This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File:                     nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier:          n9dyRj3VGpHJMBhq8y8Si137Lq2q614jJ+kBRftK1O8=
Subject key identifier:   F4:07:65:16:B2:FB:9E:CA:67:B9:69:81:9C:7E:B0:0C:BA:0B:E8:8F
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       057D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number:          0558
Signing time:             Sat 24 Jan 2026 22:45:15 +0000
Manifest this update:     Sat 24 Jan 2026 22:45:14 +0000
Manifest next update:     Sat 31 Jan 2026 22:45:14 +0000
Files and hashes:         1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: kiF7UvpL8+tjuz5Akqv3Z9Pv4HA9FU/Ay5qQYrbEqaY=)
                          2: 3D85B786EF7211F08C9974335B6F56BC.roa (hash: Jn6LUQTIm0Dpg1Ko7eo8YNgg7LbdkDyBWUmsJszAx7s=)
                          3: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=)
                          4: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=)
                          5: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Jan 24 22:45:14 2026 GMT
            Not After : Jan 31 22:45:14 2026 GMT
        Subject: CN=69754b7b-1236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:ab:e0:af:a5:55:06:f5:6d:4e:f5:2c:f6:
                    4c:c3:35:ac:a9:01:9f:60:a9:b0:0d:bc:32:ac:fe:
                    20:47:42:c1:ea:a2:4d:1c:17:eb:5d:98:0c:8d:28:
                    13:4a:e1:aa:49:be:74:d0:b7:c7:00:f3:fd:13:bc:
                    aa:50:1f:41:1e:d8:bf:e6:d5:4e:ea:28:1c:12:99:
                    e7:72:fe:1f:9f:e5:e3:ba:67:a2:92:5e:80:65:1c:
                    0b:e7:2e:a3:ef:36:57:c1:5a:b3:c1:e3:e7:a9:9b:
                    a1:98:53:de:01:4f:e0:d7:b1:c9:b1:2d:13:18:d8:
                    1e:cb:c3:ad:74:7a:45:0d:18:67:c2:25:fd:04:de:
                    06:2e:78:15:4f:53:9a:c0:17:77:a5:15:43:65:a1:
                    26:d3:99:17:f5:c4:99:5b:9a:44:cd:a9:54:81:fb:
                    25:dc:14:c3:5c:0d:6a:8f:ce:0c:5d:b2:26:51:1b:
                    02:44:ed:70:16:be:3a:e6:50:f7:7c:05:09:e4:cf:
                    a9:e5:05:ee:70:78:bd:85:91:03:f2:c4:a1:52:bb:
                    db:6c:0b:78:28:87:4d:bf:52:18:f9:46:46:3f:e5:
                    b5:0f:dc:0f:b3:ec:c6:d8:60:b6:77:28:e4:61:e1:
                    81:ed:7d:54:7d:21:d6:f7:65:ac:c0:05:57:c9:2b:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:07:65:16:B2:FB:9E:CA:67:B9:69:81:9C:7E:B0:0C:BA:0B:E8:8F
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:67:54:e7:38:12:f6:ef:ab:97:0a:aa:76:3c:89:ed:25:22:
         28:cd:9a:9b:95:8e:a4:73:ef:a8:b6:11:34:5c:6b:f5:e9:40:
         b6:86:eb:f6:f6:33:8a:b2:9e:f6:aa:52:93:1e:b3:fd:70:e6:
         4a:11:f4:7d:5d:17:12:2a:02:42:9e:5a:e6:88:57:68:64:a7:
         df:69:d2:36:7d:93:a1:a2:b4:bc:af:f6:a4:55:5a:25:28:d1:
         cc:2e:6d:af:59:88:b9:95:65:70:bb:52:af:2e:f3:99:b2:46:
         5f:01:7e:74:ac:4b:b6:f1:e5:d0:d9:8b:e7:e1:38:a3:d8:20:
         b1:c9:03:5e:9a:c7:a4:91:c8:e9:56:8e:a0:63:d2:d3:5e:94:
         04:24:ae:bc:2b:5c:28:91:ff:fa:ac:3f:2b:5e:a0:3c:8d:57:
         37:58:36:03:02:81:f7:08:17:43:69:46:99:80:82:35:6f:1f:
         32:00:5d:8a:76:8d:56:82:9e:72:0a:de:e2:2f:fc:6b:33:f1:
         93:69:9a:24:4d:3d:9a:03:fc:e7:43:46:98:7c:4a:e5:ca:0a:
         42:2d:2e:5c:6d:0f:91:03:39:b5:7b:2a:85:64:51:ae:96:06:
         6c:18:95:f8:79:f8:fe:10:8e:14:70:78:15:de:f3:ce:9f:0f:
         63:3d:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:34 2026 by rpki-client