:97:ff:
         02:a9:43:32:27:21:7b:3d:75:37:41:56:4b:eb:21:3f:e0:88:
         17:40:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:02:47 2026 by rpki-client