This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          OaK/KdZNFy/Dz0jN9KF4uHPNONb+4FG8wbx/CZ+otmA=
Subject key identifier:   37:F5:3F:03:D5:E7:67:6F:40:82:71:C7:E6:BF:77:62:0C:FA:09:BE
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       0256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          024E
Signing time:             Mon 05 Jan 2026 00:44:05 +0000
Manifest this update:     Mon 05 Jan 2026 00:44:05 +0000
Manifest next update:     Mon 12 Jan 2026 00:44:05 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: DdCxPj1UlsSWwjYD+GoFYPbZ2wyg4h3+VwzPnBXEyQ8=)
                          2: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: aYUm1aVtuDy+5vYCksuuiVbwXJaF0tNfwYSEMBfgydU=)
                          3: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 3spAcopzpeJWyW5mR0mGk38MM078PmmdgI27LOSYIH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 00:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Jan  5 00:44:05 2026 GMT
            Not After : Jan 12 00:44:05 2026 GMT
        Subject: CN=695b0955-2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:cc:8e:4b:1b:87:e2:9b:a7:17:df:53:e7:
                    57:9c:15:d0:20:64:31:48:e2:56:72:88:f4:64:c9:
                    15:10:4c:91:48:d3:25:6b:de:8d:5d:98:b5:42:ad:
                    81:f3:9a:5b:85:3e:a0:68:c3:8c:73:0f:7e:a3:8c:
                    0a:39:f6:4e:a4:9d:61:d1:de:ad:8f:32:9e:52:07:
                    a4:37:d1:fb:ea:21:7e:a9:1d:0e:ea:9f:88:90:94:
                    76:46:e3:94:ce:74:30:3a:7d:b9:4c:10:67:25:9b:
                    02:65:8a:4c:bb:f7:66:7c:c6:31:bb:b4:d4:34:31:
                    50:f1:52:03:d2:4d:07:5d:57:ae:20:8e:b4:51:27:
                    8a:3b:c6:6f:61:19:32:17:e2:e6:3c:fb:c8:d8:ce:
                    e4:b3:6b:db:86:05:12:29:89:75:2d:ff:28:d9:01:
                    36:ea:2a:88:5c:76:b9:bf:2d:0c:e1:3e:6d:0c:40:
                    ef:4b:2f:39:e2:52:d4:82:2c:31:dd:41:4e:40:c7:
                    f7:27:b2:fd:7b:30:c4:07:59:f3:1b:f4:0b:07:df:
                    fd:14:46:0c:cb:01:1e:b9:af:5a:ec:c1:7f:0f:45:
                    c9:3f:a2:a6:aa:b8:dd:29:d6:ec:90:87:14:17:cf:
                    87:d9:65:91:c7:4a:81:17:fc:9b:4d:91:f3:f8:81:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:3F:03:D5:E7:67:6F:40:82:71:C7:E6:BF:77:62:0C:FA:09:BE
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:20:17:2c:18:a5:7e:79:20:ad:2e:c7:8f:36:b6:0a:a6:0b:
         47:dc:86:0c:1d:fe:f6:51:d5:20:1e:8f:0a:5c:ab:3e:ca:01:
         f9:e2:a9:e6:7e:c3:34:32:b9:97:ed:a1:23:ad:5f:40:b0:1c:
         e8:9d:e2:37:f5:9f:62:82:02:03:35:de:59:7f:0c:0c:65:93:
         bc:25:62:1e:43:1b:40:86:05:ad:88:13:fe:52:51:17:82:9c:
         c0:c9:28:c3:fa:e8:ee:13:70:e8:34:86:87:49:07:26:23:07:
         21:2f:69:b4:13:a0:22:57:36:37:8f:6d:9d:df:72:88:59:9b:
         58:4f:66:b0:ba:2d:5c:f2:54:c0:b0:70:3c:ac:69:59:ec:76:
         50:8a:5a:0e:58:0a:84:ea:34:87:e8:59:fd:74:10:9f:b0:b0:
         c9:60:60:a1:c6:1f:79:d2:d3:f3:28:b6:34:82:6a:ee:15:ae:
         4b:6e:87:b5:5d:e3:ae:b5:ce:cd:2f:35:83:c8:b9:3b:e4:39:
         4e:9c:85:cb:d3:1a:9c:50:0d:2e:e6:76:19:87:17:4a:b9:87:
         30:95:91:1d:25:e9:ee:89:31:a5:f8:5d:0d:b2:32:b9:c5:26:
         1a:f4:a7:bb:9d:a9:a0:46:c0:7b:82:33:9f:fc:2a:06:17:f9:
         04:0b:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 19:14:07 2026 by rpki-client