This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File:                     f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier:          XW8HQVVY39Z5d4uRKmZ9euq2Ju3spumGjwDeDKWKx+Y=
Subject key identifier:   DC:91:D8:23:36:2A:D2:47:1E:83:B3:A0:36:AC:72:55:82:FB:E0:C7
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer:       /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial:       09FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number:          09F6
Signing time:             Mon 12 Jan 2026 19:19:09 +0000
Manifest this update:     Mon 12 Jan 2026 19:19:09 +0000
Manifest next update:     Mon 19 Jan 2026 19:19:09 +0000
Files and hashes:         1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: IuXju1WqAlNVlYbGw9zqrLNaxqsRegskch9dhoLpcGk=)
                          2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: 0mkhd4eAuT9/naCzlV+KcaUe14bdcrlkm0xwSgwQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558 (0x9fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
        Validity
            Not Before: Jan 12 19:19:09 2026 GMT
            Not After : Jan 19 19:19:09 2026 GMT
        Subject: CN=6965492d-2915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:fd:61:7f:4e:58:0f:e9:df:42:e2:75:bb:
                    e9:89:c8:20:53:4d:a3:37:7e:04:14:c6:40:d7:b3:
                    c1:7c:1a:41:64:0a:3e:94:7a:1b:f8:09:d9:b8:24:
                    f8:70:d0:24:16:2a:87:b8:94:7e:ee:3b:79:c0:7e:
                    9e:e9:e5:9c:ac:6c:28:ca:d7:aa:3f:2c:0e:2c:f7:
                    5e:5f:ff:33:95:e0:d7:3c:fe:b1:87:0b:0f:cb:7d:
                    45:9d:d9:1c:10:5b:43:75:2c:0c:61:f0:6f:d4:be:
                    76:30:54:31:74:71:b8:41:0a:44:3b:78:5d:ea:ad:
                    4a:60:88:a8:27:ce:5c:0a:c2:44:36:aa:89:c2:4f:
                    13:94:50:6e:0e:4e:9c:65:16:94:50:e8:2e:c7:87:
                    0d:e5:56:64:b2:d6:fd:29:ac:51:01:1b:44:6f:44:
                    6b:31:9b:60:3f:64:8e:c5:ac:aa:77:ce:eb:c4:d8:
                    62:0a:43:3c:ce:23:11:18:0c:c6:47:47:cf:3e:ca:
                    76:69:9f:ad:95:1e:6d:43:ca:b1:a7:47:66:bb:27:
                    9b:dc:a3:22:21:e4:fd:b8:d4:fd:d3:51:c3:e5:4e:
                    94:46:03:be:dc:95:d5:cb:9d:cf:76:d3:3b:ba:7c:
                    ef:b6:a4:0d:5a:38:6a:5c:38:69:f9:54:16:db:13:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:D8:23:36:2A:D2:47:1E:83:B3:A0:36:AC:72:55:82:FB:E0:C7
            X509v3 Authority Key Identifier:
                keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:56:20:f0:a1:01:83:3d:2f:b9:4f:b1:53:25:0d:66:0d:
         84:66:18:bf:13:82:55:22:52:6b:d4:c8:7f:1a:e9:4b:cc:ce:
         b6:5f:c6:f4:fb:8c:5c:ae:3f:83:3c:54:23:38:97:0d:23:95:
         cf:00:9e:75:22:f6:d7:6c:50:e0:5b:a3:99:55:6a:fc:95:d7:
         9e:e4:42:ec:15:7e:f8:c8:14:7d:5f:b4:87:24:c1:34:d1:65:
         b2:59:c8:06:91:1b:c3:6b:db:f2:3c:52:7e:bf:29:16:7d:6f:
         dc:78:e4:85:ea:1a:89:ba:78:9b:cf:d8:a4:11:af:9a:32:0b:
         ed:60:f9:b1:69:4b:e4:d2:6f:a1:ee:df:13:b2:38:45:cb:c4:
         61:5b:54:f1:e7:f1:aa:e6:2e:1a:22:fb:2c:b8:94:d4:26:05:
         42:81:e9:2f:3d:41:8f:35:d6:f2:d4:4d:21:02:42:97:38:24:
         51:ec:bc:25:24:5b:db:63:fa:c0:1c:89:2e:fc:6c:4c:7f:2b:
         93:08:06:8f:16:81:5f:4a:61:b6:90:2d:50:8a:dc:96:7a:bf:
         4d:7b:26:ed:fc:5e:65:a6:fb:c9:48:e7:f3:c4:a0:45:4a:ff:
         ea:08:30:7e:bd:0e:94:31:de:1c:1f:27:8c:61:9c:12:e9:44:
         cd:d8:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:29:50 2026 by rpki-client