This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
File:                     I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json)
Hash identifier:          6+SMjKxWi842X7mKcCsGDPRgIYRxMz3d38EX8TDQpEI=
Subject key identifier:   28:6B:86:00:20:26:80:4A:DD:52:5B:EF:FC:52:9F:BF:A3:27:09:8B
Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
Certificate issuer:       /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Certificate serial:       0642
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
Manifest number:          063C
Signing time:             Sat 24 Jan 2026 22:00:21 +0000
Manifest this update:     Sat 24 Jan 2026 22:00:20 +0000
Manifest next update:     Sat 31 Jan 2026 22:00:20 +0000
Files and hashes:         1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: 4gx33dUdp6e5A+zBUB33ZVectqNcOcA7zk0WLnyEPh8=)
                          2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: dCkT6bEicYFMQep7850krPGfdcTTuO3WSPylF2CQFFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
                          rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
        Validity
            Not Before: Jan 24 22:00:20 2026 GMT
            Not After : Jan 31 22:00:20 2026 GMT
        Subject: CN=697540f5-bd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:07:99:58:4f:84:46:db:fb:28:e6:f7:48:
                    5e:e9:e7:2f:59:c7:e5:5a:32:7f:b1:cc:6f:0e:fa:
                    e5:0d:52:f9:ef:30:59:f2:94:54:bd:eb:54:02:49:
                    7c:40:e4:16:c8:60:3d:60:3a:23:3d:40:53:dc:3e:
                    10:12:b2:f4:2c:4a:f9:38:9e:58:5d:f3:3a:3d:01:
                    fd:51:12:5e:1b:13:f2:0f:2c:91:13:b9:bf:3d:de:
                    d8:07:f7:3f:d6:be:94:61:88:55:2d:e6:3b:06:26:
                    43:88:b2:c6:cd:b5:6f:f0:b5:2a:06:7c:e5:cd:fe:
                    fc:92:b4:10:f5:64:69:96:53:08:07:4a:f3:11:43:
                    1e:ab:68:59:25:d6:f0:33:05:42:b0:8d:44:0f:09:
                    ad:1a:c9:f0:09:ba:61:cf:1c:d1:f7:27:2d:cd:f1:
                    45:87:d1:17:79:57:91:cd:c8:b2:2d:61:2e:24:67:
                    20:88:87:ba:a2:7a:90:d0:88:d0:ad:05:3d:e5:5b:
                    41:09:85:3b:cc:db:53:de:1a:02:70:a9:98:9b:c9:
                    ba:bd:fd:eb:aa:ac:21:92:cb:35:dc:7e:ac:f9:3f:
                    b9:37:53:9e:79:25:31:74:2c:ba:c2:da:ee:d1:f0:
                    99:cc:b4:00:d4:84:c6:96:b6:97:85:72:8d:70:67:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:86:00:20:26:80:4A:DD:52:5B:EF:FC:52:9F:BF:A3:27:09:8B
            X509v3 Authority Key Identifier:
                keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:64:93:62:40:75:73:22:46:48:56:a3:2b:18:d1:3a:f5:
         ef:68:a7:76:c9:03:1b:75:d7:d4:c5:b4:c2:e6:90:a1:b7:7a:
         a8:98:06:e2:b9:40:b2:04:41:22:1a:fe:09:9c:c5:0a:5e:40:
         0d:9f:d7:74:f5:1e:ae:69:56:ec:e7:4a:21:40:4a:18:42:1a:
         e0:a6:1e:92:9d:f3:53:cb:7a:9d:66:ef:47:43:d9:48:f3:53:
         5f:25:5e:65:88:d6:9e:2d:38:21:a5:ba:d9:aa:95:42:d3:9e:
         cf:d1:c9:7e:6d:46:b3:b5:b1:68:7a:7f:41:d8:c8:99:fa:33:
         ee:62:10:f3:31:58:62:21:a1:cf:fa:15:6d:16:35:d9:81:84:
         bb:9b:d2:ec:8c:3a:f6:07:c1:ce:57:6b:9d:ea:40:08:23:68:
         4a:a0:1e:d6:30:92:d9:46:14:a3:4c:42:39:37:db:d3:c6:95:
         24:9c:8c:db:5c:40:96:2f:06:c0:98:94:25:71:0b:75:a2:c0:
         c8:ec:0b:99:83:04:5e:c1:44:fe:1b:c4:0c:d4:c7:aa:74:d0:
         56:4a:5f:2d:12:fc:ea:7a:44:62:86:0a:70:b3:69:ee:e1:6c:
         c4:54:54:41:ce:e5:86:30:ef:76:46:b0:36:2f:7e:85:13:92:
         c8:d3:c9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:12:05 2026 by rpki-client