This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
File:                     SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json)
Hash identifier:          Cc5js2VDNrNaQDF3jWD6yFL919VAXl4pFv8rBr2N1BY=
Subject key identifier:   FB:A2:B8:F0:E7:C6:19:4E:F3:49:62:B3:E5:17:27:1D:8E:DD:B6:B0
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Certificate issuer:       /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
Manifest number:          01C0
Signing time:             Sun 11 Jan 2026 02:48:53 +0000
Manifest this update:     Sun 11 Jan 2026 02:48:53 +0000
Manifest next update:     Sun 18 Jan 2026 02:48:53 +0000
Files and hashes:         1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: GiwR7oZCj6ZlHNUvmOeoNSC2plsAwAGzcfA3CRYdg2I=)
                          2: C93C3BD2BF1211F0825A8B67C4F9AE02.roa (hash: HtRntKRfaXLAooX4kFwapJHzhkv5FlOJ2XUK109fP9o=)
                          3: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: tV1N8F94Z6M1hB65b9pOLkNRnS2hcjPHIFAbKHyneRk=)
                          4: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: vcu54xel+Jd2PL9HStWqqILbr2WjpCxq0YzZdKgizr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
                          rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 02:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
        Validity
            Not Before: Jan 11 02:48:53 2026 GMT
            Not After : Jan 18 02:48:53 2026 GMT
        Subject: CN=69630f95-3135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:4f:5d:cf:71:5d:31:32:56:28:d3:27:11:
                    57:6b:19:ec:53:59:bf:56:76:e0:2c:67:78:5d:d0:
                    b0:a5:03:28:a6:bf:82:4a:81:68:74:df:8f:a9:71:
                    3d:70:1a:4b:a5:44:e5:77:9b:7b:e6:5f:27:21:59:
                    dc:a9:dc:73:5b:31:b9:12:32:67:d8:08:12:ce:7e:
                    98:cc:46:58:79:13:07:35:3e:be:93:1c:50:f4:0b:
                    0d:72:94:48:a0:50:3c:ae:b0:7d:ad:c7:c3:56:1d:
                    d3:54:41:58:13:90:e7:2c:8f:de:6d:1c:b0:c0:be:
                    e1:7c:76:de:0e:3f:7e:15:c4:9c:60:b4:d1:78:d3:
                    03:41:af:ea:ff:d6:3b:fb:0c:79:5b:d6:dd:fb:13:
                    5c:95:2b:9d:c4:90:57:9a:da:86:fc:8f:07:c0:cb:
                    09:7e:50:50:c7:d0:e3:8c:41:08:cd:61:71:6c:a9:
                    97:a1:2b:88:9e:42:40:48:54:5e:5f:85:f5:1c:3a:
                    26:9b:00:07:4a:f3:fc:c1:d7:43:dc:88:d2:ed:d1:
                    a1:7e:2a:38:fe:02:91:66:a5:c3:79:d4:07:c0:58:
                    8b:c2:81:f2:03:15:57:4c:0a:fd:4f:b4:b7:09:64:
                    74:63:c6:5b:59:a6:fe:27:28:0e:b0:c5:a1:c6:e9:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A2:B8:F0:E7:C6:19:4E:F3:49:62:B3:E5:17:27:1D:8E:DD:B6:B0
            X509v3 Authority Key Identifier:
                keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:55:6a:2a:c5:9d:8e:58:41:53:80:c0:6b:18:16:f9:ea:
         1c:2d:a7:b7:fe:c6:48:bb:a3:03:6c:85:19:da:b2:61:b8:98:
         3a:21:06:87:bc:ca:04:4e:bf:cb:ae:b5:5a:0c:dc:57:a6:63:
         8d:cb:82:20:11:fd:96:e4:07:7e:8c:8d:2f:1b:a2:72:a7:de:
         87:92:f7:32:1b:0c:60:60:bf:d8:aa:0d:3a:91:cb:44:75:05:
         ba:7d:f3:6b:e4:a7:0a:43:ee:67:9a:83:df:f5:3d:38:38:0d:
         95:40:03:15:0e:ae:b7:e1:a2:b0:93:dc:6b:7e:da:dc:00:46:
         ae:b3:93:e8:8a:4e:8e:81:fb:12:14:84:a0:26:35:73:f3:1c:
         c1:0c:13:79:19:72:39:b9:b7:31:65:24:d3:c7:49:d5:f8:87:
         f0:3c:44:e4:b3:0c:8c:51:55:26:d2:d8:12:58:c5:66:9f:3a:
         f5:a0:1d:ec:86:e8:af:6d:77:0b:ea:32:e4:a6:15:3f:c7:ff:
         d0:53:3b:41:e9:6f:e9:39:47:84:d1:04:c8:3c:8d:e3:0e:ca:
         c1:bf:94:1a:46:b1:38:df:2a:e3:32:6a:fb:95:cd:19:1b:4f:
         3e:ed:cb:19:8f:c5:d2:99:aa:f2:f2:52:3c:78:29:b4:b9:56:
         44:1b:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:43:33 2026 by rpki-client