This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File:                     8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier:          FDyGAXkUeUd6D9g9q/QLkH130yfDyObR/Gi9Z3ordtI=
Subject key identifier:   74:2F:73:63:A4:D0:5E:91:BF:92:8C:57:6A:18:0D:E6:32:99:A2:EB
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer:       /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial:       07FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number:          07EF
Signing time:             Sat 24 Jan 2026 20:31:49 +0000
Manifest this update:     Sat 24 Jan 2026 20:31:48 +0000
Manifest next update:     Sat 31 Jan 2026 20:31:48 +0000
Files and hashes:         1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: TFT/e+aQ4oHRAVCCsvULZrsNSYZSvOBbqUgsEhV4Skk=)
                          2: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: nma4xkXXDMJG7QciaymwPc3dJsJxzYlJjEDf7RTo8RE=)
                          3: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 3Y+VOrnBdBlECnUUYO6R0FZpFa6yBZQUedvMj8T1PFQ=)
                          4: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: 4ZdvboJ8mrbqq75dMjpcRNVXA0/Wmpp30CU0dXWt/yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
                          rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2045 (0x7fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
        Validity
            Not Before: Jan 24 20:31:48 2026 GMT
            Not After : Jan 31 20:31:48 2026 GMT
        Subject: CN=69752c35-74d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:18:e3:a1:ec:60:5d:e4:08:4c:10:7a:d2:
                    9f:76:4c:86:e2:1e:16:27:27:3d:d3:98:33:ee:c6:
                    34:4e:89:07:45:b4:41:1a:81:17:ad:51:b7:38:62:
                    2a:a9:a8:89:b8:33:98:28:b8:d3:ee:59:7d:92:e4:
                    dc:07:16:3e:a1:3c:59:20:7a:01:ff:ae:e0:b5:cc:
                    7f:1b:dc:f3:b7:c7:24:7c:7d:a2:35:c2:8f:36:fb:
                    d5:e9:ab:3a:29:33:68:01:eb:37:30:15:86:c7:3f:
                    4d:1c:9d:17:ff:05:cd:30:c0:3c:e1:de:53:c7:df:
                    75:3a:f2:e3:4d:3f:de:ba:ce:8a:35:03:25:24:8d:
                    12:7d:6b:c5:47:b6:fc:ed:6f:07:f6:98:50:c5:04:
                    f6:eb:37:6c:4a:4b:e9:a9:2c:d3:11:6d:a8:6a:e3:
                    8e:d2:e9:98:ea:4f:20:25:48:8e:b8:39:af:93:31:
                    72:fa:6a:ab:38:05:e5:fc:73:1b:70:cb:29:00:61:
                    d5:67:32:63:b5:13:97:e2:e1:f5:8e:f8:ac:6e:cb:
                    a8:cd:f8:6f:83:82:2e:12:f5:be:10:e5:78:7c:40:
                    5b:47:be:0e:9a:69:1d:9f:1a:8c:a2:cf:3a:1b:08:
                    69:aa:35:85:0f:34:e2:80:8b:5f:1d:4f:8e:f5:9b:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:73:63:A4:D0:5E:91:BF:92:8C:57:6A:18:0D:E6:32:99:A2:EB
            X509v3 Authority Key Identifier:
                keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:69:8f:0e:2e:73:87:80:a0:52:37:77:b6:74:b9:f1:99:56:
         b1:b1:80:86:1c:e1:8e:b5:4b:f4:f1:98:b5:99:27:a8:10:e4:
         01:98:e1:39:8f:16:8c:ee:2b:17:3d:fb:78:21:ea:21:1e:db:
         e7:d8:0d:55:05:eb:02:99:fe:85:0b:9b:f3:36:32:35:83:eb:
         bb:31:22:a4:8b:9c:33:a3:cd:0e:61:19:1d:4d:7f:f3:c4:c0:
         f8:18:82:84:89:33:d7:c1:0b:05:2f:f5:68:2d:98:d9:d2:e1:
         85:b2:ca:a3:bb:81:11:c5:27:53:1a:00:cd:c5:c5:3e:7d:83:
         73:b7:88:8c:78:36:c2:6a:4f:f4:a4:0a:51:80:25:e7:ae:e5:
         44:42:80:57:da:27:49:1a:98:cc:9d:e7:e2:65:6c:84:f6:04:
         ce:1a:ec:a1:9c:19:02:ce:37:b7:4d:0b:30:c1:18:16:3a:a1:
         ec:b1:8c:6f:2d:9a:3b:e0:85:b9:13:d9:87:fe:31:0b:3b:38:
         74:15:b8:e4:cd:fb:1a:80:90:b1:bb:6a:90:d2:5d:83:52:ad:
         f7:fa:33:c7:7d:9d:47:2c:78:ad:ff:32:c9:2f:f5:61:7e:88:
         1f:1a:fd:bd:e4:06:e1:3e:15:4a:6d:d3:d8:9f:6c:b2:f8:32:
         a7:90:ac:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:53 2026 by rpki-client