This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
File:                     irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json)
Hash identifier:          WCUAzDbUk7ZeKPnkK4QJTV2h5nO9oDdjgi+AXS7QTaI=
Subject key identifier:   B6:40:D6:4E:0C:D5:5A:32:6A:3C:52:79:6B:3D:4C:16:7D:2D:C0:D1
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Certificate issuer:       /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
Manifest number:          AB
Signing time:             Fri 23 Jan 2026 05:20:16 +0000
Manifest this update:     Fri 23 Jan 2026 05:20:15 +0000
Manifest next update:     Fri 30 Jan 2026 05:20:15 +0000
Files and hashes:         1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: RM/priEPAuns3zEIxY8FckJIocfvJ/jYj6tFdzwcXeQ=)
                          2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=)
                          3: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
                          rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
        Validity
            Not Before: Jan 23 05:20:15 2026 GMT
            Not After : Jan 30 05:20:15 2026 GMT
        Subject: CN=69730510-0a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:79:c7:88:74:9b:11:00:a8:f5:30:0c:e2:
                    fb:39:8d:ed:b9:82:17:8e:34:ef:9a:d0:66:f0:73:
                    ba:9b:47:16:1d:91:dd:76:fb:61:21:b8:17:fb:0d:
                    b6:85:38:bb:03:64:e7:9a:f6:3a:df:03:e8:d6:b1:
                    22:8f:ff:7a:45:4f:78:d5:a2:28:48:a6:d9:89:da:
                    b3:f9:d2:08:32:25:7d:64:7b:51:f8:23:34:d4:07:
                    f1:00:b0:6d:08:60:b9:a2:8c:09:f4:c2:27:08:2c:
                    6b:a3:84:ce:ae:ab:6e:5a:a0:81:5d:48:9c:8b:0d:
                    54:21:9a:89:2a:2b:12:48:12:36:43:fc:f9:2f:67:
                    66:78:9c:4f:9f:23:ae:82:87:ea:86:f9:44:b1:ca:
                    1d:55:55:2d:32:37:19:d5:2a:c7:4f:98:a3:9a:11:
                    a8:9b:9a:0d:cc:bf:ad:35:64:fd:97:a4:a1:66:bf:
                    31:70:84:bd:65:21:18:a6:cc:39:d9:ec:19:a3:39:
                    6c:13:e9:a8:bf:2f:10:4c:17:70:16:f7:5e:1b:5d:
                    36:21:07:66:92:72:a1:d0:2b:9e:c6:68:ba:34:86:
                    cc:e9:85:77:d5:d4:dc:62:3e:30:93:73:35:ca:5c:
                    c5:b7:50:34:2d:ae:15:52:84:55:93:be:3e:2a:31:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:40:D6:4E:0C:D5:5A:32:6A:3C:52:79:6B:3D:4C:16:7D:2D:C0:D1
            X509v3 Authority Key Identifier:
                keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:04:ab:e5:38:01:2d:7e:36:b5:00:d7:48:a5:7c:3a:7d:
         95:3e:b4:b7:c7:83:7b:34:51:aa:f0:6a:ca:fc:da:51:c7:5d:
         bb:6a:d8:0f:dc:d7:4d:f3:d6:4c:8e:51:f3:8d:8e:8d:3b:a6:
         ae:4d:32:60:7b:d0:7a:1a:e1:d3:01:5a:af:36:ec:a8:72:38:
         96:08:14:b0:45:e1:7c:cb:b5:63:26:41:99:38:d0:6a:c0:ea:
         44:70:78:e3:06:7d:ef:03:91:8b:db:f1:44:df:9a:4e:d8:da:
         91:71:eb:10:7e:73:dd:d7:82:86:44:42:f3:6d:ba:14:d7:0f:
         7f:67:4a:6d:a3:17:ea:19:5c:58:51:ed:d8:2a:eb:94:ee:70:
         76:6c:ed:a7:4c:0b:33:7e:82:60:a6:7e:4f:23:ae:e5:ef:5b:
         00:b7:1c:ab:f1:28:bc:85:aa:24:da:93:a2:f5:54:fe:53:42:
         98:4c:49:44:94:02:04:a4:51:8d:58:d4:b3:ca:ad:47:b4:ef:
         97:f4:f7:74:dc:71:1e:ed:e4:a6:4e:97:48:9d:ac:48:fe:1d:
         82:00:bb:f1:56:e0:ec:33:8c:f4:55:93:37:1c:b8:41:a9:3d:
         44:11:73:58:a4:d7:0b:d6:a5:12:14:cf:5d:a5:f7:3a:86:26:
         6e:be:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:32 2026 by rpki-client