This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File:                     9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier:          6Jw4epW9D1TIXyD2qjiuOJi1tj7V5bD9QlrB9sMHHZA=
Subject key identifier:   69:25:FF:9D:D9:8A:9A:62:B6:1F:18:BD:89:84:23:94:A6:B6:42:77
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer:       /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number:          D7
Signing time:             Sun 11 Jan 2026 04:54:54 +0000
Manifest this update:     Sun 11 Jan 2026 04:54:54 +0000
Manifest next update:     Sun 18 Jan 2026 04:54:54 +0000
Files and hashes:         1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: vNSKh6AFISGxzxSlt62Rxdafyk3ukcRLcR97uCFtLdA=)
                          2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: i0ORlhZOKsAGkbvWhGFe0p7d5mIlyQ7Mxy4cSYnkDVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 04:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
        Validity
            Not Before: Jan 11 04:54:54 2026 GMT
            Not After : Jan 18 04:54:54 2026 GMT
        Subject: CN=69632d1e-a9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:0d:e0:d6:a0:6d:5a:a7:7a:f9:c1:ea:b4:
                    9a:31:a6:e5:d2:24:42:67:a7:12:da:a3:40:50:dc:
                    3a:8d:34:7b:9b:96:f7:9c:c3:62:b2:67:8b:c6:2b:
                    3c:a7:7b:ba:6b:df:2e:64:15:f4:9f:03:14:40:b3:
                    e2:aa:ae:e3:ab:eb:63:ae:11:65:bc:e6:68:df:3d:
                    99:14:7c:4a:07:bb:c5:ac:6d:4b:9b:71:a7:3f:fd:
                    56:80:c5:be:f1:e3:81:ce:12:da:c4:d6:ca:73:fe:
                    1a:22:e5:4b:ca:ec:dd:20:7b:a9:32:15:59:8e:e8:
                    cd:a7:45:9d:c8:e3:74:05:42:45:6d:91:ac:87:e3:
                    4b:1d:2b:29:70:c5:c7:ce:65:26:3d:d5:19:ca:d3:
                    89:ce:1f:e6:3f:30:88:25:fe:a2:83:28:1f:24:d4:
                    41:28:f4:22:d8:b2:34:6f:22:26:cf:79:53:58:06:
                    46:98:e9:c2:de:a5:90:0a:4d:b6:73:ed:c4:22:16:
                    70:00:d4:32:4d:cb:d3:6a:f2:e5:85:06:3f:d4:08:
                    8a:d3:54:7d:1f:6e:5e:43:f0:c5:a1:d4:51:76:c5:
                    5f:7d:c4:ea:f8:a5:90:7d:d3:6f:66:51:9b:32:be:
                    7b:e3:96:f8:6c:0a:53:bf:14:c5:a9:de:19:ee:96:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:25:FF:9D:D9:8A:9A:62:B6:1F:18:BD:89:84:23:94:A6:B6:42:77
            X509v3 Authority Key Identifier:
                keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:52:c7:a0:4a:cb:c7:95:cb:d4:41:47:24:0f:ad:e9:d0:ff:
         d4:78:3a:85:70:49:c1:23:8a:e9:46:9d:e9:5a:39:aa:61:b6:
         9e:b3:f0:9d:ab:38:2a:c6:0b:94:fa:da:89:14:21:19:01:c4:
         12:f5:a3:48:fa:b0:47:50:24:61:68:e9:1e:86:12:ae:da:20:
         f1:7d:ed:a8:7f:19:47:86:17:4d:dd:54:79:d2:6a:0b:d9:a4:
         d5:b3:10:d1:4b:06:49:39:92:f9:8f:da:39:76:c1:70:49:0a:
         b6:11:ac:8b:c7:55:a3:7e:30:85:b5:d0:e8:6f:d9:62:89:df:
         e9:98:db:78:9b:5d:cf:90:22:d5:44:b2:85:95:75:4f:6e:4c:
         fc:5b:37:b3:fa:e2:8c:94:c0:9c:fe:33:1e:d1:7d:5f:e5:81:
         de:30:b5:59:47:ba:d7:93:3c:6b:22:2b:a3:6a:5c:df:b6:85:
         8d:65:6c:d6:c7:15:cf:07:93:e4:82:94:7f:07:1d:a3:d0:a9:
         0b:e4:fa:62:23:24:04:f3:5a:e1:ed:16:b6:62:76:c7:8a:2e:
         12:45:f2:c4:a4:52:fc:73:01:16:94:c3:31:ca:90:ab:3b:aa:
         82:3d:36:f6:3e:83:2f:b6:b2:ef:53:db:c7:cb:f0:ac:15:eb:
         ba:e8:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:58:29 2026 by rpki-client