This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
File:                     7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json)
Hash identifier:          9okQUXNiwsAniSG6jswJNqndq5vR/sywch69OvzVxsM=
Subject key identifier:   FD:9B:01:76:E9:D3:EE:5F:7B:C1:40:44:DB:ED:C7:6C:16:BA:27:94
Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
Certificate issuer:       /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
Manifest number:          01AB
Signing time:             Sun 11 Jan 2026 02:28:14 +0000
Manifest this update:     Sun 11 Jan 2026 02:28:13 +0000
Manifest next update:     Sun 18 Jan 2026 02:28:13 +0000
Files and hashes:         1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: sWaUIt+P/gRRYS6/h9jWVJLcc7WCElB8b7G9ku48Y0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 02:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
        Validity
            Not Before: Jan 11 02:28:13 2026 GMT
            Not After : Jan 18 02:28:13 2026 GMT
        Subject: CN=69630abe-6ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:dc:d5:3e:0f:d6:d6:7d:33:c5:e1:0a:77:
                    2d:25:1a:1c:fe:58:3a:20:d6:77:ec:a3:14:ed:ea:
                    02:65:58:0d:4f:75:34:c9:f2:af:ad:86:d9:fc:bd:
                    58:16:ba:3d:6a:03:d4:0c:52:72:f7:81:aa:58:77:
                    21:a3:92:10:dc:7c:78:4d:ea:c0:7f:bd:53:cc:20:
                    6f:97:ae:30:aa:4d:80:27:08:5f:12:c6:cc:8e:67:
                    9f:11:81:48:fe:4c:44:4a:12:8d:cd:ca:f3:4a:fb:
                    48:7c:df:e9:ef:ea:f0:a7:04:ce:45:40:53:42:50:
                    8b:49:5c:74:64:a3:22:ed:94:3f:9a:c9:94:4d:b4:
                    1e:37:25:e2:99:8d:b7:4e:52:4c:ed:6a:9c:ac:9f:
                    cd:fa:08:d6:77:1f:72:57:32:df:68:bc:aa:62:d0:
                    fe:06:5d:95:13:f6:cc:9c:f2:e9:a1:01:88:6e:89:
                    0a:32:0a:79:2e:b0:34:4c:fa:f1:73:59:5e:2e:88:
                    69:ab:c4:77:f9:24:bb:66:6d:33:f7:74:16:8f:e3:
                    07:e4:61:3c:86:bb:77:c6:50:e0:c3:4c:25:c3:54:
                    87:1a:2f:c2:a1:a7:57:bf:6c:c2:3d:1b:e2:9e:b1:
                    9e:bf:ce:e5:10:71:c6:97:63:4a:81:db:4b:aa:98:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9B:01:76:E9:D3:EE:5F:7B:C1:40:44:DB:ED:C7:6C:16:BA:27:94
            X509v3 Authority Key Identifier:
                keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4c:87:a0:6e:f9:92:e2:cb:00:f8:c7:1b:b7:3a:f0:92:86:
         a5:d9:93:04:df:ba:32:51:32:1d:3d:94:ed:9a:07:49:a0:b2:
         ae:cf:50:b5:72:96:2f:53:ad:c6:6b:3e:ac:ff:3d:5d:45:60:
         1b:4e:7a:7e:ee:2e:66:69:a4:77:39:29:45:84:bc:fa:0a:69:
         01:b4:0d:52:5a:2b:fc:bd:9c:f9:f8:ea:ce:00:9d:39:ff:8d:
         3d:9d:f9:06:3c:e4:6c:8f:95:28:ca:99:23:01:7f:0f:62:7f:
         4d:37:c7:d7:70:db:69:f9:54:ca:eb:3d:58:5b:a8:c1:a6:0f:
         53:c0:8e:eb:f4:94:b6:14:9c:11:f1:31:78:b9:98:a0:74:27:
         b2:e1:a1:1b:da:ff:05:1c:26:90:a0:98:f5:76:40:dd:0d:c1:
         e7:51:6b:1c:17:ee:4f:50:10:38:db:67:2f:89:be:b4:b3:5e:
         24:ec:da:2f:74:25:8c:0a:ed:83:60:fd:22:8a:10:41:b2:e7:
         cf:c3:9d:96:91:52:1e:aa:0a:6a:44:e4:00:d1:a2:8b:c7:82:
         5f:9e:d4:3b:3f:51:6e:81:4b:42:b3:00:2b:09:2b:c2:f1:ae:
         08:4c:b8:4a:2c:0b:4f:60:16:f6:53:b1:bb:ac:ea:c8:91:18:
         ea:bf:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:58:23 2026 by rpki-client