This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
File:                     IRoCHoq99NvyBwgibMgyj9JBMd8.mft (raw, json)
Hash identifier:          Y2ruQsH39lmLTmzHWLUHkWKhf9wPruFkkP0eu3tV+JY=
Subject key identifier:   85:35:F2:57:E2:F8:EA:63:00:76:0D:8E:60:8D:BF:5D:3B:0E:7D:AC
Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
Certificate issuer:       /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
Manifest number:          EF
Signing time:             Sun 25 Jan 2026 04:40:05 +0000
Manifest this update:     Sun 25 Jan 2026 04:40:05 +0000
Manifest next update:     Sun 01 Feb 2026 04:40:05 +0000
Files and hashes:         1: IRoCHoq99NvyBwgibMgyj9JBMd8.crl (hash: hAMTsth6+E/86RrkGiRckYzQ5umZ5Uu+TkpBb5vNp7M=)
                          2: 00926CA2D41F11F092947183C4F9AE02.roa (hash: 6Kb8qTYjaoIOVP7kkTd2rIa7gwLmY36EevcUKuSxehs=)
                          3: 0029F6EAD41F11F0B1A47183C4F9AE02.roa (hash: S2OZL34K7y7KU66LSbkx0n+jdpTeHIrf5kcKi6P19ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl
                          rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
        Validity
            Not Before: Jan 25 04:40:05 2026 GMT
            Not After : Feb  1 04:40:05 2026 GMT
        Subject: CN=69759ea5-7e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:7f:fc:5f:4a:8b:a6:c6:95:11:ad:68:2f:
                    f8:e3:4b:7a:cd:15:7f:00:81:66:8a:9d:01:67:36:
                    d8:3e:e1:29:2b:f3:66:1a:be:68:68:d1:e6:3d:6b:
                    48:72:75:68:fb:49:97:5a:45:bc:07:18:31:35:c4:
                    7e:40:78:c7:49:80:b1:da:2d:22:eb:92:7d:89:f2:
                    59:38:01:9b:c9:a4:ec:a8:11:03:9a:44:e0:d6:81:
                    f9:b7:cd:ff:49:33:c4:92:8d:48:75:f8:51:32:cb:
                    f8:9d:df:85:ea:bb:44:42:2c:8c:03:8b:93:8f:40:
                    00:af:60:6f:4d:96:90:bb:bb:f1:66:bd:15:0e:e8:
                    92:24:3c:c2:b7:6a:b0:4c:0a:90:4a:ea:d3:08:ec:
                    84:25:4e:df:f4:e7:7e:e9:d0:40:5a:70:9d:dd:f4:
                    38:f1:1f:85:40:ed:75:fb:f2:7e:e7:16:f2:95:d9:
                    9f:9d:92:d5:e4:8f:90:5c:5f:0d:ae:da:49:3b:69:
                    2a:60:18:a2:69:37:6e:01:f7:44:bd:a0:ef:05:2b:
                    0d:bc:d0:f1:99:98:08:de:8b:e8:d1:61:d2:ca:b4:
                    09:22:c4:b8:86:ac:02:36:8c:64:30:99:98:5a:fb:
                    2e:5e:07:09:ed:51:3b:ee:e4:84:da:43:a7:04:83:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:35:F2:57:E2:F8:EA:63:00:76:0D:8E:60:8D:BF:5D:3B:0E:7D:AC
            X509v3 Authority Key Identifier:
                keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:03:56:ed:33:f4:32:0b:7d:45:0e:a1:80:49:d2:a2:2b:
         71:de:11:30:1c:af:78:c8:61:64:17:3b:c6:48:0e:2c:0c:f7:
         38:d7:82:88:98:51:cb:c4:6d:66:b4:52:b9:be:77:1d:72:77:
         38:53:e6:b0:bd:81:6e:8d:e2:f9:ba:d2:01:47:f0:01:8f:81:
         89:a2:cc:b4:ba:62:ff:8a:c2:d6:6a:08:7d:1f:ed:3f:9a:9c:
         06:35:c4:10:fe:e0:6d:9d:b0:5b:ae:57:4c:49:54:f9:5c:cd:
         99:62:1e:ea:9b:fa:27:78:a2:b8:67:0b:ee:42:79:c2:84:73:
         e6:ad:94:9e:c2:cb:56:5d:a8:40:fe:95:3f:62:fb:fc:e4:64:
         a6:fb:52:12:32:df:13:57:02:70:bb:0d:65:1b:60:e6:fc:c1:
         bf:ad:33:1d:26:bf:e8:12:a7:a3:99:60:55:c0:32:08:cb:95:
         ce:11:25:03:9d:df:a4:3f:7c:f3:e6:eb:9b:b0:c2:7b:bc:3c:
         10:bc:05:cd:94:db:91:1f:82:23:13:13:24:8c:2c:a4:b3:53:
         22:7b:ab:87:d4:f8:bc:33:e9:10:48:d3:e6:84:0d:d2:d9:b1:
         c8:f2:f8:4b:a5:e8:35:c5:23:29:c1:b6:08:74:50:c0:76:0d:
         dc:9c:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:52 2026 by rpki-client