This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
File:                     Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json)
Hash identifier:          taLz9OvSmQyK6I2tGrBK9VvPKNBV4rc55CPD84yovUQ=
Subject key identifier:   0C:40:97:35:39:A9:E5:A4:6E:5F:BF:4E:D6:16:EC:0B:CD:81:43:87
Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
Certificate issuer:       /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
Manifest number:          90
Signing time:             Thu 01 Jan 2026 06:05:49 +0000
Manifest this update:     Thu 01 Jan 2026 06:05:49 +0000
Manifest next update:     Thu 08 Jan 2026 06:05:49 +0000
Files and hashes:         1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: AzS4jrbYvFeKLV6CDEG86jaIfaKuaEzjJyTtCtNt1h4=)
                          2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: Aw3wWZIQQg1zakwGDu44MXnJ4chAk+JjnYLGpnEp8ao=)
                          3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: AY2s5T5nFgYlJrJemH+atWCYX2gv1ohpQJNZYKJbmMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
                          rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 06:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
        Validity
            Not Before: Jan  1 06:05:49 2026 GMT
            Not After : Jan  8 06:05:49 2026 GMT
        Subject: CN=69560ebd-f0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:22:bc:03:9b:81:f3:60:c4:6e:13:e5:1b:
                    f8:3f:ed:8b:b1:18:01:9c:23:e3:0e:e5:6a:8b:48:
                    c2:2a:66:ac:df:47:39:68:13:81:11:fe:76:a8:44:
                    b0:73:a1:6b:c6:50:10:26:83:19:3a:b6:34:07:17:
                    51:8c:4b:9e:f2:c1:46:9e:07:7d:18:e1:87:b9:f1:
                    a3:e2:b8:09:b4:3c:16:96:3b:8e:90:1c:07:9d:76:
                    7a:ed:ee:bb:6c:f0:da:29:a4:80:70:d2:f1:e7:80:
                    0e:ed:41:3a:76:94:3e:23:c3:5f:da:c8:e0:bb:06:
                    d6:6d:c0:41:31:73:bd:e8:d9:47:5d:70:a7:c9:ec:
                    db:03:c6:90:9f:a0:8d:30:09:bc:11:7f:21:14:93:
                    bb:ea:40:75:ea:2d:8e:6f:63:8b:72:fc:6e:f3:37:
                    6f:13:a3:4d:53:08:bb:db:78:80:b6:5b:34:72:91:
                    64:13:61:d4:dc:14:62:ce:97:5f:bc:7f:d0:40:ed:
                    22:fd:63:da:d6:d6:2c:71:6d:82:e0:40:4a:76:0a:
                    2b:34:4e:e2:9a:ab:e0:55:a1:ab:91:fe:22:34:31:
                    50:1f:ca:bc:8d:0b:ff:4c:8f:2c:d6:bb:78:fa:29:
                    0a:60:cf:a4:e5:f3:68:74:b2:b3:85:ed:a5:f6:4b:
                    91:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:97:35:39:A9:E5:A4:6E:5F:BF:4E:D6:16:EC:0B:CD:81:43:87
            X509v3 Authority Key Identifier:
                keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:eb:48:90:a1:dd:bc:92:cb:b1:d9:ad:20:53:a4:ec:a1:49:
         87:4f:6a:9a:2d:76:4f:4f:2e:97:16:d7:99:c6:57:ec:69:7d:
         8f:ac:0a:06:df:39:0b:cf:b3:5f:79:02:ff:6b:ab:93:31:73:
         c1:d8:b7:af:b0:20:c8:70:77:3b:bb:38:d7:30:f9:1f:98:ee:
         76:18:9f:36:34:b9:cd:b7:7a:dc:07:ec:42:1a:f7:1d:21:fd:
         68:e9:9d:ac:f6:3e:16:ec:00:8b:66:f2:f1:98:95:66:4d:1b:
         d6:03:24:1d:c5:c5:19:b3:b5:56:c2:76:1b:b4:dd:9c:27:e0:
         f6:8e:65:0d:79:85:e8:30:e9:99:a5:e8:09:ec:31:0d:e5:e9:
         4a:94:64:d7:0d:ea:2f:ca:d5:12:09:b5:8e:a5:be:3e:32:3f:
         ec:d5:05:2f:79:f0:a8:d7:90:c8:99:48:ff:34:99:ae:4b:f7:
         f4:bd:69:80:f0:89:b9:3a:bd:1a:1b:f8:d0:7a:92:24:73:c1:
         23:d5:1d:9e:e7:f4:40:7b:a6:7d:d1:05:e1:0d:3a:2f:e3:b9:
         4b:d3:aa:fe:22:47:75:e9:db:48:d1:b8:98:01:d5:cd:08:74:
         fd:91:8f:40:b6:90:f0:53:27:0d:ed:57:a7:b6:38:ed:d4:ff:
         d5:b7:c8:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDMDgxMTAvBgNVBAUTKDMyMUVFRkI4MDg1MUZGODJGRUI3Q0I2QzA4QTk0RjVE
RDJEOTI3MEQwHhcNMjYwMTAxMDYwNTQ5WhcNMjYwMTA4MDYwNTQ5WjAYMRYwFAYD
VQQDDA02OTU2MGViZC1mMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy54ivAObgfNgxG4T5Rv4P+2LsRgBnCPjDuVqi0jCKmas30c5aBOBEf52qESw
c6FrxlAQJoMZOrY0BxdRjEue8sFGngd9GOGHufGj4rgJtDwWljuOkBwHnXZ67e67
bPDaKaSAcNLx54AO7UE6dpQ+I8Nf2sjguwbWbcBBMXO96NlHXXCnyezbA8aQn6CN
MAm8EX8hFJO76kB16i2Ob2OLcvxu8zdvE6NNUwi723iAtls0cpFkE2HU3BRizpdf
vH/QQO0i/WPa1tYscW2C4EBKdgorNE7imqvgVaGrkf4iNDFQH8q8jQv/TI8s1rt4
+ikKYM+k5fNodLKzhe2l9kuRTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxAlzU5
qeWkbl+/TtYW7AvNgUOHMB8GA1UdIwQYMBaAFDIe77gIUf+C/rfLbAipT13S2ScN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0MwOC9BRkZDMERFNDEx
N0MxMUYwQjIzNENENzhDNEY5QUUwMi9NaDd2dUFoUl80TC10OHRzQ0tsUFhkTFpK
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0MwOC9BRkZDMERFNDExN0MxMUYwQjIzNENENzhDNEY5QUUwMi9NaDd2dUFoUl80
TC10OHRzQ0tsUFhkTFpKdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCu60iQod28ksux2a0gU6TsoUmHT2qaLXZPTy6XFteZxlfsaX2PrAoG
3zkLz7NfeQL/a6uTMXPB2LevsCDIcHc7uzjXMPkfmO52GJ82NLnNt3rcB+xCGvcd
If1o6Z2s9j4W7ACLZvLxmJVmTRvWAyQdxcUZs7VWwnYbtN2cJ+D2jmUNeYXoMOmZ
pegJ7DEN5elKlGTXDeovytUSCbWOpb4+Mj/s1QUvefCo15DImUj/NJmuS/f0vWmA
8Im5Or0aG/jQepIkc8Ej1R2e5/RAe6Z90QXhDTov47lL06r+Ikd16dtI0biYAdXN
CHT9kY9AtpDwUycN7Ventjjt1P/Vt8g6
-----END CERTIFICATE-----
Generated at Thu Jan 1 19:38:59 2026 by rpki-client