This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
File:                     sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json)
Hash identifier:          IBkNZ+rehwhh5Al3ylEY7LxAf1cFdijO+phUK72DGqg=
Subject key identifier:   D3:FA:4A:61:30:85:0A:EE:59:B7:E4:6E:62:5F:6C:61:22:8A:1C:6D
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Certificate issuer:       /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial:       030D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
Manifest number:          02FE
Signing time:             Wed 07 Jan 2026 00:24:04 +0000
Manifest this update:     Wed 07 Jan 2026 00:24:04 +0000
Manifest next update:     Wed 14 Jan 2026 00:24:04 +0000
Files and hashes:         1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: ZFiKkayPX4HpD+k2b3DctamxOV9ofZZSMyj4S+QIXIY=)
                          2: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: O/GWNs45gL+188aJUtcbIy1ffH2qMFXWGJpc2ELIi9o=)
                          3: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: J6hrcFh7WhWZaOUjv//ch7y6xSAesYjPuueLW+CqB+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
                          rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 00:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
        Validity
            Not Before: Jan  7 00:24:04 2026 GMT
            Not After : Jan 14 00:24:04 2026 GMT
        Subject: CN=695da7a4-58e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:0d:b5:0b:1c:72:5f:70:3b:78:4b:78:a7:
                    8d:ce:5c:90:47:a2:78:00:78:64:8b:9c:c8:f5:cf:
                    be:16:23:0c:14:5a:06:76:ca:70:68:4f:64:29:da:
                    c6:e8:e7:10:22:ba:ec:ea:d3:31:13:05:0d:a1:6f:
                    bf:89:9c:96:b1:7a:af:28:eb:2a:36:26:fd:0c:3a:
                    68:a3:59:24:c1:9a:0b:a5:c1:47:48:7c:71:d1:1d:
                    75:5f:5d:1f:bf:a3:1d:82:d4:1c:fb:62:87:98:e4:
                    57:f8:64:bf:8f:bc:84:5c:04:eb:3d:5c:c0:2f:51:
                    53:a8:bc:90:a8:e8:46:5e:cd:d0:93:ff:af:e2:49:
                    68:18:d9:2a:bb:c0:6e:fc:66:20:9b:de:58:ef:e6:
                    3e:f7:14:52:d4:46:48:55:04:d1:0f:19:79:0d:14:
                    f3:13:fe:61:a3:8b:86:af:01:55:af:8c:20:b2:4f:
                    3a:55:6a:75:55:87:b9:f5:f1:6e:fc:d6:24:1a:ff:
                    92:4e:b4:d1:96:93:ac:ee:c7:95:7f:8e:64:67:6a:
                    dd:7c:c1:10:3c:19:3a:4f:e6:86:3c:75:0a:73:65:
                    a0:1c:67:86:65:11:91:1b:8e:d4:39:33:b0:88:fe:
                    42:77:3c:3a:ec:99:ab:1c:30:95:31:4a:37:19:7f:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FA:4A:61:30:85:0A:EE:59:B7:E4:6E:62:5F:6C:61:22:8A:1C:6D
            X509v3 Authority Key Identifier:
                keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:36:fc:be:a8:65:45:eb:4c:32:3d:2a:b6:33:0e:72:2d:f5:
         c4:0f:40:10:d1:8b:d2:99:98:8c:42:67:61:99:ba:7f:96:17:
         15:97:3f:06:d3:76:d9:3f:a2:66:b1:48:60:cb:7a:68:ac:f2:
         6d:62:10:59:60:63:d2:43:42:bc:d2:c5:9d:50:68:b3:dc:94:
         19:6d:06:db:a2:e6:8b:43:0e:3d:50:07:87:c2:e9:06:10:9b:
         d7:25:b5:ce:f3:7e:75:b8:15:b4:c1:47:5f:51:a1:a7:3d:41:
         a5:14:b0:77:d2:91:59:4c:69:21:80:ca:81:e5:e1:4a:a7:12:
         89:78:93:78:34:cf:17:b4:35:dd:93:55:2a:73:e0:a7:77:0e:
         36:24:fb:5b:12:bf:cf:19:90:19:fa:4e:60:20:35:62:b2:fd:
         84:bd:f9:7b:25:0d:e3:c9:8b:3d:b7:2e:e6:b5:73:29:d1:22:
         5c:82:5f:74:e9:6f:81:83:a3:17:fc:37:e0:f2:da:b8:2a:78:
         51:ef:dc:9e:08:41:0b:77:71:38:ef:73:56:2e:60:de:0b:65:
         ff:96:e9:77:83:99:08:0c:dd:50:02:62:64:a8:73:f2:fc:d6:
         b4:9e:29:27:e7:7e:3d:b9:89:ae:c5:a1:49:e8:a2:cb:b6:fc:
         87:bf:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:16:30 2026 by rpki-client