This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
File:                     4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json)
Hash identifier:          WGfIKhs+TQyITiQdVfxnGF4bDKS25kRmIYshTrxFnjs=
Subject key identifier:   0F:AF:DB:70:76:12:96:63:43:8A:79:7C:17:94:70:85:B9:D8:4F:36
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Certificate issuer:       /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
Manifest number:          E9
Signing time:             Fri 09 Jan 2026 04:46:23 +0000
Manifest this update:     Fri 09 Jan 2026 04:46:23 +0000
Manifest next update:     Fri 16 Jan 2026 04:46:23 +0000
Files and hashes:         1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: FlrW3Qs7DhbmIRtIyuzPX2+b/cjoHV0WYr968z9iHJk=)
                          2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: omrZAUzqP7gMHmT5OJsVyadDZTS200Mcd28sOHG7NiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
                          rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 04:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
        Validity
            Not Before: Jan  9 04:46:23 2026 GMT
            Not After : Jan 16 04:46:23 2026 GMT
        Subject: CN=6960881f-54ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:e1:62:dc:41:cb:30:16:e2:a3:29:6d:e3:
                    45:9f:70:6c:02:d8:0e:06:09:9f:88:65:00:dc:cd:
                    a6:f0:db:cc:a8:5c:f3:be:36:66:39:39:3d:bb:c1:
                    8f:9f:4e:58:c0:d8:d6:c4:14:8e:4f:6a:14:f7:e9:
                    c8:23:61:9a:f3:3c:e8:9c:34:f5:97:78:bb:e1:b2:
                    69:75:b4:33:09:50:af:b7:e7:2a:14:74:64:e3:6f:
                    15:ca:51:24:47:01:ac:0e:d8:0e:ee:e8:65:83:48:
                    92:a9:dd:e4:a2:d5:db:80:cf:34:84:f8:c6:84:f6:
                    14:a4:e5:f3:40:a6:ee:2e:6f:d2:70:81:a9:02:5e:
                    3b:dc:eb:92:40:63:f1:5e:66:7b:68:ea:9f:d1:10:
                    cf:3e:50:3f:55:d3:10:96:a5:97:e0:62:92:93:0b:
                    39:24:e1:96:12:88:1d:e5:dc:6b:c2:cc:e1:81:45:
                    f2:e2:77:7c:3d:ed:d0:e6:b3:25:43:a1:f6:e6:63:
                    44:f2:88:96:7b:45:74:b1:d7:2a:55:49:94:b4:c5:
                    81:b6:b3:67:3e:73:83:df:54:dd:24:56:78:a4:f0:
                    8d:e2:53:77:a0:43:3e:4a:04:5e:59:62:60:bb:ae:
                    6f:97:a1:0e:35:31:fc:f3:37:b6:c9:df:48:23:f2:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AF:DB:70:76:12:96:63:43:8A:79:7C:17:94:70:85:B9:D8:4F:36
            X509v3 Authority Key Identifier:
                keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e0:81:5c:c0:b7:ac:e1:80:bf:59:20:20:c6:16:ab:9e:26:
         ae:c7:31:34:d9:d8:11:66:be:67:ad:0c:e0:f3:48:04:24:a2:
         39:a1:19:b1:5f:4f:c1:28:cc:b6:59:e0:26:9c:7f:5e:c0:b5:
         cb:f5:19:4b:e5:cc:f9:7d:d0:32:cb:29:b3:98:57:b5:12:fd:
         bc:ab:c2:00:1c:97:a4:d7:fe:db:28:e6:32:8a:55:fe:85:85:
         17:6e:7b:c0:0b:cb:72:32:ee:c4:43:86:4b:17:a2:3d:d3:54:
         16:e1:e5:b2:52:e4:ab:ed:d4:03:6b:b1:a9:c1:7a:05:8f:00:
         d3:18:1a:78:ad:ea:aa:85:16:b2:20:e0:48:94:a5:c9:ed:55:
         dd:b4:ca:96:46:c1:36:ad:52:72:fe:1d:af:6d:01:ae:82:a0:
         48:e6:0b:97:f9:e8:17:da:ff:13:a5:43:7c:56:23:39:37:0d:
         4b:9a:ef:4c:7f:53:37:5d:bc:f2:ad:a3:e6:0c:c9:aa:3b:57:
         0b:7e:80:0a:77:f8:ef:14:4b:31:d9:02:79:f4:da:4d:46:45:
         35:3e:80:bf:7b:9d:1d:8f:0d:f2:89:23:6f:86:fd:d1:0c:40:
         a7:46:10:a6:1a:e4:43:2f:9e:90:47:4e:84:d7:21:1b:b0:dd:
         5c:e4:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 07:49:44 2026 by rpki-client