This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
File:                     ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json)
Hash identifier:          VOmghKZe1RvTmRTUqHXJvoKo5VFi1nraDbkVZF3eTpg=
Subject key identifier:   E2:E0:8C:7B:7A:F2:44:D2:E3:B1:D7:E4:EB:35:00:87:69:BF:68:8C
Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
Certificate issuer:       /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Certificate serial:       34FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
Manifest number:          34FD
Signing time:             Sat 24 Jan 2026 14:47:23 +0000
Manifest this update:     Sat 24 Jan 2026 14:47:23 +0000
Manifest next update:     Sat 31 Jan 2026 14:47:23 +0000
Files and hashes:         1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: E4imnXBb2zRq8+ZOqi5X38ote8yRDD1ZQp24uFXRy6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
                          rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13565 (0x34fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
        Validity
            Not Before: Jan 24 14:47:23 2026 GMT
            Not After : Jan 31 14:47:23 2026 GMT
        Subject: CN=6974db7b-0c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:dc:3d:92:34:cf:aa:bf:21:55:f8:ca:2d:
                    90:8c:95:6f:cb:3f:d5:db:5c:dc:78:5b:b5:bb:93:
                    63:60:3f:b6:7f:dc:3b:cb:af:e0:03:a7:60:7d:77:
                    64:3e:87:2d:ae:4c:76:3c:a6:0f:b7:69:3c:e9:d0:
                    8d:c1:b3:9b:e4:b5:79:7a:73:d6:85:a4:31:57:db:
                    60:06:a5:f9:1d:4c:4b:a2:2d:9b:66:0b:d1:a4:d4:
                    35:73:54:27:6e:a7:b5:4b:3f:d2:6a:d9:4c:2a:4f:
                    8a:7c:36:e3:76:02:84:24:22:d6:75:a7:55:04:b3:
                    83:4b:80:29:a0:92:74:3d:d7:df:52:6d:3b:63:fc:
                    99:c9:c0:25:33:55:01:4c:7d:a7:21:12:47:39:86:
                    42:ea:5d:40:15:e4:ec:7c:d5:96:aa:e8:37:9d:28:
                    91:c8:1a:d3:5a:fd:b1:9f:65:6d:38:e2:04:0c:fc:
                    55:4c:7c:a7:a5:7b:45:92:20:7a:86:4b:db:bd:37:
                    2a:6c:96:b0:08:bd:4c:dd:6d:c9:5f:1e:bb:34:1f:
                    23:a5:5d:cc:b6:b7:da:f1:33:79:5a:65:05:7e:66:
                    52:44:c1:63:1e:b0:e0:a2:91:53:44:a8:b8:a7:4c:
                    e6:ab:5f:40:1a:63:79:f3:cc:66:33:14:e8:9b:5d:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E0:8C:7B:7A:F2:44:D2:E3:B1:D7:E4:EB:35:00:87:69:BF:68:8C
            X509v3 Authority Key Identifier:
                keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:37:d5:f9:0d:d5:85:36:ba:c0:6a:60:a4:15:12:00:32:d5:
         73:30:78:32:1f:ed:22:43:db:2d:14:54:96:62:31:43:96:a3:
         75:5c:92:cd:d4:7c:64:f8:d7:bd:3e:d0:5c:fc:88:cc:fa:32:
         f0:20:8b:d8:b0:3e:1d:26:69:90:31:e7:03:e4:c7:83:fe:fd:
         fb:15:fb:67:ac:22:23:4c:ce:26:65:d0:6e:1c:c2:e1:aa:4f:
         f9:69:b9:24:81:12:e7:b0:46:86:00:a7:39:8b:ee:91:14:44:
         25:da:02:20:48:fa:c9:8f:95:dc:37:69:d6:01:0a:58:31:9c:
         35:00:0b:50:a4:e8:e4:bc:64:3f:01:c5:58:89:ea:7a:b0:17:
         df:fb:cb:0d:56:6a:a8:ce:b8:5d:21:6a:21:8b:ef:38:f2:2f:
         65:7b:f6:ea:00:30:68:8b:2a:e2:a9:eb:bf:56:5a:f2:66:44:
         fe:59:cb:24:fa:60:06:24:ef:56:2d:7b:3f:6f:ab:35:22:3e:
         85:e0:12:78:24:5a:c0:c8:11:08:5c:ad:02:74:fa:59:ac:71:
         4d:36:5d:76:22:f4:64:48:38:f9:14:1c:fe:e1:4a:ce:3a:ad:
         c2:db:36:3e:84:30:91:3d:0a:a8:51:80:46:b3:96:28:c3:11:
         bc:eb:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:35 2026 by rpki-client