This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
File:                     A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json)
Hash identifier:          k2ATP7htoNaPxo7PwZWZlyV1WnSEzEwEb8zPw772xNo=
Subject key identifier:   28:A8:4F:30:D4:38:0E:79:B5:F8:CC:A7:8C:D2:90:52:D7:15:42:95
Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
Certificate issuer:       /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Certificate serial:       0BBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
Manifest number:          0BB2
Signing time:             Sat 10 Jan 2026 18:30:17 +0000
Manifest this update:     Sat 10 Jan 2026 18:30:17 +0000
Manifest next update:     Sat 17 Jan 2026 18:30:17 +0000
Files and hashes:         1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: /NDldV4O4BqG+hGGAYPLYMSX63EaGAFIJz2FS+IAcyk=)
                          2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl
                          rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3002 (0xbba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
        Validity
            Not Before: Jan 10 18:30:17 2026 GMT
            Not After : Jan 17 18:30:17 2026 GMT
        Subject: CN=69629ab9-8b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:a3:8a:2a:7e:9a:5b:b3:de:85:32:40:27:
                    88:cc:66:ed:53:6d:8c:37:37:72:1d:c1:f3:9e:2b:
                    99:51:2e:e2:af:aa:de:b6:46:67:d7:81:29:65:f9:
                    46:8e:09:5a:82:1f:7f:3c:29:b8:af:4e:96:b8:27:
                    2a:5d:67:30:de:1a:e4:f9:dc:be:d0:c0:f9:d8:89:
                    ac:57:bc:e1:b7:f1:d9:a1:23:85:e9:3b:e1:5a:58:
                    05:f0:b5:1e:f0:49:c8:a4:35:8c:3b:47:d0:a4:87:
                    3d:85:00:b9:ee:ea:d9:d5:aa:e8:c9:94:29:3f:dc:
                    58:db:e6:ca:9e:b1:3f:d2:58:57:9d:eb:f9:16:ac:
                    77:bf:d9:5a:35:74:ec:a0:86:8a:4c:b4:7d:84:1f:
                    d5:b2:23:5b:77:9c:10:38:71:dd:6a:1f:f8:79:1b:
                    22:90:94:07:ec:9d:ca:2e:47:14:00:3f:d5:12:9c:
                    00:61:8e:93:3a:9b:a9:17:36:d7:99:d4:21:87:29:
                    a7:96:34:a7:df:5d:fd:7a:d2:50:50:1b:3b:6b:9b:
                    30:31:99:9e:da:b1:8c:5a:7c:75:84:34:e0:94:fa:
                    d2:88:f9:28:e1:91:6a:79:6f:a2:a5:40:a0:78:7c:
                    05:3c:3b:bd:b7:e8:d6:c0:25:33:7d:e2:f7:2c:1f:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A8:4F:30:D4:38:0E:79:B5:F8:CC:A7:8C:D2:90:52:D7:15:42:95
            X509v3 Authority Key Identifier:
                keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:26:1e:16:f9:e2:49:00:3b:c9:d5:29:e4:17:c3:2d:10:15:
         0d:7b:cb:eb:45:ea:f3:4a:b9:e1:59:d7:9e:09:7f:47:0e:a3:
         f0:02:09:3a:ae:91:34:75:5e:fe:3b:30:f5:e0:c0:99:fb:54:
         b5:fe:87:a9:64:fd:a7:a6:9d:d0:f2:cf:3a:28:5b:3d:2e:c5:
         94:71:30:aa:79:47:bc:78:ba:03:e0:cf:c6:11:31:01:1d:b7:
         9b:df:27:9b:3f:4a:46:6a:1f:52:6f:2b:b9:76:df:bd:4f:42:
         8b:9d:c0:17:4e:34:c1:ca:e5:3c:80:c1:78:69:c2:94:08:a2:
         e4:b7:03:36:c5:e8:f2:ec:9e:b5:2c:cf:c5:32:2f:10:35:d1:
         bf:a2:f7:17:8b:11:bc:f2:43:a7:51:0c:e1:8d:94:1e:df:f8:
         8b:61:bb:79:93:91:27:50:68:a2:f5:9c:d9:11:7b:57:1e:40:
         00:4d:1f:ec:c6:b7:d3:56:30:79:d6:af:84:3a:05:28:87:aa:
         0a:31:49:68:e0:90:56:8d:61:38:a7:34:1e:36:48:6f:2e:cc:
         fb:84:02:8e:a6:ad:cf:f3:52:20:40:81:60:d9:7c:77:6d:23:
         d4:94:ff:36:a5:4e:53:49:cb:13:7a:04:67:fb:a5:a9:94:ad:
         b5:dc:a3:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3
RTcxOUY4OTAwHhcNMjYwMTEwMTgzMDE3WhcNMjYwMTE3MTgzMDE3WjAYMRYwFAYD
VQQDDA02OTYyOWFiOS04YjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5ijiip+mluz3oUyQCeIzGbtU22MNzdyHcHzniuZUS7ir6retkZn14EpZflG
jglagh9/PCm4r06WuCcqXWcw3hrk+dy+0MD52ImsV7zht/HZoSOF6TvhWlgF8LUe
8EnIpDWMO0fQpIc9hQC57urZ1aroyZQpP9xY2+bKnrE/0lhXnev5Fqx3v9laNXTs
oIaKTLR9hB/VsiNbd5wQOHHdah/4eRsikJQH7J3KLkcUAD/VEpwAYY6TOpupFzbX
mdQhhymnljSn3139etJQUBs7a5swMZme2rGMWnx1hDTglPrSiPko4ZFqeW+ipUCg
eHwFPDu9t+jWwCUzfeL3LB+G4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCioTzDU
OA55tfjMp4zSkFLXFUKVMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4
M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX
SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADJh4W+eJJADvJ1SnkF8MtEBUNe8vrRerzSrnhWdeeCX9HDqPwAgk6
rpE0dV7+OzD14MCZ+1S1/oepZP2npp3Q8s86KFs9LsWUcTCqeUe8eLoD4M/GETEB
Hbeb3yebP0pGah9Sbyu5dt+9T0KLncAXTjTByuU8gMF4acKUCKLktwM2xejy7J61
LM/FMi8QNdG/ovcXixG88kOnUQzhjZQe3/iLYbt5k5EnUGii9ZzZEXtXHkAATR/s
xrfTVjB51q+EOgUoh6oKMUlo4JBWjWE4pzQeNkhvLsz7hAKOpq3P81IgQIFg2Xx3
bSPUlP82pU5TScsTegRn+6WplK213KOH
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:37:30 2026 by rpki-client