This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
File:                     1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json)
Hash identifier:          luE10HcOAMt8iqbJ0Jlrpow/0SfFGx23wK865e/tyiw=
Subject key identifier:   F8:0C:4F:D8:37:76:FD:8E:FA:C2:4B:A9:3C:D8:6C:F2:4E:B8:CB:A7
Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Certificate issuer:       /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Certificate serial:       05A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
Manifest number:          0599
Signing time:             Sat 24 Jan 2026 22:28:01 +0000
Manifest this update:     Sat 24 Jan 2026 22:28:01 +0000
Manifest next update:     Sat 31 Jan 2026 22:28:01 +0000
Files and hashes:         1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: PUglckIdnv+kg18a10y8gNdKtOp5CGrRvcEA7krKjg8=)
                          2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: ym0ByuNOndht95n45vmzI/LTnp1dbpbPf/6SayzC+38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
                          rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
        Validity
            Not Before: Jan 24 22:28:01 2026 GMT
            Not After : Jan 31 22:28:01 2026 GMT
        Subject: CN=69754771-c8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:f2:5c:02:8b:68:4a:46:ed:33:fd:05:e4:
                    8b:11:c7:7b:c0:e9:bb:83:18:54:a6:2d:a5:95:63:
                    90:50:bd:38:dd:43:68:b1:cb:33:8e:c5:7b:d7:a0:
                    8c:d3:ad:73:07:8a:b0:18:a7:4e:88:44:6c:bd:65:
                    5a:32:24:07:5c:a6:3d:78:09:a2:cf:30:ec:5b:41:
                    47:ab:53:e2:c1:cb:76:82:f7:91:08:98:1a:a0:ae:
                    b7:80:0a:0c:ff:26:02:65:b2:64:da:aa:04:db:02:
                    7e:e5:03:7d:31:a7:20:8d:f5:01:ab:67:a0:d8:80:
                    53:46:4b:e6:a0:5c:4f:7f:19:49:7d:e0:bf:b8:6e:
                    2d:20:26:74:24:80:8f:2a:1d:46:e8:18:57:b7:92:
                    52:ba:6d:51:b6:97:f4:f7:a5:bb:df:e8:be:d1:3c:
                    c5:af:0e:8d:b2:30:d0:0b:99:8d:c0:d4:09:52:fc:
                    c9:47:de:33:69:1b:fd:07:b1:03:06:6f:13:7c:9f:
                    62:d5:76:80:40:dc:d2:30:b8:d4:45:f2:62:ce:c7:
                    8d:11:e7:63:39:f8:59:87:a7:a4:ce:64:01:1e:3e:
                    90:8a:a2:a9:66:b4:9e:d7:c5:59:8f:c3:27:eb:5b:
                    43:c8:67:74:83:6f:8c:fb:b9:e9:b4:60:e0:f7:32:
                    4d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0C:4F:D8:37:76:FD:8E:FA:C2:4B:A9:3C:D8:6C:F2:4E:B8:CB:A7
            X509v3 Authority Key Identifier:
                keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:72:c1:48:9f:59:a8:3b:ac:be:a4:8d:e1:d2:40:a6:9d:3b:
         28:ed:48:44:1e:32:4e:a5:7d:b1:de:3d:47:69:19:f5:4b:f6:
         22:8d:33:ed:cc:06:1f:c0:cf:b5:26:6d:72:84:b6:30:28:e2:
         56:0b:70:a7:d2:a1:b9:59:2b:fa:4d:e6:81:64:2c:df:68:2d:
         5a:b8:e1:6b:39:3c:e4:db:d0:ea:38:d6:eb:3c:74:6a:20:70:
         16:50:63:b0:97:8b:33:c6:a2:8d:d9:a1:e0:95:62:8d:26:6a:
         e1:6a:fa:74:55:8e:15:af:d9:e1:71:d8:83:07:c5:b6:0f:42:
         3f:ec:40:4b:f5:3d:58:23:b5:9a:47:40:34:45:54:63:96:f2:
         0f:c9:80:5d:56:84:75:01:8e:4e:52:bd:93:45:85:2b:72:86:
         38:d6:d8:2d:d2:65:e3:89:86:b9:b9:6f:62:e8:7c:6a:4a:af:
         82:fd:88:db:65:d5:4f:ff:20:12:1c:b2:55:72:09:8c:ec:b8:
         75:5f:78:92:41:8f:7b:7d:72:8a:0e:11:4b:6e:35:bc:33:08:
         c2:cf:52:97:5c:bf:5b:c9:0a:4c:3f:bb:92:31:64:73:ea:ce:
         34:87:43:04:e0:c5:50:4c:b5:5b:37:65:83:5f:08:dc:a5:15:
         a7:37:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:24 2026 by rpki-client