This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
File:                     T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json)
Hash identifier:          +LU5uDL61dyAmQVxvZM6Y+cOs9FkTUIntyQkaUd6Bik=
Subject key identifier:   0E:98:EA:65:ED:41:6E:67:82:61:F1:6E:D4:01:E1:09:E2:E5:CB:5E
Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
Certificate issuer:       /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
Manifest number:          C7
Signing time:             Sun 11 Jan 2026 05:04:02 +0000
Manifest this update:     Sun 11 Jan 2026 05:04:01 +0000
Manifest next update:     Sun 18 Jan 2026 05:04:01 +0000
Files and hashes:         1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: y3sal0abs9bAjj6cyvPc4b119s9/Zv3c6aIyc43W0Cc=)
                          2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: UhUF/9TtUZwnLWqWalCeHKKjGi9TCpHZ26MzC5XnFdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
                          rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 05:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
        Validity
            Not Before: Jan 11 05:04:01 2026 GMT
            Not After : Jan 18 05:04:01 2026 GMT
        Subject: CN=69632f42-3fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:d7:f2:b5:0b:0d:80:1e:1b:45:69:a2:05:
                    51:bc:4f:8f:83:49:2a:6d:67:cb:28:df:c5:85:7a:
                    ae:e4:a5:83:df:35:a3:01:0c:37:72:84:60:6f:d4:
                    91:36:35:92:1e:b3:06:c3:13:de:6b:a4:6d:db:0b:
                    3a:a2:f2:5d:83:76:9c:c4:5d:07:a9:49:5a:57:5e:
                    49:7f:28:fa:33:40:5c:3c:54:bb:d3:f2:dd:e2:91:
                    c7:1f:11:dc:c6:7b:82:ab:70:49:85:f5:0c:0f:29:
                    b0:38:8a:92:cc:a5:10:45:48:41:49:c1:e4:70:1a:
                    89:c0:ab:72:8d:a3:ce:7c:cc:df:be:be:39:7c:07:
                    60:6e:e2:08:bd:03:47:b9:3d:05:1d:34:d1:0d:b9:
                    c0:e1:d9:b4:f9:4d:b6:f5:2a:b9:11:07:96:43:e9:
                    e9:7b:79:c7:be:36:17:29:12:38:94:20:a3:2f:40:
                    73:aa:b7:90:6a:79:34:fe:b8:4a:d2:0a:56:ff:62:
                    c4:be:51:f6:b7:6d:39:58:40:41:3d:14:d2:8f:a9:
                    8f:ae:b8:a0:e4:58:cb:11:aa:ba:1b:cd:d8:ea:dc:
                    30:d7:3b:53:b5:ae:50:f6:18:22:83:20:b6:ce:94:
                    a5:02:a7:e4:28:93:a8:aa:a1:16:9b:39:92:81:10:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:98:EA:65:ED:41:6E:67:82:61:F1:6E:D4:01:E1:09:E2:E5:CB:5E
            X509v3 Authority Key Identifier:
                keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:44:eb:d9:fb:d7:00:49:15:ec:c8:6d:5a:d2:0f:b4:ab:1f:
         22:ec:70:cd:4b:60:c3:4d:f3:d9:d4:05:af:b5:bf:12:9c:46:
         cc:79:d8:72:17:4a:f9:35:79:2d:f4:b8:18:31:39:21:cf:90:
         92:47:41:6e:d3:fb:ee:eb:88:4a:b9:9b:e9:42:89:6a:65:a7:
         d4:c2:88:34:c8:4f:2b:ab:3b:b6:f3:96:0b:51:6f:e5:59:b0:
         96:d3:ad:1a:8f:6f:3e:b8:6a:69:4a:c9:5b:4e:43:77:ae:3a:
         24:bd:86:6a:45:29:f1:ca:69:0c:d2:17:b4:a2:82:27:5c:05:
         4d:48:51:f1:85:36:10:3d:6a:7f:8d:26:20:5f:bf:ee:4e:9b:
         b5:d9:d2:7f:ef:78:c9:57:e9:09:bb:29:17:31:ff:26:b0:d3:
         2c:d6:2a:1a:18:b3:b8:1e:7d:5c:e4:37:a8:ca:6b:41:1e:da:
         7b:71:f9:ac:94:24:2e:58:72:70:d3:14:28:8a:5e:3c:b9:6c:
         45:3a:39:5c:f7:fc:e1:ef:96:17:e3:81:74:56:19:17:e2:93:
         46:ba:26:22:52:51:67:9b:b9:70:be:e4:5c:d6:14:62:da:ba:
         9e:87:d0:b6:2f:9d:91:94:3e:a3:a9:f3:ee:62:56:95:5e:63:
         54:27:32:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGMDcxMTAvBgNVBAUTKDRGOUVGRDQzQkE3OUEzNDk0NTUxMDlEQjIwMDg0NUE4
OTA4Q0RDNUMwHhcNMjYwMTExMDUwNDAxWhcNMjYwMTE4MDUwNDAxWjAYMRYwFAYD
VQQDDA02OTYzMmY0Mi0zZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAonjX8rULDYAeG0VpogVRvE+Pg0kqbWfLKN/FhXqu5KWD3zWjAQw3coRgb9SR
NjWSHrMGwxPea6Rt2ws6ovJdg3acxF0HqUlaV15Jfyj6M0BcPFS70/Ld4pHHHxHc
xnuCq3BJhfUMDymwOIqSzKUQRUhBScHkcBqJwKtyjaPOfMzfvr45fAdgbuIIvQNH
uT0FHTTRDbnA4dm0+U229Sq5EQeWQ+npe3nHvjYXKRI4lCCjL0BzqreQank0/rhK
0gpW/2LEvlH2t205WEBBPRTSj6mPrrig5FjLEaq6G83Y6tww1ztTta5Q9hgigyC2
zpSlAqfkKJOoqqEWmzmSgRDPQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6Y6mXt
QW5ngmHxbtQB4Qni5cteMB8GA1UdIwQYMBaAFE+e/UO6eaNJRVEJ2yAIRaiQjNxc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8yRjcyMkE5OEMz
NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9UNTc5UTdwNW8wbEZVUW5iSUFoRnFKQ00z
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Q1NzlRN3A1bzBsRlVRbmJJQWhGcUpDTTNGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUYwNy8yRjcyMkE5OEMzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9UNTc5UTdwNW8w
bEZVUW5iSUFoRnFKQ00zRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0ROvZ+9cASRXsyG1a0g+0qx8i7HDNS2DDTfPZ1AWvtb8SnEbMedhy
F0r5NXkt9LgYMTkhz5CSR0Fu0/vu64hKuZvpQolqZafUwog0yE8rqzu285YLUW/l
WbCW060aj28+uGppSslbTkN3rjokvYZqRSnxymkM0he0ooInXAVNSFHxhTYQPWp/
jSYgX7/uTpu12dJ/73jJV+kJuykXMf8msNMs1ioaGLO4Hn1c5DeoymtBHtp7cfms
lCQuWHJw0xQoil48uWxFOjlc9/zh75YX44F0VhkX4pNGuiYiUlFnm7lwvuRc1hRi
2rqeh9C2L52RlD6jqfPuYlaVXmNUJzKP
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:58:34 2026 by rpki-client