This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
File:                     s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json)
Hash identifier:          EL1uD/1v5D0OLJ15PzBhDr/cdGYyDQXL1E6MMh3TDiQ=
Subject key identifier:   F1:8F:84:A0:77:37:0D:3E:C8:00:F4:5F:CF:48:5A:58:35:E9:79:96
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Certificate issuer:       /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial:       08CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
Manifest number:          1B01
Signing time:             Sat 24 Jan 2026 16:50:30 +0000
Manifest this update:     Sat 24 Jan 2026 16:50:29 +0000
Manifest next update:     Sat 31 Jan 2026 16:50:29 +0000
Files and hashes:         1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: V91ytvYUwzv7v2r3ZnR/gn3cnS1tqutkg/ekQJRowTM=)
                          2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
                          rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2251 (0x8cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
        Validity
            Not Before: Jan 24 16:50:29 2026 GMT
            Not After : Jan 31 16:50:29 2026 GMT
        Subject: CN=6974f856-16aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:7d:9b:9a:a0:07:1a:f8:fd:be:62:22:ea:
                    80:1d:a0:6e:1d:b4:0d:29:48:b9:0f:a4:d1:38:25:
                    bd:b2:3e:3c:15:44:d4:1f:87:3f:bf:dc:1a:14:7d:
                    ac:73:30:0a:ba:10:ac:29:17:74:fa:6a:df:55:6d:
                    02:f9:d3:47:90:22:cb:1e:30:f0:36:ba:50:2b:1b:
                    09:9a:82:ca:c1:39:9d:24:85:d6:12:51:ed:86:84:
                    89:1a:34:17:3a:3b:3f:55:40:0d:9d:ab:6b:d3:01:
                    ce:d8:0c:37:99:1c:0e:62:0c:50:62:55:3f:f7:71:
                    09:78:2e:f5:8b:8d:aa:5d:11:6f:fd:32:f7:7a:bc:
                    8f:e8:2d:e9:72:4e:ba:57:83:c3:4b:1d:8d:27:f8:
                    4c:5f:f9:e6:8a:8d:a7:68:0b:01:63:ea:1e:f3:9f:
                    fa:c9:39:3a:ce:05:d8:7a:3d:e6:aa:3a:56:f1:f9:
                    6f:27:c0:9b:8c:81:cc:af:2a:fa:4c:be:dc:21:9f:
                    ad:1a:43:cc:e9:80:d3:01:57:2e:20:2b:3b:2b:5e:
                    ba:a0:94:b4:e0:5f:27:97:dd:c8:7d:34:28:c5:d3:
                    c2:03:a0:d3:7c:b5:29:d5:04:af:3e:db:7e:fd:aa:
                    25:6e:3e:28:e0:33:bb:f4:eb:f9:37:09:bf:b6:be:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8F:84:A0:77:37:0D:3E:C8:00:F4:5F:CF:48:5A:58:35:E9:79:96
            X509v3 Authority Key Identifier:
                keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2d:64:f0:a2:2a:73:56:aa:ca:83:be:ca:ea:9b:10:b8:5c:
         9c:b2:e2:e5:6c:48:89:13:45:a3:06:57:1e:53:43:b1:33:7c:
         cb:6b:f1:c2:b8:10:18:94:d8:8c:86:62:7c:91:44:a9:7d:2a:
         06:81:30:9a:b4:75:20:bf:11:e9:8b:0b:e8:77:b9:1a:ea:ea:
         f5:4f:5c:a1:98:72:7e:81:c2:82:d0:ab:a2:8e:3e:f5:f3:09:
         2c:7d:c6:af:e1:75:e8:ac:97:f0:d0:94:74:02:9e:33:e3:f1:
         f2:00:5d:0d:fa:b6:f3:c0:50:20:a4:6f:23:66:2b:24:b8:33:
         35:bb:07:ad:21:94:9b:06:ea:1a:e1:7e:91:48:5a:ff:9a:b8:
         8e:6d:f0:15:c2:d2:9f:f2:29:99:74:ae:0f:4c:55:37:5f:7c:
         78:89:6b:05:12:67:06:55:c0:33:88:ca:28:82:ed:5d:f8:7e:
         75:8c:ce:19:27:6b:00:5c:32:d3:19:f2:90:32:a4:f8:7f:66:
         47:bd:45:db:80:a4:fe:92:30:26:62:e4:32:23:a9:52:5b:e1:
         f4:ca:d0:6e:8e:9d:35:c4:80:2e:f9:9a:0a:d5:e0:16:7d:d6:
         c3:8c:62:ef:ff:b8:0c:2c:b0:87:6e:20:34:ae:5a:f2:4b:7d:
         9d:55:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:48 2026 by rpki-client