This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
File:                     U73ibYJfZ3-axChvmmdmH1xJtWk.mft (raw, json)
Hash identifier:          mzPXL0WrHCDOOAPBPgqXNCwMHv3MGYE71KU4vP9YUYg=
Subject key identifier:   8E:95:52:A3:85:E9:37:14:51:ED:57:60:45:66:D6:63:24:61:9E:C7
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Certificate issuer:       /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial:       09A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
Manifest number:          0979
Signing time:             Sat 10 Jan 2026 19:36:22 +0000
Manifest this update:     Sat 10 Jan 2026 19:36:22 +0000
Manifest next update:     Sat 17 Jan 2026 19:36:22 +0000
Files and hashes:         1: U73ibYJfZ3-axChvmmdmH1xJtWk.crl (hash: OUK9aeUVl/ExZsRmz+hXFJWhXUAH+3AR/ytF44fahpE=)
                          2: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (hash: KVB3EN6tICNkhnYw0xKL9CwQn9qOYhPXhmG08EEY8D8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
                          rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 19:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465 (0x9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1AE, serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
        Validity
            Not Before: Jan 10 19:36:22 2026 GMT
            Not After : Jan 17 19:36:22 2026 GMT
        Subject: CN=6962aa36-84e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:d1:55:e2:cf:8a:a2:55:25:8b:b4:bb:98:
                    3b:7a:c8:3e:08:73:89:c0:4f:ac:c8:a1:68:97:9c:
                    dc:9c:83:9d:f5:f5:ec:b3:77:52:e7:28:dc:2d:6c:
                    5e:2c:af:a3:17:b0:34:f3:b0:31:67:40:57:0e:a7:
                    42:a1:b6:17:65:43:9a:c8:b4:a6:77:b8:75:db:b0:
                    57:b8:28:d7:3f:20:56:69:8d:1c:fc:8e:1a:d5:5d:
                    8e:66:a0:40:3b:81:35:15:c2:51:68:4f:c0:0e:0c:
                    f0:26:40:b3:b8:54:45:f2:72:17:bc:4a:c9:9a:82:
                    d5:80:3e:b2:f0:03:67:9f:d2:1c:8d:60:eb:59:32:
                    4e:d3:38:1f:83:62:e8:8f:94:0b:35:a2:80:8c:d4:
                    c4:12:90:d0:4e:1a:a3:cd:42:d1:14:50:40:45:b6:
                    40:4c:42:55:79:f1:f7:1f:11:fd:fe:79:e8:55:7f:
                    f8:a5:49:20:a5:c6:0c:d5:90:2e:16:a4:4a:fb:f4:
                    0a:3c:ba:99:2e:27:5b:c6:8e:ff:15:a4:fd:a5:ce:
                    ea:c5:4e:15:06:d1:c0:ef:0c:9a:fb:0b:6d:15:39:
                    7e:79:e9:91:2e:dc:d6:4b:09:ec:e8:8d:c0:28:9d:
                    b7:f5:3b:45:dc:6d:f0:1c:06:60:c6:db:33:c7:00:
                    76:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:95:52:A3:85:E9:37:14:51:ED:57:60:45:66:D6:63:24:61:9E:C7
            X509v3 Authority Key Identifier:
                keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:bf:12:ea:33:8a:5e:97:4c:af:36:1e:a8:0d:5b:80:a2:3a:
         f8:3a:33:d9:58:9f:51:1c:ba:ea:bb:56:4e:e7:81:66:a8:0a:
         6d:3d:03:aa:e8:e5:19:0f:21:f2:9a:fb:d3:d8:3a:90:ca:66:
         fd:2b:3e:8a:5c:64:1f:38:ac:f9:c5:86:9d:90:28:70:c0:77:
         c9:ee:d4:db:a5:d9:45:7e:5e:cf:84:05:38:d7:78:04:c0:69:
         a3:b4:16:f0:0d:cc:69:b5:05:40:c4:9a:93:71:0f:5d:0e:8f:
         a6:19:bb:09:d7:e0:1a:45:03:c0:64:50:df:98:cd:92:58:06:
         04:ca:1e:20:74:50:72:04:14:85:85:3d:6c:6f:6f:44:de:03:
         70:a7:ad:bc:d0:c7:e0:41:d7:bc:16:f5:9c:fc:a5:25:0f:c6:
         b3:df:df:c2:a6:8f:47:cb:5f:59:a5:60:b0:37:e7:10:94:e5:
         69:d7:af:b5:90:4f:fd:f6:c6:87:d0:b6:c9:a6:3d:88:60:fd:
         b8:55:9f:02:66:46:48:71:db:c5:75:41:f5:a6:a9:52:a8:a3:
         6b:b1:53:c1:70:be:be:dc:9d:ee:30:d8:c8:65:7a:6f:d6:95:
         4f:e7:d2:96:eb:c5:63:67:90:1e:81:84:f0:fe:aa:34:fe:14:
         0f:89:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:05:19 2026 by rpki-client