This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
File:                     o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json)
Hash identifier:          FKXHnV3fl2B9TtQ/LuJoMV/bssNAA2dgrMX8a94BYFE=
Subject key identifier:   5C:44:90:C4:79:ED:DF:CA:71:54:2E:FF:A3:7A:38:9A:47:59:0F:AF
Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Certificate issuer:       /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Certificate serial:       0421
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
Manifest number:          041C
Signing time:             Thu 08 Jan 2026 23:37:20 +0000
Manifest this update:     Thu 08 Jan 2026 23:37:20 +0000
Manifest next update:     Thu 15 Jan 2026 23:37:20 +0000
Files and hashes:         1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: iyigNVMYFTBwnmAZJQ6KRKK1YOdOeKPbZMhjE7yJDl0=)
                          2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: /LvExGUs3Vr9wpRYY+a9ZS6EORFrCyhwbLTTuNvKjdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
                          rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 23:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
        Validity
            Not Before: Jan  8 23:37:20 2026 GMT
            Not After : Jan 15 23:37:20 2026 GMT
        Subject: CN=69603fb0-2620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:29:bf:54:70:f8:93:41:75:42:9c:60:aa:
                    c2:19:08:7f:4d:5c:8c:70:bc:bd:fd:56:f2:fd:09:
                    c9:7f:e5:13:8a:5f:f2:ce:46:79:71:a4:9c:a6:b1:
                    b3:8d:b9:ee:71:28:95:cf:47:a6:11:f3:89:77:33:
                    da:f8:0c:0e:c2:4a:6c:ee:a4:de:2f:23:b5:d0:9e:
                    75:11:21:7f:fb:4e:43:b9:c3:d7:af:b6:d8:da:f6:
                    83:6d:5d:f7:d1:c2:ef:2e:a9:7b:67:26:59:43:9a:
                    7e:ce:8b:65:ba:11:4f:15:7b:40:5c:2b:37:a8:0d:
                    4b:f8:7b:ed:3b:64:65:b5:3b:26:38:c3:c0:d8:e3:
                    34:5a:6a:fa:d3:0a:24:69:a2:b6:c3:5f:b3:da:40:
                    c1:e5:c0:70:c5:19:80:8d:c8:32:d0:31:1e:a0:ce:
                    e5:5f:38:f4:92:dc:43:c2:d4:bc:81:31:f5:8f:14:
                    1d:ad:b9:91:93:44:87:98:00:9a:7f:d0:05:8e:78:
                    4f:bb:cd:cb:53:0c:88:6d:99:9b:8a:01:9e:f6:7c:
                    2e:2e:9c:98:c7:ee:0c:89:65:14:4c:05:29:e2:7b:
                    ac:dd:1f:b5:57:c7:dd:9e:61:a1:89:c4:71:e2:00:
                    90:ea:a3:3b:eb:cd:d2:47:6d:e4:a4:e4:bb:ad:09:
                    63:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:44:90:C4:79:ED:DF:CA:71:54:2E:FF:A3:7A:38:9A:47:59:0F:AF
            X509v3 Authority Key Identifier:
                keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:8c:04:84:4f:b7:fa:15:16:b9:d4:b2:ef:76:4a:41:28:
         71:65:26:c4:9c:24:48:82:4c:e6:68:43:f1:8c:03:0b:7e:c6:
         1c:1b:59:55:0a:d1:dd:02:15:2f:39:d1:6e:9b:ab:6f:ac:0f:
         93:84:cf:60:82:01:11:bb:09:ad:71:c1:39:e1:45:68:82:9a:
         fc:c4:b1:9a:c5:89:37:53:d1:e3:07:63:9b:b5:7d:bf:17:ee:
         1a:08:83:f5:00:6a:be:bf:25:fc:f1:01:8d:74:62:45:3e:78:
         52:c8:ff:23:ce:5c:c3:c0:2c:dc:e1:9a:4d:2e:21:2d:e0:e5:
         8b:89:31:95:b5:c7:40:f1:95:8d:c8:02:16:9d:13:c6:40:d5:
         b5:bb:2a:4a:e8:ca:78:4d:cb:1f:ce:9c:83:d6:9c:ab:e4:f5:
         77:e6:47:d5:c3:cf:78:63:43:87:97:c5:28:cb:d1:cb:9c:86:
         bd:64:68:81:d0:09:ed:01:6c:05:2e:30:d0:63:b5:3a:e3:ad:
         db:41:c0:e3:c8:84:f4:a6:77:3b:17:de:b0:7f:cf:7e:ff:ef:
         47:0e:f8:7b:d5:23:e4:99:47:0d:c9:80:f2:bf:25:cc:54:0a:
         47:46:ec:dc:4f:c0:23:c1:75:fd:55:93:06:a6:05:6a:b4:d9:
         9f:6d:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:48:03 2026 by rpki-client