This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
File:                     9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json)
Hash identifier:          0JsqN7xdLDxUOgvF0/jj2UxRJrp65O36gcK0KEGhxsc=
Subject key identifier:   81:90:3F:A5:1C:8E:A4:17:EC:63:A5:EE:47:9F:50:FF:B9:B2:77:11
Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5
Certificate issuer:       /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
Certificate serial:       0CCF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
Manifest number:          0CC5
Signing time:             Sat 24 Jan 2026 17:54:07 +0000
Manifest this update:     Sat 24 Jan 2026 17:54:06 +0000
Manifest next update:     Sat 31 Jan 2026 17:54:06 +0000
Files and hashes:         1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: /o3A6DIHFCJvWzozpbIbwKSDQZll9hY/3zi18OLc7fM=)
                          2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lPRimtAIP991qjg2zYQ9MB+u2MSznOVIg7X2f5y/SnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl
                          rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3279 (0xccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
        Validity
            Not Before: Jan 24 17:54:06 2026 GMT
            Not After : Jan 31 17:54:06 2026 GMT
        Subject: CN=6975073f-1c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:1d:67:a3:c4:eb:e6:ab:f3:1f:46:23:22:
                    a4:a2:7b:d1:a5:d5:b2:9b:d6:79:9f:f3:ff:7e:fe:
                    17:e4:c7:cd:24:cf:1d:11:d7:6b:5b:ae:bb:ad:a1:
                    4e:6d:f0:fe:9f:1f:95:e8:00:56:63:ea:b4:f1:07:
                    51:15:53:41:39:2e:85:a7:23:bb:96:54:e0:1a:00:
                    d7:ca:71:97:cb:ef:c2:8d:c9:10:42:b8:df:a2:54:
                    67:ae:df:cc:59:81:82:4d:9f:b3:11:dd:52:49:ba:
                    c0:8e:57:50:8f:c7:16:c0:cd:8e:ec:46:29:0a:ca:
                    df:cd:2d:a9:e7:f5:c8:11:4c:a2:68:55:b6:e8:49:
                    98:99:71:b2:7d:34:39:00:f9:46:f9:5f:6c:9c:58:
                    a5:00:c5:d2:13:97:2b:cd:96:18:0d:ab:2f:7d:23:
                    31:b1:08:a6:aa:24:55:59:06:06:40:79:c2:da:32:
                    04:bc:f1:0a:f1:70:87:f0:b9:43:3f:b4:34:43:45:
                    1a:27:44:bf:52:08:41:25:1e:da:69:e9:5c:d7:71:
                    c3:9f:c5:40:ed:9d:b0:9f:aa:16:5a:0b:bc:90:aa:
                    e5:98:02:c6:2e:43:ea:f7:0e:90:92:a5:c9:a4:4a:
                    3f:c3:3b:00:3c:17:6d:51:36:d0:84:ad:29:35:4a:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:90:3F:A5:1C:8E:A4:17:EC:63:A5:EE:47:9F:50:FF:B9:B2:77:11
            X509v3 Authority Key Identifier:
                keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:b6:bc:60:ba:84:5c:b6:8e:6a:f6:b4:57:b0:c5:19:14:
         16:f2:c0:dd:99:b9:38:42:aa:5c:b1:75:92:b3:74:be:40:31:
         88:4a:e3:70:79:68:04:3d:ab:c9:79:3b:3d:30:85:39:a3:d6:
         9d:a2:ae:0f:39:82:07:be:0f:f7:0d:c9:34:d7:2d:ca:09:dc:
         5e:e0:a0:91:9e:a3:58:8b:24:0a:22:6f:d7:1c:8e:35:77:72:
         13:a4:95:cc:a7:28:2b:4b:a1:a4:d7:21:f9:f4:76:16:0b:06:
         6a:06:01:d8:bb:83:01:d7:34:41:b0:62:6b:99:7f:60:9a:5c:
         24:f4:0f:17:8d:04:83:5a:6b:3b:15:9d:b1:a0:e9:53:29:f5:
         84:7e:58:02:4d:6e:79:67:d9:8a:39:e0:ac:dc:6e:8a:08:74:
         1f:c3:a0:7d:a1:08:58:84:12:81:d5:ba:e4:57:55:cc:ba:19:
         93:3f:ba:a0:0c:2a:d6:00:59:fa:6a:8b:c0:86:3a:cc:bb:ba:
         f6:86:e8:dc:74:a0:18:db:dc:6c:c0:85:a6:5c:45:35:c0:1b:
         b3:b1:3e:3c:ac:24:83:90:d0:57:1d:22:31:09:84:1f:55:6b:
         b3:75:c8:76:f7:00:74:96:bc:e4:1e:dd:d8:e5:8b:8c:16:d4:
         e3:e8:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:06 2026 by rpki-client