This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File:                     iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier:          3c5CrD6y6dfrqG3PPK/kNycx1DS9l/AjSyIRVi4RBXg=
Subject key identifier:   7A:24:2B:9C:C2:1E:D8:51:49:A7:B3:FB:0D:F3:75:0C:3D:50:62:93
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer:       /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number:          014E
Signing time:             Sun 25 Jan 2026 03:31:29 +0000
Manifest this update:     Sun 25 Jan 2026 03:31:29 +0000
Manifest next update:     Sun 01 Feb 2026 03:31:29 +0000
Files and hashes:         1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: fCB5DTChO/9WJeMsimWtiE9obhkVfjqB0dzs5da6b94=)
                          2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: csTmTLq4ZRZeFdn5b+fHaqqqdmXKOcBZ5dCUt+D8Cfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
                          rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
        Validity
            Not Before: Jan 25 03:31:29 2026 GMT
            Not After : Feb  1 03:31:29 2026 GMT
        Subject: CN=69758e91-dba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:2e:b3:6f:f0:68:24:ca:d9:e7:05:2c:b7:
                    ef:63:14:70:e7:ad:37:4b:ee:c1:e0:20:75:51:66:
                    d9:13:b4:2d:03:78:4f:af:42:7e:25:4f:7d:49:b5:
                    bf:9e:e7:a9:ef:ce:d4:23:8b:a0:29:ed:6f:45:11:
                    5c:8f:78:dc:cc:cb:18:32:6e:83:35:bd:3a:66:d6:
                    91:8a:43:fd:2e:fc:e6:de:dd:ba:ea:9a:78:5a:04:
                    90:99:d2:c8:71:47:52:5a:69:97:e3:c2:3b:d6:42:
                    31:2f:b1:95:6c:c7:0a:36:11:8b:9b:86:bb:c3:03:
                    f0:03:4a:80:ef:e0:7b:78:37:84:5f:34:20:aa:56:
                    54:86:e0:ef:76:a2:80:11:64:06:a1:40:3b:61:a1:
                    69:88:07:84:3e:4f:ca:b2:ac:2e:60:37:04:8a:10:
                    cb:2d:52:10:ad:78:f8:80:18:94:0a:b3:18:c1:58:
                    81:8a:d6:b8:51:5e:df:74:fb:20:3f:11:0f:7b:0f:
                    cc:15:36:dd:c7:33:46:a5:43:29:6f:11:23:0e:b1:
                    58:fc:1f:71:46:83:07:31:65:17:35:32:13:13:34:
                    3a:68:0a:44:7c:b9:31:48:fd:1f:39:83:34:97:7b:
                    0b:f8:62:52:d1:f9:d1:48:40:68:b2:86:af:77:29:
                    c4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:2B:9C:C2:1E:D8:51:49:A7:B3:FB:0D:F3:75:0C:3D:50:62:93
            X509v3 Authority Key Identifier:
                keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:d9:67:ef:bc:38:55:70:0f:6e:c1:6c:c2:c8:ba:6e:78:
         ba:d9:0a:b8:ea:90:5d:92:da:9b:a1:28:c8:a0:7f:9d:0b:26:
         20:d9:7c:e8:87:3b:83:7f:7b:1d:ad:7d:7e:00:b9:ab:df:7b:
         38:24:b0:b3:d7:ea:da:0f:19:a0:e1:6a:05:f9:7e:62:b4:09:
         26:5b:3d:0a:48:54:c0:b7:d6:89:dd:e6:6f:1c:fa:a7:2c:cf:
         c8:1f:d8:4c:86:c4:2e:c9:69:c9:e7:6f:06:35:55:3e:28:fe:
         1f:2e:65:8e:73:50:21:0a:62:86:31:fc:ae:7e:87:a6:1e:df:
         bf:93:b0:63:fe:19:f7:fb:e0:58:f3:ba:40:94:2e:e6:da:af:
         47:64:7b:64:59:7d:e6:94:f1:fc:bd:d0:7d:0e:b5:d3:e3:e7:
         bb:61:dd:81:77:45:51:e5:cc:14:a2:1c:ba:d6:d6:23:e5:67:
         49:96:22:d1:9e:52:4b:fe:f5:23:00:ef:f9:54:30:9e:53:5d:
         a4:ac:67:0a:56:7c:ba:f4:98:89:a7:1c:db:9a:10:4a:34:41:
         22:ff:b7:ad:6e:76:04:b8:9c:e3:cf:bd:1d:12:8b:bf:ed:58:
         c3:36:d0:80:0c:64:a1:c4:df:c1:34:dd:0c:b2:ab:58:64:f3:
         cb:2c:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:54 2026 by rpki-client