This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
File:                     U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json)
Hash identifier:          fINwV2x5EMPZlOKHvPBAh98zfPHCKbPX8epFY2n0A40=
Subject key identifier:   CB:75:B8:64:1B:A2:22:57:B7:2E:72:A4:BD:0C:52:4A:D2:A2:5A:05
Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
Certificate issuer:       /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Certificate serial:       051D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
Manifest number:          0515
Signing time:             Sat 10 Jan 2026 22:51:30 +0000
Manifest this update:     Sat 10 Jan 2026 22:51:30 +0000
Manifest next update:     Sat 17 Jan 2026 22:51:30 +0000
Files and hashes:         1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: 60FgWPCNK8oww3Nf6+nH58ygKiyudmFzoSdNJTtjFTs=)
                          2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: zUvIyZQWJmUN/whCAHbha9fHrVDz2p8tvRwoEjb9vCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl
                          rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 22:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130837, serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
        Validity
            Not Before: Jan 10 22:51:30 2026 GMT
            Not After : Jan 17 22:51:30 2026 GMT
        Subject: CN=6962d7f2-87c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:71:75:2f:6b:0c:38:7b:eb:8a:18:c5:cd:
                    c4:ec:11:63:c7:7d:8a:8d:17:2f:c5:17:1d:94:c3:
                    5b:d9:ad:85:2a:f1:69:62:73:33:ae:72:cf:74:c5:
                    fb:3c:d1:b8:e0:d2:29:5b:5c:f2:b8:64:60:de:07:
                    2d:1b:70:59:1a:ac:15:ea:e2:d8:92:e6:ca:e5:e3:
                    7c:c2:0f:88:9c:71:a3:3a:0e:69:cc:52:b8:a5:41:
                    94:27:8e:0d:0d:7b:17:79:a9:76:12:11:bc:86:74:
                    f0:02:c8:4e:3a:4b:d0:54:fc:4e:b6:45:ef:9a:92:
                    7c:98:51:b3:8f:4f:ee:82:5e:79:19:86:bc:4b:ab:
                    e3:b9:48:bf:79:0c:d5:18:8d:d4:26:7b:f9:3e:cd:
                    06:48:48:ad:09:62:a3:85:98:6e:7d:26:72:eb:55:
                    76:3d:90:38:67:70:9e:54:dd:8e:40:4f:1b:ba:d3:
                    3f:b1:c7:19:7c:93:7e:3c:98:b3:77:3c:83:2f:fc:
                    78:a7:1a:1b:78:95:3b:68:71:4d:0a:56:d2:11:77:
                    9a:d1:0f:d7:a6:15:a7:89:99:61:43:eb:61:38:27:
                    d3:2d:83:82:37:10:9a:2e:24:01:29:31:0d:7d:b6:
                    8f:ba:ca:89:ad:a5:0e:18:83:ec:2d:2c:6e:34:d5:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:75:B8:64:1B:A2:22:57:B7:2E:72:A4:BD:0C:52:4A:D2:A2:5A:05
            X509v3 Authority Key Identifier:
                keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:93:82:56:b2:da:33:ae:a1:30:9a:fe:4d:a0:4f:cc:a7:23:
         b0:13:d1:c4:25:2e:ea:aa:c8:0f:32:93:30:c5:1e:e1:08:84:
         41:8b:8c:ae:83:c0:1c:ed:93:05:42:80:0c:b9:e7:10:5d:e7:
         23:bd:e9:37:ca:b7:36:fb:7d:d8:48:4a:03:37:96:9f:86:2d:
         63:52:84:02:f5:ab:b0:73:7e:79:72:be:e4:76:40:72:80:6e:
         a3:be:39:41:71:f2:6a:4c:6c:46:64:39:6c:24:08:59:90:62:
         6a:cc:9b:db:12:47:56:a9:9f:bb:b8:67:2c:26:f3:e2:93:fc:
         89:a5:25:17:63:f3:b6:22:d8:f9:df:eb:25:af:7a:a2:27:bd:
         fe:f9:fb:30:2c:0d:5c:1f:4f:fa:ae:ad:37:5a:50:f6:d9:c1:
         89:fd:16:51:e0:e0:0b:33:a6:06:90:44:d1:f2:c3:e2:16:a0:
         3a:d4:b7:d0:29:eb:ed:89:07:77:68:95:0a:a3:97:88:43:3d:
         4f:71:28:8a:14:ea:25:34:dd:41:97:e0:5a:c8:82:a9:d9:9a:
         2d:ab:69:21:78:a5:a0:22:16:88:c0:9d:8d:c1:88:dd:cb:2f:
         eb:7c:65:3d:24:6f:fa:20:b2:7f:7b:13:d4:25:da:18:2d:79:
         5e:34:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:06:34 2026 by rpki-client