This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File:                     iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier:          qNlOvFxvgoD1sD35UvN+mEYiv5PpeqEr8hEEUK98ow0=
Subject key identifier:   BC:C6:F0:24:8B:F1:CB:0E:A0:84:1A:F1:FF:61:E8:44:F6:26:1C:87
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer:       /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number:          01B6
Signing time:             Sun 25 Jan 2026 02:24:49 +0000
Manifest this update:     Sun 25 Jan 2026 02:24:49 +0000
Manifest next update:     Sun 01 Feb 2026 02:24:49 +0000
Files and hashes:         1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: oBpjvfogOj3hkBwNR11l6ZZS7f9GbcGjUygtG2UJjYY=)
                          2: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=)
                          3: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
        Validity
            Not Before: Jan 25 02:24:49 2026 GMT
            Not After : Feb  1 02:24:49 2026 GMT
        Subject: CN=69757ef1-fbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:52:e7:38:18:88:d7:1c:5b:c3:e8:93:cd:
                    22:72:70:5d:47:93:46:b0:a9:de:bc:4b:79:d6:19:
                    ab:ca:42:c8:0c:17:64:81:00:58:22:cb:16:33:da:
                    3a:9f:9f:4f:ef:17:72:80:cd:e6:41:05:44:33:c8:
                    2f:24:ff:c6:d8:eb:ec:20:c2:99:fb:9a:a3:7a:d6:
                    2a:e6:53:b3:94:d9:de:21:68:05:77:eb:4a:38:db:
                    a7:bc:9d:82:f4:1a:8d:94:09:61:5c:1b:00:4e:1d:
                    00:b9:aa:7c:6f:ee:ab:67:c5:85:94:44:34:4c:29:
                    15:23:81:ee:15:0f:42:77:9c:28:19:02:d4:f7:16:
                    23:0a:e5:18:39:d8:de:f6:40:3c:ec:02:fe:b6:37:
                    27:90:62:61:21:12:06:89:7e:80:46:13:67:d9:17:
                    2a:4f:f8:c7:d6:dd:02:0c:82:65:23:4f:2a:c0:d1:
                    7e:65:a4:58:06:17:dd:c0:66:49:f5:4f:78:41:32:
                    a8:b3:fa:e1:ce:a6:94:48:56:a1:09:63:35:59:1a:
                    c9:a0:a8:41:46:4b:e8:fc:1d:e7:43:4e:70:a7:5e:
                    49:ee:bd:65:c3:9a:6f:37:6b:bb:d8:92:3b:16:d0:
                    bf:38:dd:78:f0:0e:8f:d4:5f:2f:3c:3c:d6:8b:c4:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:F0:24:8B:F1:CB:0E:A0:84:1A:F1:FF:61:E8:44:F6:26:1C:87
            X509v3 Authority Key Identifier:
                keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8c:35:2b:cb:6d:09:88:9b:0d:d3:7a:63:71:bc:7a:ca:38:
         48:ef:87:a9:59:c0:5a:99:8a:e6:5e:41:2e:34:a5:3b:45:3b:
         8a:bf:0e:55:f5:b4:e4:5d:10:f2:a0:9d:b5:f9:b8:e3:60:a8:
         9d:a8:15:5a:db:f6:66:85:e0:68:75:22:ba:4d:ef:f2:6e:42:
         e5:e5:8a:87:c9:87:f1:4a:5d:e5:54:10:e7:28:af:7d:54:fd:
         d1:4c:95:1f:29:e2:08:42:1f:31:5f:0b:f1:d6:13:f7:1e:d4:
         2c:f6:cb:05:62:db:cc:8e:5b:9f:ea:98:a7:d3:20:c0:40:ae:
         aa:4e:7c:7c:ef:5a:69:bb:b1:aa:45:7c:32:cd:2f:9a:2b:30:
         b5:9d:35:b4:cc:d3:30:14:03:46:1c:02:d0:9f:f6:97:74:5d:
         27:d9:29:31:70:92:c9:4c:39:80:c7:d7:dd:2a:80:2c:4d:c4:
         f6:a8:1c:07:76:32:4e:fd:24:4d:0d:28:5a:f0:c6:5e:03:e0:
         cb:e4:91:50:96:45:e6:e7:73:d0:e2:14:c3:99:b0:f3:cf:96:
         c5:8b:9e:48:26:f9:db:dd:58:9a:22:39:f4:87:61:af:74:68:
         20:2d:fc:3e:de:04:fb:53:91:7b:33:59:5a:62:a5:6d:c8:72:
         8d:fd:b4:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1
MzZDN0ZCMjYwHhcNMjYwMTI1MDIyNDQ5WhcNMjYwMjAxMDIyNDQ5WjAYMRYwFAYD
VQQDDA02OTc1N2VmMS1mYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwLNS5zgYiNccW8Pok80icnBdR5NGsKnevEt51hmrykLIDBdkgQBYIssWM9o6
n59P7xdygM3mQQVEM8gvJP/G2OvsIMKZ+5qjetYq5lOzlNneIWgFd+tKONunvJ2C
9BqNlAlhXBsATh0Auap8b+6rZ8WFlEQ0TCkVI4HuFQ9Cd5woGQLU9xYjCuUYOdje
9kA87AL+tjcnkGJhIRIGiX6ARhNn2RcqT/jH1t0CDIJlI08qwNF+ZaRYBhfdwGZJ
9U94QTKos/rhzqaUSFahCWM1WRrJoKhBRkvo/B3nQ05wp15J7r1lw5pvN2u72JI7
FtC/ON148A6P1F8vPDzWi8SkHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzG8CSL
8csOoIQa8f9h6ET2JhyHMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC
MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt
eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4
bkhyYUlqZzVfRHhUYkgteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC5jDUry20JiJsN03pjcbx6yjhI74epWcBamYrmXkEuNKU7RTuKvw5V
9bTkXRDyoJ21+bjjYKidqBVa2/ZmheBodSK6Te/ybkLl5YqHyYfxSl3lVBDnKK99
VP3RTJUfKeIIQh8xXwvx1hP3HtQs9ssFYtvMjluf6pin0yDAQK6qTnx871ppu7Gq
RXwyzS+aKzC1nTW0zNMwFANGHALQn/aXdF0n2SkxcJLJTDmAx9fdKoAsTcT2qBwH
djJO/SRNDSha8MZeA+DL5JFQlkXm53PQ4hTDmbDzz5bFi55IJvnb3ViaIjn0h2Gv
dGggLfw+3gT7U5F7M1laYqVtyHKN/bRt
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:45:54 2026 by rpki-client