This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
File:                     IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json)
Hash identifier:          ZXHjc6nQvVduC/4WCEKe3+ShN0jPpkSs5JM7e/hZULg=
Subject key identifier:   37:44:ED:FA:D3:03:FE:90:02:E7:F9:7F:AF:B1:EE:94:9C:0C:44:46
Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
Certificate issuer:       /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Certificate serial:       074C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
Manifest number:          0742
Signing time:             Sat 24 Jan 2026 21:04:28 +0000
Manifest this update:     Sat 24 Jan 2026 21:04:27 +0000
Manifest next update:     Sat 31 Jan 2026 21:04:27 +0000
Files and hashes:         1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: X0YKsQey2nqTM4u8PFzzDULNJONuFucMzA8BV59D210=)
                          2: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: gW3vTkaN/wNkWG6a1pWxZMXDNkiPWh7wV3EZWd6a77k=)
                          3: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: 0A/CXVN2eZbUiRffQvUFjdyeu61N59RhQvNuDSIYlnA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl
                          rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D897, serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
        Validity
            Not Before: Jan 24 21:04:27 2026 GMT
            Not After : Jan 31 21:04:27 2026 GMT
        Subject: CN=697533dc-fe34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:5c:14:f2:c7:64:b6:f3:a1:e7:ab:dd:94:
                    e4:7f:fd:66:eb:d6:aa:6d:41:30:fa:03:17:82:5d:
                    f0:86:6c:9e:4d:ff:ea:90:4f:9a:90:27:b9:29:b6:
                    1f:1d:d1:72:67:0b:37:8a:8d:e0:d3:cf:f0:d0:d9:
                    04:7b:f6:a0:9d:16:55:85:77:23:1e:8c:a2:34:fa:
                    23:8d:d2:1e:9f:67:b9:f6:24:8f:4e:f6:cd:5e:60:
                    dc:a9:a6:78:9b:e3:3d:a1:32:48:cb:9c:14:f7:97:
                    1c:1b:fe:ef:d5:e5:d7:0d:9b:38:59:cb:fa:9b:0e:
                    0c:a2:1b:0a:09:f7:33:05:ff:49:39:72:13:67:84:
                    60:96:4d:5b:3f:7b:cf:35:ee:8f:f6:32:2d:5d:78:
                    2e:39:6e:74:17:0a:2c:f9:5a:4b:33:68:70:fc:01:
                    8a:d5:3e:ba:10:16:dc:f4:a3:1b:81:b8:77:e0:2d:
                    61:04:f5:1e:af:c9:02:94:04:8f:b4:42:f9:5f:c7:
                    c5:51:7c:9f:ea:bb:5f:74:6b:40:53:12:69:74:35:
                    40:56:30:f5:49:96:7f:27:20:69:3a:7c:98:0c:1b:
                    36:2a:ae:56:12:84:c1:49:1f:f3:dd:1c:03:13:5f:
                    1e:10:d2:29:1e:9f:a9:36:44:c1:4b:8c:dd:93:fa:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:44:ED:FA:D3:03:FE:90:02:E7:F9:7F:AF:B1:EE:94:9C:0C:44:46
            X509v3 Authority Key Identifier:
                keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:da:5a:06:c5:26:43:5c:1b:fc:fd:d4:5f:89:fd:9b:07:0e:
         6d:da:72:6a:70:39:62:6a:9c:75:2f:c0:92:d5:f8:ea:0e:d1:
         65:48:35:4b:0f:d7:72:f1:6d:b8:c0:81:e8:0e:76:10:53:fc:
         43:4d:c7:c9:5b:55:16:4e:13:3e:9e:1a:24:c0:cd:e0:86:6c:
         57:0d:7a:9d:c2:2c:bd:4a:cb:9b:f8:69:c0:77:b3:c1:4b:d6:
         50:ba:d0:8c:c4:20:24:ef:62:fc:95:27:4b:8d:02:37:59:ce:
         19:f4:3c:45:e6:98:6b:0d:12:e6:7e:d8:57:ab:8d:a4:52:d2:
         62:17:e6:d6:61:f6:16:77:2e:a9:e0:47:a8:bc:48:02:f9:4f:
         84:a7:ec:bc:bd:ba:b3:f1:a8:11:ae:a7:18:c8:1c:85:22:c9:
         40:ce:c0:72:c1:b3:92:20:c4:4b:3d:83:17:97:be:db:95:59:
         5b:1b:ef:c6:12:06:8c:5b:21:e3:09:ff:c5:85:11:f2:2a:db:
         63:7e:d5:84:64:00:38:22:9a:4b:02:88:df:96:67:20:d5:24:
         1e:d0:4d:58:c6:96:b7:29:04:78:75:a8:6b:08:17:6c:63:89:
         66:16:06:af:6e:99:3f:0d:d1:79:e4:d8:b3:9b:f9:5f:00:74:
         38:83:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:19 2026 by rpki-client