This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
File:                     iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json)
Hash identifier:          sjWowFRoJR371hnTdyu6u5kbhHbOT0Y6wJVsnRhxZxw=
Subject key identifier:   43:73:E4:E0:26:A6:07:E6:61:AA:79:DA:CA:6E:A2:A3:3D:A5:BE:0C
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Certificate issuer:       /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial:       10F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
Manifest number:          10E5
Signing time:             Sat 24 Jan 2026 17:00:08 +0000
Manifest this update:     Sat 24 Jan 2026 17:00:08 +0000
Manifest next update:     Sat 31 Jan 2026 17:00:08 +0000
Files and hashes:         1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: Nthaou9b/J5M4usOt+9xUN173DEo4S/2ZXfvo9fMzcw=)
                          2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: Xi30fjCwdu1ys1ihQmxOl+2PGZkizPRtJAwU5and9os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
                          rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4342 (0x10f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
        Validity
            Not Before: Jan 24 17:00:08 2026 GMT
            Not After : Jan 31 17:00:08 2026 GMT
        Subject: CN=6974fa98-717a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:aa:69:e6:e3:54:51:ec:3a:c1:cd:cc:7c:
                    f9:88:30:56:58:f6:1f:2d:c3:2c:59:65:dc:ee:0c:
                    47:02:41:1e:9d:21:a9:c3:d2:cc:94:5e:da:c2:f5:
                    95:ca:19:4a:b4:e3:67:d8:fe:e5:f1:88:fa:73:02:
                    ac:c0:21:ba:23:a8:68:94:d0:0f:6c:d3:b6:76:2a:
                    66:a7:a9:aa:e4:78:56:32:17:aa:a5:e1:af:aa:bc:
                    98:ac:93:7c:cf:41:b3:cf:54:e9:e5:d7:f3:9e:ff:
                    82:f3:38:4d:2d:63:9a:06:a3:ef:1b:b1:0c:01:70:
                    63:fe:73:a4:eb:c9:94:1c:3c:d4:ae:e9:cb:3a:0f:
                    e5:dc:1b:4a:99:f9:98:ce:b5:12:e7:c8:91:eb:c7:
                    14:05:56:d6:46:d7:59:44:ca:d9:99:a6:f8:2c:4a:
                    2b:f8:58:b8:3d:dc:ce:35:f9:e8:aa:75:23:7a:be:
                    02:ab:0e:85:d9:34:b0:6b:99:88:1c:4f:3a:27:fc:
                    d6:a7:b9:f3:29:29:df:69:02:c5:e1:c5:70:c7:0e:
                    a7:f2:24:52:e6:2c:63:a0:ba:9a:82:1d:34:38:8e:
                    9c:21:a9:dc:5a:21:56:8a:ec:92:5f:0a:bf:75:69:
                    25:18:b9:ea:1e:95:a2:63:42:0e:08:f7:ff:8f:18:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:73:E4:E0:26:A6:07:E6:61:AA:79:DA:CA:6E:A2:A3:3D:A5:BE:0C
            X509v3 Authority Key Identifier:
                keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e3:62:bf:ba:dc:33:31:99:26:0c:bd:58:09:26:e2:42:93:
         26:59:eb:46:57:f4:4b:db:70:bf:16:e3:70:e6:b2:ed:9a:ce:
         c5:db:4b:4c:da:6e:14:c0:fd:bf:e6:f6:b6:9d:f8:e2:bb:88:
         96:c5:78:c0:dd:15:a9:e6:52:0b:da:f5:7b:34:85:4d:68:87:
         b8:21:73:9c:05:64:51:a7:96:46:f8:47:aa:44:ac:7e:9d:0f:
         46:d8:5c:49:fa:1a:2b:cd:41:d5:7b:92:63:30:19:23:b3:87:
         30:3a:6c:33:07:a7:68:42:21:42:3a:50:57:b2:e0:9b:c4:f9:
         b6:f2:15:46:b6:03:9d:3d:86:e3:d9:a5:e1:9b:d3:3b:d4:87:
         ef:42:97:ae:f7:15:fd:99:93:46:b1:b5:79:0d:f7:f0:66:68:
         f7:0a:ea:e5:5f:55:fa:ea:8f:ed:2a:09:bc:2f:da:0b:f3:cd:
         c5:bd:a3:a4:73:9b:c5:fe:32:db:74:b4:bc:05:ad:db:13:f1:
         29:e1:78:88:48:25:db:22:11:c6:ea:a5:7a:e1:fc:8d:95:5c:
         e4:3f:b6:ce:8f:e9:70:87:56:33:ff:96:ed:e6:eb:0f:b4:82:
         ab:a1:5a:ee:00:13:98:52:69:14:98:09:5a:93:a8:85:e1:01:
         b0:58:b3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:52 2026 by rpki-client