This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
File:                     izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json)
Hash identifier:          U6cy/oBUIJs+XNAV/cIvvjdpzHlwcHy3lPLNAIjwGUk=
Subject key identifier:   74:54:6C:13:2C:1C:7C:91:C7:8E:34:ED:1C:7A:2C:7A:63:AE:38:18
Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Certificate issuer:       /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
Manifest number:          C8
Signing time:             Sun 25 Jan 2026 05:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 05:01:38 +0000
Manifest next update:     Sun 01 Feb 2026 05:01:38 +0000
Files and hashes:         1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: Q8i6gF7QWlTjGHnyrc4bTSsUlWbV0cjWjmZhBf2kq78=)
                          2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: JeIvajlxzjQj5CfJDRwUxxGvNaX9uDFrrx5zQ5EFSS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
                          rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
        Validity
            Not Before: Jan 25 05:01:38 2026 GMT
            Not After : Feb  1 05:01:38 2026 GMT
        Subject: CN=6975a3b3-0277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:e3:80:18:94:0c:bb:62:ac:6a:08:a5:1f:
                    c5:ac:f2:d1:aa:b6:25:be:77:77:5e:52:c2:d9:d9:
                    5d:b7:a3:0e:cf:88:71:a8:b6:5a:fe:6c:83:52:94:
                    91:e6:ae:f2:6c:e1:25:7f:c9:c5:46:12:3b:a7:01:
                    1c:31:f8:5d:5d:c5:52:8e:39:a4:a8:cc:ab:12:d4:
                    7a:4f:5e:bd:4b:f5:f4:b7:a1:7c:fb:9f:83:62:9b:
                    40:62:d9:57:e2:07:47:75:29:27:1a:12:9b:b2:1f:
                    39:71:a5:6e:2b:83:f7:ee:5a:57:df:d6:8c:64:3f:
                    84:90:81:c2:f0:f8:25:b3:7a:4f:86:97:31:4e:42:
                    d2:5a:6d:67:79:62:ce:19:a1:f7:81:92:3c:45:cf:
                    bd:b9:aa:b5:f8:a1:e3:7a:4d:e8:7e:bb:d8:e4:9b:
                    4b:5d:3b:bf:bb:69:02:0e:85:9e:b7:44:8e:12:5a:
                    f9:80:bf:53:c9:7f:07:ed:3e:cb:87:61:cf:32:6e:
                    56:8e:a9:af:e0:ab:92:f4:e3:8f:96:c1:8a:85:6b:
                    3f:07:02:51:a5:47:80:29:18:ed:ef:dd:a6:42:31:
                    fb:20:a9:84:8b:45:90:f3:c3:bb:4b:7b:7f:d7:9c:
                    f3:4f:ea:c2:11:86:e7:61:f3:cf:c4:76:07:b0:8e:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:54:6C:13:2C:1C:7C:91:C7:8E:34:ED:1C:7A:2C:7A:63:AE:38:18
            X509v3 Authority Key Identifier:
                keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a4:2d:a9:c2:c0:32:78:ae:2f:04:37:c3:73:b5:1b:6b:7b:
         c9:9d:ca:35:6f:e9:1c:2f:ae:a6:cc:45:86:b3:d7:f4:48:e5:
         1e:12:b1:83:21:8f:6a:75:ba:d2:be:0c:50:29:8f:a4:a6:b5:
         2f:48:dc:7d:8a:c0:b0:6f:6a:40:b4:ec:11:a1:9f:93:6e:af:
         0f:d5:f2:4d:f1:7e:31:ef:93:66:99:61:a0:0f:2b:ef:a7:ff:
         76:97:54:94:65:27:c9:fa:47:e6:3d:08:07:1d:2d:20:64:10:
         e3:be:8b:69:0d:9f:da:1b:02:91:a4:1b:d9:60:4c:b6:a1:d3:
         54:5b:9d:4f:8d:5e:02:f2:72:87:ed:34:9d:5b:17:8e:b9:69:
         3c:6d:65:84:ad:92:f9:3f:54:11:43:2d:eb:6a:c2:03:b1:f0:
         b2:ba:33:0c:2b:19:8b:07:af:b5:f3:18:e6:7a:f3:18:34:3e:
         82:f4:46:74:b2:b6:fd:96:5f:46:41:32:10:e2:78:be:27:5e:
         1d:e4:c1:57:53:c7:2e:51:11:b1:0c:a5:2a:14:c8:20:0c:05:
         ad:f5:ba:d4:54:2d:0a:e1:af:31:c8:9d:8c:c4:d4:aa:6b:c2:
         9f:2f:ed:27:7f:a0:83:82:05:fa:88:3d:f9:45:ef:b1:f2:36:
         81:9a:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:45:52 2026 by rpki-client