This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File:                     x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier:          FiIuQH0O/vgzkr4lAZZbMGHimSZHmbnUDio2GJkV7Hc=
Subject key identifier:   CD:22:9D:B7:16:60:09:22:EE:76:2C:BD:F1:8C:9A:8F:A0:3D:AA:CA
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer:       /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number:          01D8
Signing time:             Sat 03 Jan 2026 01:52:51 +0000
Manifest this update:     Sat 03 Jan 2026 01:52:51 +0000
Manifest next update:     Sat 10 Jan 2026 01:52:51 +0000
Files and hashes:         1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: IdrhmfKJEgn/i3TBcqf1eHUX49ka8e+NTY+IMljvhtk=)
                          2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
                          rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Jan 2026 01:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
        Validity
            Not Before: Jan  3 01:52:51 2026 GMT
            Not After : Jan 10 01:52:51 2026 GMT
        Subject: CN=69587673-fedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:78:0b:7f:38:f5:40:ae:d3:a1:48:df:f4:
                    71:36:01:07:26:70:81:42:ec:5e:26:7a:49:a1:d5:
                    09:b1:6d:9d:f6:98:d4:d2:60:0f:ba:03:69:19:d0:
                    07:4a:df:50:9a:8a:21:8b:05:ee:af:f1:d6:3b:47:
                    20:00:f4:a1:1e:bd:23:bb:1c:bd:7b:97:1c:53:f2:
                    61:f4:a5:bd:57:f9:c5:df:42:c2:04:ca:c0:8c:50:
                    17:76:62:af:b5:39:09:39:22:c8:a7:ca:21:b9:df:
                    4c:74:05:de:c9:51:c3:4b:33:6f:ac:32:dc:85:9b:
                    ca:20:d5:24:b8:53:a0:cd:64:43:51:2f:5a:11:b6:
                    8b:d4:58:c6:13:2a:d5:10:42:8b:1f:66:81:ea:80:
                    97:92:77:33:d5:47:b8:a4:c9:ea:06:de:7f:29:a1:
                    3d:e9:91:78:cf:24:21:79:a6:ff:5b:4c:3c:79:18:
                    33:d4:d5:65:27:15:b5:12:c1:ff:45:10:22:90:c6:
                    2c:8b:f3:7a:5c:c0:b6:7f:d9:36:f5:af:f5:2a:05:
                    a4:15:57:33:3d:c3:19:91:c6:a5:55:ae:45:34:0f:
                    f0:a0:24:0a:43:a6:24:d1:0f:89:3e:97:06:e0:ed:
                    27:8e:a2:ee:51:e4:40:b6:92:ac:32:5f:2d:96:c6:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:22:9D:B7:16:60:09:22:EE:76:2C:BD:F1:8C:9A:8F:A0:3D:AA:CA
            X509v3 Authority Key Identifier:
                keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:38:c4:56:e5:81:3d:b6:56:a7:b6:b8:e2:30:5a:29:fa:
         8e:93:21:e6:d5:79:10:8e:d5:98:f5:8a:53:7e:c2:9f:05:91:
         5e:f7:b3:97:27:b8:cc:16:e0:4e:c6:1d:f8:0b:74:fa:67:79:
         f9:67:8a:7e:87:b1:bd:9b:e9:48:c1:d8:62:51:54:64:b0:78:
         40:15:09:43:da:54:f2:56:5b:f7:74:f1:50:26:6b:b6:29:84:
         88:39:f0:a1:e2:11:9f:3f:bc:f7:23:22:64:de:62:f3:36:09:
         2e:5a:df:54:fc:53:6e:55:0a:30:b9:68:b1:50:79:d4:b1:eb:
         f5:72:fb:c7:db:78:a6:08:51:2f:6e:14:93:cd:9e:be:69:ce:
         f5:0b:3a:7a:ef:c5:49:3f:0d:5e:59:62:54:7b:ba:b7:4f:4b:
         ff:73:93:9f:5a:f9:23:1f:df:3d:c5:69:d5:a8:55:b7:f1:1c:
         92:e5:92:7c:be:99:93:90:a6:f0:76:0f:85:e2:85:77:c6:66:
         29:67:71:01:04:ce:d7:ac:bc:67:f5:a0:fe:57:0e:b3:0b:f3:
         ca:81:4b:33:88:0c:b7:3a:ce:f6:76:89:8f:01:37:ff:ea:6d:
         81:9d:4f:be:9f:7f:5e:6d:45:3b:d6:26:e5:f6:96:fe:69:7d:
         4d:0d:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:34:13 2026 by rpki-client