This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File:                     iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier:          ZknGl0LZBcCUxdBvS0BURL79tydGDu+b1Vd8nXmYg5M=
Subject key identifier:   D9:8B:55:A7:95:09:6A:04:BE:AB:42:DA:00:55:B8:BD:BB:25:13:2F
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer:       /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial:       07AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number:          0798
Signing time:             Sat 24 Jan 2026 20:55:40 +0000
Manifest this update:     Sat 24 Jan 2026 20:55:39 +0000
Manifest next update:     Sat 31 Jan 2026 20:55:39 +0000
Files and hashes:         1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: 9ZiDDzlu4V7zVHfyR+3KTQUKHAzdAWj/CW5M0fcrvuk=)
                          2: 9DFB3106BBB811F0B79DF618C4F9AE02.roa (hash: 9JynBo7HS6HADYcnvYCEtq7zImkU98cFBKE3P93Ru6k=)
                          3: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: I55/P+QqF3ScWXVdtsdcPhGZLCr6f30z4GF4N/wXUM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
                          rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
        Validity
            Not Before: Jan 24 20:55:39 2026 GMT
            Not After : Jan 31 20:55:39 2026 GMT
        Subject: CN=697531cc-84d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0e:54:9d:e1:70:8d:c1:be:0c:57:7d:c0:ef:
                    78:de:33:af:b9:00:c4:de:1c:95:88:17:18:bc:c7:
                    42:8a:9b:d0:a6:43:1a:10:2b:18:07:d7:df:79:26:
                    d5:9e:5a:e2:e4:30:c7:2d:79:2f:97:da:b1:3d:41:
                    f5:4a:36:80:17:2f:ec:ae:fc:b5:87:bd:97:b7:62:
                    6b:61:84:e0:20:c5:9b:cc:9c:2c:e6:b5:30:24:18:
                    8c:98:50:09:d5:4b:9e:25:15:6c:69:b1:c2:44:f9:
                    a8:30:07:4d:5b:9a:a5:aa:37:f4:51:22:31:6a:07:
                    a2:fd:6c:9f:19:31:2f:ea:bc:40:3f:37:11:b4:ec:
                    8f:45:ce:1c:f8:bd:89:80:a9:b1:74:2f:1c:c9:3a:
                    0c:15:ca:2c:91:e9:20:63:02:64:b2:86:0b:10:10:
                    fd:c9:fb:fd:f1:65:be:71:45:3a:68:a6:57:fd:d4:
                    3b:3a:e1:5e:b3:94:3f:b7:5f:72:33:57:ff:a8:32:
                    46:ac:b7:7c:51:13:6d:fc:26:fb:53:62:1a:af:c7:
                    a4:f0:7b:53:1b:17:76:f2:52:c7:5c:a2:3d:2d:be:
                    98:64:0f:c6:c9:97:82:f8:9c:bc:82:cb:3a:74:b8:
                    e1:aa:51:62:c1:84:e7:71:13:5a:c9:0d:a4:e9:0a:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8B:55:A7:95:09:6A:04:BE:AB:42:DA:00:55:B8:BD:BB:25:13:2F
            X509v3 Authority Key Identifier:
                keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:ed:bd:16:84:30:f4:d0:a8:7c:d4:45:1f:56:c0:91:5c:
         91:17:d7:74:34:86:12:d2:cc:dd:be:27:9d:57:04:4c:7c:f5:
         04:9f:cd:0b:59:fd:81:05:9d:07:4c:17:4a:89:2b:1f:0c:7d:
         e5:1b:ab:3e:78:f9:f7:99:55:97:a1:e8:d3:21:c0:11:ea:f9:
         7b:5c:13:01:f6:e6:17:83:d9:5f:a0:32:6c:18:fb:bb:3b:73:
         19:b2:5d:01:d1:1b:50:94:45:0a:a6:19:3e:4a:7e:4a:03:e1:
         28:2b:fa:4d:b0:c2:ef:40:08:6e:01:26:bd:b2:0a:16:84:6c:
         42:32:90:d9:7c:86:57:ea:ff:a0:11:ae:0c:fb:31:34:e2:74:
         b0:50:5f:19:2b:58:96:6e:70:2e:87:f2:62:d8:57:ff:d4:da:
         a9:69:9d:7f:3c:81:50:4a:22:dd:c0:cc:36:c7:15:85:6e:24:
         a3:5a:fb:35:f5:66:fb:18:76:bd:46:08:c4:5f:7a:8d:9e:ca:
         c5:92:02:67:7b:16:14:a2:af:b9:a6:32:58:ac:ff:a6:5c:38:
         7a:d7:4f:30:90:78:a9:0e:93:b5:3b:c2:82:44:d6:14:a6:0d:
         ad:69:b0:60:1f:1e:c5:4e:12:41:45:65:ed:e3:75:b0:7a:45:
         1d:d7:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:38 2026 by rpki-client