This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File:                     9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier:          YDE3ilbgtONj0nROHAxhybhFPG18JRboXiRF0kKtd80=
Subject key identifier:   01:C1:B2:8D:C5:9B:6B:87:52:63:84:2B:ED:50:CD:FF:68:73:6D:8B
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer:       /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial:       07C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number:          07BC
Signing time:             Sat 24 Jan 2026 20:42:59 +0000
Manifest this update:     Sat 24 Jan 2026 20:42:59 +0000
Manifest next update:     Sat 31 Jan 2026 20:42:59 +0000
Files and hashes:         1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: aeJ0ZEJLSDDaAJSmU+dnmEFwW3JVssDNx3lSNtH3l5w=)
                          2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: Oj9FhDR2K8lUe60n7u+qOlovqsf3jgizM0Z5FPXWMH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
                          rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986 (0x7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
        Validity
            Not Before: Jan 24 20:42:59 2026 GMT
            Not After : Jan 31 20:42:59 2026 GMT
        Subject: CN=69752ed3-ffcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:83:38:e7:d9:c8:34:b6:de:81:4d:66:7a:d6:
                    2c:34:f5:d1:3a:4c:8a:d3:48:28:15:63:c2:db:4c:
                    af:f9:85:eb:3a:9b:cc:4c:fa:6b:1f:b8:8d:62:48:
                    cb:7e:7b:d1:ae:b8:cc:5d:32:4a:ec:34:3a:e2:ab:
                    98:0b:79:c3:69:2a:28:6e:13:c1:06:7a:d5:2a:f3:
                    9a:b0:06:2e:89:59:23:b5:f2:84:6f:0b:d3:01:d1:
                    5c:6a:02:e3:8b:c2:7b:9a:47:e2:2c:a2:d2:87:18:
                    b2:c3:c7:6b:16:5b:db:c4:46:d1:55:83:f4:4d:94:
                    14:49:61:c0:3f:e2:37:63:33:f6:a6:7d:21:9f:e9:
                    24:93:22:87:7f:3f:59:3c:ad:85:2f:24:88:38:80:
                    af:19:12:f6:43:8d:a4:1e:ce:c5:89:93:ac:42:4a:
                    95:56:57:dc:45:90:46:d7:b4:a1:31:85:bd:40:0f:
                    2f:26:55:29:e3:1e:b9:c6:7d:09:84:88:3e:b2:2c:
                    b6:0e:cb:ba:ce:2f:92:28:c1:88:90:6b:f6:de:6f:
                    4d:a1:ed:34:54:47:23:69:31:29:64:ee:dd:e0:19:
                    29:69:33:86:fa:4d:bc:c3:26:cd:63:5c:3e:80:19:
                    95:06:63:3a:ce:93:52:d6:f8:17:81:dc:34:72:07:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C1:B2:8D:C5:9B:6B:87:52:63:84:2B:ED:50:CD:FF:68:73:6D:8B
            X509v3 Authority Key Identifier:
                keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:cb:04:99:79:03:fb:cb:78:b7:db:38:3c:c5:f9:41:55:03:
         72:9f:60:c1:23:dc:04:2c:01:fc:ce:8f:fb:92:40:f3:e8:18:
         4c:fd:fc:62:9e:23:f0:df:8b:27:f3:57:e2:17:a2:bc:87:9b:
         80:f5:d9:4c:21:57:2e:94:09:12:65:d3:16:dd:70:9b:23:ae:
         53:34:b6:24:45:7c:ad:3d:a5:43:9d:1e:a1:81:e7:8f:5b:a4:
         10:bf:07:dd:ba:6d:44:cb:04:22:fc:1c:c6:04:41:48:4c:77:
         97:c2:ff:84:3b:d4:bd:b8:4b:13:3e:c7:da:fd:93:50:ea:9d:
         a9:fa:65:a8:5e:1b:98:78:31:4c:34:41:ea:d6:3e:82:45:d4:
         3f:84:1f:19:88:95:d8:6e:00:25:a1:2f:d3:ed:3b:f9:80:f4:
         5a:b3:96:50:e8:05:5c:b7:5b:d5:83:51:7c:e3:b8:5d:1b:c4:
         89:35:2d:06:38:65:6e:5b:64:5b:40:37:62:bb:50:e1:93:2a:
         73:10:95:d3:f3:43:11:04:61:6a:60:84:b8:8a:53:3a:a5:96:
         84:45:73:09:4d:ee:3a:b9:11:19:6f:d0:77:e6:47:da:7d:d9:
         57:55:7d:e0:72:73:b5:d3:0a:e2:01:16:f6:b8:78:38:d6:1a:
         fe:dc:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:23:18 2026 by rpki-client