This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
File:                     Ilh8wstvNRBjeD-xz9pm5E4uysE.mft (raw, json)
Hash identifier:          HBZX2NKU/PKzyWlEpYdtqy4hfc/mdnBG82ESGOdTVzM=
Subject key identifier:   6B:F3:0B:83:C7:B6:E8:B9:D7:4C:49:3E:99:B4:EE:94:F3:A1:50:E4
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Certificate issuer:       /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
Manifest number:          8E
Signing time:             Sun 25 Jan 2026 05:40:18 +0000
Manifest this update:     Sun 25 Jan 2026 05:40:18 +0000
Manifest next update:     Sun 01 Feb 2026 05:40:18 +0000
Files and hashes:         1: Ilh8wstvNRBjeD-xz9pm5E4uysE.crl (hash: A9iu7I2GD5gO1bs2abJJmkkpZNClLbPl2MZGxVTRw4Q=)
                          2: BDA4863C1E6111F09E161078C4F9AE02.roa (hash: 3wClZfyrRuvHiw5+gXU2O2uGIydycpdkHEs8+vS/Fqc=)
                          3: 874D690486F911F0AEE9D81BC4F9AE02.roa (hash: d/YokLZlSeyNxo7/k+XKoCvVYm4Hgi7kRhirRzPKQaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
                          rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
        Validity
            Not Before: Jan 25 05:40:18 2026 GMT
            Not After : Feb  1 05:40:18 2026 GMT
        Subject: CN=6975acc2-a478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:a7:9f:3b:39:aa:7d:30:5b:bf:34:46:65:
                    a8:9c:be:0b:44:2e:81:0c:51:9b:18:78:87:49:a1:
                    0c:df:ae:2d:ab:5d:9d:3b:96:fb:19:91:6e:90:bc:
                    cf:f4:3d:b8:12:50:08:16:aa:93:dd:4a:72:2d:2e:
                    11:af:d5:c5:b2:6c:ac:65:ea:30:a2:6c:1a:21:ca:
                    59:81:be:91:4d:82:99:f7:b7:5c:52:3c:cb:97:92:
                    5a:34:d8:e5:60:c9:47:a2:3f:7e:e9:66:55:20:2c:
                    1c:5d:33:34:b0:3b:aa:91:5b:95:21:38:91:84:68:
                    b0:ae:ca:18:ab:13:14:ec:f5:ad:2c:39:ae:b8:a4:
                    c3:4f:20:00:7c:36:b7:12:72:e3:e1:bd:e8:a7:b2:
                    d4:7f:07:9b:78:dc:ba:27:3f:e6:56:8c:94:d3:41:
                    f0:d2:a9:8c:fc:b6:9b:b5:01:5a:71:fb:e6:08:07:
                    f9:15:d8:74:30:10:09:60:37:a4:0c:f1:73:97:1f:
                    6d:91:df:82:23:c1:db:ff:f4:3c:3f:8e:37:80:6a:
                    67:ee:30:f6:e5:47:75:ba:d1:1d:86:1d:8d:08:30:
                    94:69:f6:b7:d3:3b:de:02:b9:93:d7:c4:bd:3c:48:
                    e5:ca:54:f8:38:37:a8:85:5f:21:c9:2b:85:99:9f:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:0B:83:C7:B6:E8:B9:D7:4C:49:3E:99:B4:EE:94:F3:A1:50:E4
            X509v3 Authority Key Identifier:
                keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:e7:84:a3:d6:58:79:30:34:44:12:42:55:e0:fa:f4:6a:
         0b:be:f6:00:74:1c:c9:b1:d1:49:14:af:c5:e7:93:64:5b:47:
         e8:5e:69:fd:20:07:19:5e:be:41:4b:15:ab:e7:25:8d:05:b3:
         4b:41:0e:fa:b7:35:21:d6:d7:c7:a1:94:3e:41:82:1b:ba:12:
         0f:2b:b2:13:15:64:2b:4c:6f:38:10:71:23:84:af:1c:5c:c7:
         3f:fb:7f:6f:47:28:fd:4f:1d:5d:c7:dc:da:5b:0b:2a:46:13:
         04:b6:7b:9a:d8:16:b7:fc:32:78:bf:f8:5f:b4:7c:67:b6:c3:
         fc:2c:81:6e:5b:77:91:e2:47:e5:64:be:58:a4:23:bf:5a:90:
         3d:de:c5:28:9d:9d:0e:cf:07:07:a5:60:fa:63:e6:ce:f7:1c:
         69:73:8f:d0:35:b0:45:10:f0:f5:82:8d:f4:d5:0a:d5:bc:8a:
         24:89:0f:f1:c2:09:22:07:dc:1e:ca:88:22:30:01:89:52:16:
         6c:50:00:e3:8e:71:9e:11:4c:6f:7e:26:b2:92:f5:f2:5c:e7:
         76:f7:96:d2:93:7b:4e:eb:53:8b:5d:0e:7d:5c:02:8b:2e:47:
         df:29:7a:13:57:6d:42:b2:b2:c7:d0:12:9e:11:31:1f:d7:8e:
         22:5a:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:35 2026 by rpki-client