This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
File:                     E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft (raw, json)
Hash identifier:          5UphpzaFUsKzAFrHu6hgoI3I0oNiJmR5Pb4RmVsXTdU=
Subject key identifier:   E6:B5:47:B0:20:17:46:97:C6:37:8A:27:B0:33:EF:D9:F6:B0:5C:E3
Authority key identifier: 13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
Certificate issuer:       /CN=A91A68C0/serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 07:08:45 +0000
Manifest this update:     Sun 25 Jan 2026 07:08:45 +0000
Manifest next update:     Sun 01 Feb 2026 07:08:45 +0000
Files and hashes:         1: E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl (hash: hT2WcMKhk34No0/WifS/vjwpjDaM9GO6XHvOtHwxGA4=)
                          2: 53134072F0E511F09202A4D23F6F56BC.roa (hash: P721aHxkdI9YJXFMOAQ3Ec2boWDG+y2zUzAur2uL1k0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl
                          rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A68C0, serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
        Validity
            Not Before: Jan 25 07:08:45 2026 GMT
            Not After : Feb  1 07:08:45 2026 GMT
        Subject: CN=6975c17d-03e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:67:cb:ff:39:f1:ca:3d:94:cc:8d:08:dc:
                    aa:6d:4d:2e:81:0b:44:95:4a:e8:af:c0:4c:51:db:
                    bc:78:23:79:ef:6b:b4:66:5c:3e:4d:76:66:a5:0b:
                    2f:0e:f8:06:0a:2e:ee:05:3f:ba:98:28:c8:75:84:
                    a0:f4:5d:58:25:d3:28:83:86:a0:e6:0e:54:2a:10:
                    12:1c:96:08:e8:18:9b:89:20:65:08:e0:a9:16:bf:
                    6d:07:4e:2f:7f:e1:a1:6a:27:a2:85:67:89:4a:75:
                    df:45:94:aa:ec:c8:8d:24:c8:0d:42:5d:67:c6:68:
                    32:28:ca:47:1b:de:48:2f:00:11:83:7d:d6:e3:87:
                    19:c5:a8:82:06:85:91:02:b3:e9:d1:b8:f1:86:d5:
                    9c:e2:08:d0:63:83:da:d3:2f:d9:5a:00:dc:c5:cf:
                    53:30:49:6f:77:19:0d:ac:c0:ef:22:6a:f5:0f:25:
                    54:0d:de:e5:41:7c:cd:f9:19:82:24:fe:d1:c3:be:
                    f8:d8:16:3c:86:6b:2d:b6:ca:04:db:49:4e:7e:b7:
                    c5:c7:59:21:1b:51:e9:de:59:da:40:cd:d1:62:7b:
                    81:95:fd:ac:23:73:c7:bf:1e:54:f8:06:5c:92:37:
                    5c:60:6c:1c:97:29:ec:ff:49:ed:c3:df:f2:38:c4:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:47:B0:20:17:46:97:C6:37:8A:27:B0:33:EF:D9:F6:B0:5C:E3
            X509v3 Authority Key Identifier:
                keyid:13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:db:b9:3f:7d:17:48:8f:9e:06:e9:bf:58:41:28:a9:f6:8f:
         e3:9e:8a:69:d7:be:ef:c8:bb:7a:83:6c:79:3d:86:79:04:a5:
         62:73:5b:e4:b5:70:65:b9:37:a9:80:6f:2a:37:d5:9d:f6:65:
         f7:60:a7:4b:db:ef:d1:77:a8:04:21:bb:b6:e2:21:e8:eb:d0:
         0b:b7:3d:a7:c1:54:b0:32:53:10:2c:61:c6:c2:f5:07:78:16:
         92:ac:87:b9:83:4d:0a:8d:3d:1d:54:6d:19:1c:fa:48:e7:cb:
         f3:4e:44:db:bb:62:d3:2d:6a:05:f4:c6:8f:21:a6:47:27:84:
         37:c3:36:37:84:e5:98:44:84:3f:27:d0:04:2e:f0:be:5f:98:
         12:e6:77:e7:d1:1c:41:08:93:36:34:29:e9:62:92:d3:0a:7b:
         c9:d9:95:f1:72:95:32:78:6c:38:19:9d:de:3d:ab:32:3b:2f:
         79:f0:4b:66:4b:4d:e7:2e:69:dd:83:ea:c9:cb:4e:08:89:c5:
         a4:fb:8a:1d:ca:1c:6b:53:7f:04:94:e9:9b:22:14:56:d5:bb:
         02:c1:2a:14:d2:cd:bd:f0:1c:48:2c:1e:bf:51:b9:56:52:c5:
         df:8d:7e:f7:96:f1:00:15:2f:77:42:6a:f5:06:28:64:0f:4f:
         fb:a7:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:13 2026 by rpki-client