This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File:                     iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier:          UiuelAnv6cxb9DWPYudqxMWiF/C0lhkpAnwAUl9gIUA=
Subject key identifier:   99:53:BF:F0:BE:E3:5A:ED:4E:8E:CC:1B:39:4E:EC:96:9D:39:B0:36
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer:       /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial:       0851
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number:          09A3
Signing time:             Sat 24 Jan 2026 20:11:10 +0000
Manifest this update:     Sat 24 Jan 2026 20:11:10 +0000
Manifest next update:     Sat 31 Jan 2026 20:11:10 +0000
Files and hashes:         1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: ED6vUdeIXMzDZ+EnOOStm8bCMn8ZpMa9IraSmpv3rJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
        Validity
            Not Before: Jan 24 20:11:10 2026 GMT
            Not After : Jan 31 20:11:10 2026 GMT
        Subject: CN=6975275e-172a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6e:50:a1:39:e6:7f:8e:b3:c3:e6:6d:9d:8c:
                    92:09:be:b2:fe:43:d0:da:46:c7:e8:f9:12:45:3b:
                    99:bf:28:8f:6c:41:a9:27:37:d7:fc:3d:36:45:71:
                    fe:4c:51:92:69:28:f3:cd:c2:f2:3f:6e:99:32:9f:
                    bb:c9:b0:ad:3e:01:2c:cd:58:17:83:97:72:3b:c8:
                    de:db:3c:2e:b1:20:21:e4:1e:3e:85:78:47:b6:61:
                    8d:cf:00:f5:62:9e:dd:6f:42:ea:f1:db:63:48:70:
                    87:cc:98:e2:e7:d3:02:65:2b:dc:09:11:ee:e1:5a:
                    a9:3e:0f:38:a0:53:4b:7b:14:7e:c1:4b:31:ad:a8:
                    9a:bb:96:ab:c7:ce:d3:aa:8d:e8:d3:6c:d2:3e:4b:
                    ef:62:ea:71:82:9a:48:e6:80:f4:eb:a2:0a:c9:a0:
                    38:03:56:bb:9a:67:78:c9:c2:49:7b:a6:0e:92:cd:
                    6c:6c:33:87:9a:33:7a:fc:d1:d1:6b:f1:4b:cd:e8:
                    5f:ea:7b:e3:83:8e:69:13:d4:51:ae:a7:ee:d6:d4:
                    e8:22:27:d0:5f:2e:24:97:6c:e4:40:00:44:5f:87:
                    ff:ca:d9:9a:68:5b:dd:cd:72:84:8a:9a:2d:b5:a4:
                    6c:f4:b7:2c:13:55:e6:02:52:bb:df:08:00:34:3c:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:53:BF:F0:BE:E3:5A:ED:4E:8E:CC:1B:39:4E:EC:96:9D:39:B0:36
            X509v3 Authority Key Identifier:
                keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:08:0e:83:10:4b:35:e9:0c:1d:5c:1f:a9:6b:a1:fe:a8:a0:
         d7:81:a2:09:d5:46:63:d5:17:6c:92:84:c4:22:12:8e:0e:01:
         48:10:8f:8a:84:76:8c:6f:09:be:52:13:83:2e:b9:ac:d5:8d:
         4f:f2:15:20:f8:63:ad:91:c4:e8:5f:28:9c:02:11:b5:51:c1:
         20:9b:37:08:5b:04:df:48:70:01:90:20:a4:a8:c3:5d:1e:72:
         c0:95:ac:f0:03:78:7d:98:6a:60:cf:d4:a8:e4:39:15:45:bb:
         84:08:70:10:eb:cc:20:69:9c:4d:8f:b3:f7:6d:9a:57:8d:24:
         9f:50:ad:21:14:6e:0f:93:57:71:42:39:13:f0:20:d1:7a:e2:
         fa:14:23:77:ec:07:bf:76:00:03:c5:d2:8f:50:19:f8:05:46:
         29:b6:4b:28:b5:10:4e:fb:a9:b8:0c:c2:b1:72:91:3e:e8:93:
         d4:f0:21:62:be:77:f1:c3:c0:12:f0:60:77:16:61:46:79:ec:
         1c:6f:43:2c:73:4f:4d:2b:63:33:e2:62:f3:52:9e:b4:59:ec:
         37:2a:0b:5e:37:79:69:ac:46:ff:20:f6:cb:be:68:a5:7e:f5:
         48:ea:d0:c3:00:68:48:3f:a9:4c:ac:0c:62:eb:0b:1f:69:1b:
         1c:00:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:46 2026 by rpki-client