This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
File:                     Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json)
Hash identifier:          n1m6OC3Ir8U6OlJoWxl8PGdFr6My4T0cPnfOiOvk1gA=
Subject key identifier:   D5:11:D8:82:2C:9E:55:21:9F:CB:87:33:7E:3D:98:30:BC:12:ED:4C
Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB
Certificate issuer:       /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
Manifest number:          0125
Signing time:             Sun 25 Jan 2026 03:53:46 +0000
Manifest this update:     Sun 25 Jan 2026 03:53:46 +0000
Manifest next update:     Sun 01 Feb 2026 03:53:46 +0000
Files and hashes:         1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: +VyPC2IyP28pGmihcOWqX044b6oANiqjMyMn6zNTmhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
        Validity
            Not Before: Jan 25 03:53:46 2026 GMT
            Not After : Feb  1 03:53:46 2026 GMT
        Subject: CN=697593ca-dace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:ef:8e:9d:0e:ec:4c:88:25:ef:d2:bc:7b:
                    8b:22:53:83:ca:3a:6b:22:74:f8:14:73:21:60:2a:
                    6f:e6:15:86:4c:93:f0:81:ba:dd:2c:22:a1:10:e1:
                    2f:05:d1:1c:78:b9:9a:00:8d:cd:9b:09:87:56:d4:
                    37:ea:da:a7:ad:0a:7d:44:96:53:35:07:3c:92:e4:
                    5d:3f:c7:49:bf:c1:18:3e:de:8d:ea:ba:c0:f3:f9:
                    39:93:f3:38:64:ce:b0:14:8c:9b:59:7c:ce:fb:bf:
                    b9:40:77:e6:f4:82:3b:24:30:b9:c0:79:a4:70:26:
                    e1:e7:d1:db:e8:6f:a8:b1:ae:cb:ca:9c:bd:00:0f:
                    25:63:37:08:58:6e:62:33:95:17:f2:a1:d0:33:44:
                    16:67:c6:87:89:13:c0:a7:b8:5c:e4:4d:e4:b4:76:
                    c2:2c:c7:06:bd:8a:01:d7:72:08:18:2b:c4:b0:33:
                    06:39:ea:66:0d:89:db:3a:41:11:a3:09:02:e6:d9:
                    a7:98:97:1f:b8:f6:ff:24:a4:fd:f6:8f:09:e4:33:
                    82:7c:ff:96:14:28:cd:80:ce:cc:3b:c6:ca:d6:cd:
                    e4:30:13:d8:b1:82:40:3f:09:2f:80:f6:3b:2b:77:
                    4d:f0:72:c0:84:34:c3:9f:8b:d4:c2:ab:0b:e2:cd:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:D8:82:2C:9E:55:21:9F:CB:87:33:7E:3D:98:30:BC:12:ED:4C
            X509v3 Authority Key Identifier:
                keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:07:9c:ae:69:ce:32:e4:aa:c8:77:0a:c6:e4:2e:2d:ae:bd:
         e8:fc:e2:d2:63:6e:d6:78:5c:2f:c2:16:49:60:ea:7f:a5:33:
         1f:56:4e:ee:ca:bb:e4:2f:b6:2b:ab:b1:2c:28:16:15:42:02:
         3e:e3:5d:2b:5f:46:ee:94:c7:ad:d4:4d:98:1b:42:6f:5a:07:
         b9:29:38:2b:58:fe:ae:e6:69:da:38:34:aa:88:44:80:ba:e1:
         65:77:08:e3:c6:be:e9:af:f0:a9:ed:fc:75:b9:85:34:64:05:
         62:91:e1:1c:84:a9:71:06:0c:83:df:9f:61:bc:db:ba:65:88:
         12:87:76:59:8f:7c:7a:2a:fe:42:3d:aa:f6:60:d0:21:3a:65:
         8c:a1:92:20:c3:00:9f:20:05:fd:39:ce:48:83:e5:d0:7e:6d:
         a4:3a:2c:cb:46:19:fd:66:9d:60:ad:3e:e1:33:a7:8a:5a:fa:
         5f:23:56:c3:20:ed:72:57:9c:d3:59:34:43:d6:7e:5e:97:a8:
         f5:e8:a7:22:e4:27:dd:b7:6a:b4:73:5a:fd:f2:86:2b:cd:1a:
         b9:6a:17:54:f6:92:67:37:9d:cb:b6:63:d4:7a:cd:7d:7c:1d:
         14:20:3d:d5:36:ac:7e:97:5c:d2:51:7d:87:2a:5a:02:17:58:
         4a:86:19:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:31 2026 by rpki-client