This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File:                     SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier:          XXybYDarKQXFfIcVkvB7N0rPOlomcEGbY7gSzXw+IJw=
Subject key identifier:   D4:41:13:A3:01:32:33:D8:FB:5D:B0:8E:E7:14:FF:A8:28:7D:09:D1
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer:       /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial:       0820
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number:          0817
Signing time:             Sat 24 Jan 2026 20:22:15 +0000
Manifest this update:     Sat 24 Jan 2026 20:22:14 +0000
Manifest next update:     Sat 31 Jan 2026 20:22:14 +0000
Files and hashes:         1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: 4Wzs6s+JPyBD+BtVVyNyEI/n2f0wZIlyBLj9ke1a2tM=)
                          2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
                          rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
        Validity
            Not Before: Jan 24 20:22:14 2026 GMT
            Not After : Jan 31 20:22:14 2026 GMT
        Subject: CN=697529f7-2c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:9b:ce:74:84:69:e6:4d:d7:47:67:00:dd:
                    d5:4a:61:ef:07:a3:3b:09:58:36:a4:af:88:79:7a:
                    7f:93:7c:c9:ff:4f:59:98:cb:46:c9:fc:e0:c5:e0:
                    d1:e0:db:5b:6b:7d:70:f7:d7:bd:56:e3:83:1b:d2:
                    83:84:94:68:2e:e9:5d:8a:61:65:57:0c:f7:c9:8d:
                    35:19:0f:76:f0:26:3a:6e:81:76:8d:c9:7c:d6:c0:
                    c3:96:73:da:38:78:e8:92:e0:6a:84:30:da:27:75:
                    b2:0f:de:2b:8b:3a:e1:0c:ad:ca:2f:b7:c7:b6:56:
                    74:9e:fb:57:a9:17:f7:e2:00:ce:15:a4:19:72:cd:
                    68:93:d7:bc:3f:52:70:96:28:67:55:3a:bf:39:cb:
                    73:3a:ac:8c:2b:bb:c4:89:bc:a1:c9:bd:36:5c:ff:
                    84:e6:0c:61:28:a2:f0:f3:be:60:20:7d:ac:0c:3f:
                    7c:d9:6e:51:ec:b3:ba:65:43:46:89:2b:d7:b3:b7:
                    ff:f3:93:44:fe:de:20:50:ee:74:d3:99:dc:4b:c5:
                    74:fb:30:d4:ea:c7:ae:33:08:75:b7:c0:9a:26:6c:
                    95:05:53:97:3b:1b:1f:19:86:12:d9:6b:ef:37:5b:
                    6f:20:f5:f3:20:13:92:7c:c9:49:7a:30:43:5b:23:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:13:A3:01:32:33:D8:FB:5D:B0:8E:E7:14:FF:A8:28:7D:09:D1
            X509v3 Authority Key Identifier:
                keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:5f:f7:8f:88:7e:16:50:22:bd:6d:2f:47:7e:04:cd:81:
         ee:be:b2:75:b9:ad:d0:72:69:0d:09:a1:d2:c7:f4:f4:ea:a2:
         66:f1:cc:6f:67:ec:e8:56:bd:9e:33:4c:f3:30:9a:67:fa:f9:
         b6:2d:a7:8c:36:81:40:f4:c1:1a:5b:a5:7f:8c:ea:28:87:9c:
         0f:12:63:7d:39:4c:99:dc:cd:15:71:d8:3d:6f:32:19:51:0e:
         c5:8e:eb:03:53:19:a9:e3:03:08:8f:ef:6c:9b:4c:72:b4:2f:
         3b:b7:ea:58:4f:ec:c9:4a:58:b1:ff:12:93:48:4f:59:72:6f:
         48:61:10:82:77:d3:6a:c9:ed:de:c0:9f:a4:47:61:a2:ce:14:
         33:8a:1a:0f:de:e4:c9:df:20:8e:12:96:b9:d5:12:66:50:c1:
         7a:f8:c3:52:05:3c:80:87:97:84:83:43:26:9e:c2:d3:7e:f8:
         80:61:79:5b:c6:f5:dd:35:21:55:95:cd:2c:21:e4:b3:bd:ff:
         76:87:7e:2e:5e:6d:90:31:3f:e0:3d:a8:b9:36:02:76:6d:58:
         86:ee:78:56:dc:9e:b5:e9:eb:b6:ea:92:d2:95:2c:94:88:84:
         a3:91:70:91:c8:bf:72:86:9b:86:d2:84:8f:1a:69:9c:54:67:
         05:2f:13:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5
RjIwOUY0MUUwHhcNMjYwMTI0MjAyMjE0WhcNMjYwMTMxMjAyMjE0WjAYMRYwFAYD
VQQDDA02OTc1MjlmNy0yYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApLubznSEaeZN10dnAN3VSmHvB6M7CVg2pK+IeXp/k3zJ/09ZmMtGyfzgxeDR
4Ntba31w99e9VuODG9KDhJRoLuldimFlVwz3yY01GQ928CY6boF2jcl81sDDlnPa
OHjokuBqhDDaJ3WyD94rizrhDK3KL7fHtlZ0nvtXqRf34gDOFaQZcs1ok9e8P1Jw
lihnVTq/OctzOqyMK7vEibyhyb02XP+E5gxhKKLw875gIH2sDD982W5R7LO6ZUNG
iSvXs7f/85NE/t4gUO5005ncS8V0+zDU6seuMwh1t8CaJmyVBVOXOxsfGYYS2Wvv
N1tvIPXzIBOSfMlJejBDWyMvJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRBE6MB
MjPY+12wjucU/6gofQnRMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4
NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD
Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAr4l/3j4h+FlAivW0vR34EzYHuvrJ1ua3QcmkNCaHSx/T06qJm8cxv
Z+zoVr2eM0zzMJpn+vm2LaeMNoFA9MEaW6V/jOooh5wPEmN9OUyZ3M0Vcdg9bzIZ
UQ7FjusDUxmp4wMIj+9sm0xytC87t+pYT+zJSlix/xKTSE9Zcm9IYRCCd9Nqye3e
wJ+kR2GizhQzihoP3uTJ3yCOEpa51RJmUMF6+MNSBTyAh5eEg0MmnsLTfviAYXlb
xvXdNSFVlc0sIeSzvf92h34uXm2QMT/gPai5NgJ2bViG7nhW3J616eu26pLSlSyU
iISjkXCRyL9yhpuG0oSPGmmcVGcFLxNk
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:24 2026 by rpki-client