This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File:                     aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier:          QVB9vhXm3rnPuml00y/zlrUlZlSvFfvgtLc5EDZUIPY=
Subject key identifier:   88:0F:39:74:3A:67:6E:78:BB:A1:B2:52:04:C2:3F:35:41:12:3D:33
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number:          0224
Signing time:             Sun 25 Jan 2026 01:57:03 +0000
Manifest this update:     Sun 25 Jan 2026 01:57:03 +0000
Manifest next update:     Sun 01 Feb 2026 01:57:03 +0000
Files and hashes:         1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: RfLU3DcYbsP0817D+tfWn6do0meAM6j7fVKxzLytocM=)
                          2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=)
                          3: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=)
                          4: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=)
                          5: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: 1iYx6AnDG5k3WAo1cEbcn3Zch3QKy9Aj+tVhGhOpm2M=)
                          6: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /H0+uJjrBUM5k1a0PlilTjkv6OXrTMlJFAf/4vjgSHc=)
                          7: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Jan 25 01:57:03 2026 GMT
            Not After : Feb  1 01:57:03 2026 GMT
        Subject: CN=6975786f-2a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:7f:f5:cc:37:b4:b6:d9:c5:89:c3:92:25:
                    74:d2:7b:a7:5e:7b:72:bf:0a:51:94:6c:38:b3:b1:
                    a4:b4:54:0a:85:ec:f5:36:00:f9:48:9d:55:8d:fb:
                    62:d5:19:27:57:81:cc:22:d7:1e:e0:f9:ef:0f:e8:
                    88:e0:c9:29:a0:76:5c:79:2e:eb:df:8e:04:18:7b:
                    15:98:d0:7f:48:07:4c:90:e2:0e:a8:fe:20:e4:c5:
                    1d:8c:0f:67:91:0e:eb:68:47:60:c9:34:13:59:20:
                    5d:ff:d5:2a:5b:22:68:4e:ac:8d:60:68:e7:69:31:
                    c8:c7:62:3f:c7:f0:0c:9b:00:c0:4d:c6:7c:a1:79:
                    1a:0e:95:26:7e:d2:36:20:ba:72:0d:c2:fa:bb:c2:
                    f0:46:c6:8c:ff:e3:68:92:c2:0a:2a:f6:f1:9d:67:
                    66:3e:51:09:58:2b:3e:c4:c8:7b:0d:6e:a2:a1:c8:
                    13:6d:a2:6f:b3:66:86:26:6a:3e:0a:29:4d:03:f3:
                    c0:35:63:ee:92:d8:ff:0f:3e:f0:74:72:b9:d5:18:
                    38:5b:b6:eb:04:8c:4f:39:e9:bb:60:fb:20:e9:07:
                    e6:41:5a:c7:81:c9:66:16:d4:70:0d:03:ce:a5:d6:
                    ab:65:95:ce:cc:3e:01:05:57:6d:bd:26:04:8f:d4:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0F:39:74:3A:67:6E:78:BB:A1:B2:52:04:C2:3F:35:41:12:3D:33
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:c1:d4:ad:59:18:a1:7b:e6:a2:ef:39:17:61:e7:16:43:
         98:27:97:1c:1d:5a:bb:57:76:36:78:64:f7:55:5b:aa:93:d4:
         11:33:e1:0e:f5:1d:66:22:82:b8:a0:c4:86:73:58:77:14:97:
         3f:7d:88:e5:3f:f3:75:f8:c7:0c:73:ee:2d:54:5c:d8:2a:8c:
         2a:cc:cc:b3:45:26:02:4c:67:dc:d7:d9:3f:1f:89:6b:61:e0:
         39:7f:3a:d8:6b:30:19:92:69:16:e3:8f:a8:b7:9d:9c:64:cd:
         df:b8:de:d7:89:5e:d4:92:d2:51:f1:72:c9:3c:89:43:0f:18:
         be:d6:fe:bd:51:ca:43:53:ea:14:71:93:30:31:c0:10:91:3f:
         9a:b7:e4:fc:11:36:a5:56:ba:05:77:c9:a5:7e:78:b9:99:2a:
         48:ef:7c:28:f9:d5:36:ee:38:e1:6b:23:05:1d:cc:ca:28:e4:
         95:d0:26:61:3d:dd:b0:aa:42:72:8f:22:2c:7b:12:a2:ca:6c:
         fa:13:52:ee:46:0e:be:72:a8:8f:43:e8:80:ac:c5:85:24:1c:
         8b:b8:66:1a:6a:14:8a:f5:1b:14:e4:d4:63:61:c6:43:42:61:
         ee:dd:9c:03:4e:bf:6a:e3:41:09:5e:2e:af:30:d8:d1:98:1b:
         71:11:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:08:47 2026 by rpki-client