This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File:                     1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier:          myFz4ET4Wr3I6N9Kr4zlCgB9CSxUPZs3KlxowWNPxZ8=
Subject key identifier:   82:CF:79:07:41:DA:25:82:9B:A9:5F:5F:14:2F:C1:17:05:9F:D3:B1
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number:          0183
Signing time:             Sun 25 Jan 2026 03:04:16 +0000
Manifest this update:     Sun 25 Jan 2026 03:04:15 +0000
Manifest next update:     Sun 01 Feb 2026 03:04:15 +0000
Files and hashes:         1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: jjWWzQQVv6T6iiUG3t4e5CSCxcgfU0/W4J4YaE7nHNY=)
                          2: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=)
                          3: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=)
                          4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=)
                          5: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=)
                          6: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Jan 25 03:04:15 2026 GMT
            Not After : Feb  1 03:04:15 2026 GMT
        Subject: CN=6975882f-8e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:f0:c0:40:1a:e6:53:0a:89:06:0c:a2:39:
                    77:b6:d2:7c:06:5c:ee:3b:a5:56:4f:7c:c4:a7:aa:
                    32:01:88:79:19:aa:f8:13:13:db:10:5f:f5:95:95:
                    38:d1:17:40:2c:ea:45:e1:12:e8:23:5f:4e:ec:f6:
                    1b:53:21:16:dd:b8:f8:f0:7b:b0:67:ed:1d:ab:92:
                    a0:3e:71:15:92:c1:9e:42:53:2f:b2:2b:e3:e4:1c:
                    ae:ab:f6:97:fe:4e:b1:d6:56:e3:24:d5:a3:f7:59:
                    be:22:c3:36:9e:4f:40:83:e5:84:1a:f4:5a:9a:ec:
                    a5:b8:da:ff:46:d6:22:b9:58:af:dd:50:f3:73:ca:
                    46:3f:df:e9:85:84:f9:10:a2:72:dd:bf:9e:f2:2c:
                    0b:66:4e:8b:4b:fa:92:b4:97:58:16:a6:b3:9c:6f:
                    cd:4f:8b:50:53:72:67:ea:f0:78:85:4a:ac:6d:0a:
                    63:66:1b:53:5f:b6:60:65:95:9c:67:99:14:fc:ac:
                    ee:6b:d3:ce:ff:7c:45:6e:70:95:9b:8c:c8:0e:0e:
                    b9:82:c6:c1:c2:4c:2f:b7:74:34:a0:0a:51:f4:72:
                    7a:ca:a9:c1:13:50:25:f2:f0:d4:d3:fa:61:3a:37:
                    30:ec:de:0c:16:2b:4f:09:bb:3b:82:55:9b:df:41:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CF:79:07:41:DA:25:82:9B:A9:5F:5F:14:2F:C1:17:05:9F:D3:B1
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:c7:7f:9b:39:8b:50:42:ed:c8:ff:17:d8:5e:ec:d8:25:
         f0:4b:77:df:78:81:ba:6a:2c:da:8b:60:f9:0c:02:3c:2f:5c:
         17:df:7e:6b:ae:51:de:e0:86:48:b7:82:64:5e:0a:86:22:e6:
         72:9f:57:cf:bb:68:be:2b:2c:91:dd:59:76:64:cc:5f:fa:8b:
         2e:97:78:fd:ff:30:d0:f4:06:80:f2:6c:bc:59:05:ed:a9:58:
         11:c1:dc:19:cf:92:b3:e1:cb:9c:f4:8b:6d:ea:01:48:d3:72:
         ba:a7:29:9b:7b:77:15:ef:5e:04:59:b2:41:0b:8c:8b:5f:ac:
         95:44:2b:c9:f6:7d:d1:32:48:db:12:e5:f8:2f:2f:c1:e3:6f:
         eb:52:09:06:03:ad:84:d1:0d:54:3b:21:9f:98:10:e8:35:93:
         2f:3d:aa:13:52:4b:2d:48:3f:f0:97:c6:98:f5:70:0c:80:8b:
         cc:29:07:08:91:8e:be:a7:cc:44:47:0f:6a:33:d6:23:53:36:
         2f:52:15:c3:dd:31:c4:e5:37:bd:e6:2c:9d:05:ba:d5:77:f0:
         be:83:95:26:f7:38:74:2e:57:e5:08:e3:e3:a0:32:0a:b8:64:
         bc:2b:c3:67:7c:aa:4e:7e:f6:61:18:d2:1f:f5:fe:b4:ec:af:
         66:29:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:46 2026 by rpki-client