This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
File:                     iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json)
Hash identifier:          ccvz2O5qbsuMGpP7oNkQRxBWyle52tbIv8V9WHa8rWI=
Subject key identifier:   79:F2:17:EA:6D:D0:D1:8B:5D:E9:6B:B2:9B:3E:0F:3D:29:28:17:9A
Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F
Certificate issuer:       /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
Manifest number:          0817
Signing time:             Sat 24 Jan 2026 20:20:23 +0000
Manifest this update:     Sat 24 Jan 2026 20:20:22 +0000
Manifest next update:     Sat 31 Jan 2026 20:20:22 +0000
Files and hashes:         1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: cvxbVRRZwdLj/DLTT5CTphdHHb3nk0fx2BdfbsL7fYE=)
                          2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: IGUI6ypPN1raHp9GKwNU8LZ6l1B0WS2Xv77ok6Yzg+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl
                          rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
        Validity
            Not Before: Jan 24 20:20:22 2026 GMT
            Not After : Jan 31 20:20:22 2026 GMT
        Subject: CN=69752986-bb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:76:00:5d:c7:71:aa:f1:8b:73:93:07:6d:
                    6f:03:54:ce:3b:59:f1:ab:80:fa:9e:f8:30:48:a8:
                    47:6d:74:5f:66:bd:e2:ed:b1:49:15:c3:59:f0:6c:
                    0d:27:21:06:0e:d7:4e:29:10:64:8e:7a:a2:b8:9b:
                    e8:d4:88:7b:c9:5b:22:97:72:29:51:c6:4a:3d:2d:
                    57:7c:2a:bb:d0:41:34:ee:f4:fd:82:84:fc:07:24:
                    69:9e:61:6d:78:13:11:47:96:6d:0d:b5:5a:5c:64:
                    c2:c2:50:81:76:42:37:18:6e:14:3d:e6:12:a3:fe:
                    b2:7d:70:59:d5:7b:c6:d6:55:c5:2c:43:4c:8d:bc:
                    f2:51:7a:9f:d7:e9:0b:71:b6:51:96:67:bd:3b:91:
                    81:d3:a1:6b:55:65:d5:e6:f8:89:78:2b:1d:1b:e7:
                    f4:cc:4e:ed:ca:f2:a6:47:c6:0e:95:a9:7a:fb:fb:
                    75:d5:ef:4d:4b:f0:24:52:72:03:5e:b6:17:87:c7:
                    0a:59:07:4a:d1:e2:d7:32:91:e7:e9:6c:a1:31:d5:
                    87:c1:94:39:1e:75:6b:76:2c:f5:79:90:f1:33:5d:
                    ee:0d:88:b1:fa:4b:09:3f:b7:d5:b2:df:bb:b5:c5:
                    15:a2:e3:71:85:62:ba:55:95:c4:46:3e:22:20:02:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F2:17:EA:6D:D0:D1:8B:5D:E9:6B:B2:9B:3E:0F:3D:29:28:17:9A
            X509v3 Authority Key Identifier:
                keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fe:fe:12:a8:25:c8:83:e4:bb:da:5e:12:ac:25:7f:59:38:
         62:f6:c4:81:91:c1:c2:d7:07:93:6b:77:12:36:04:e0:98:3a:
         69:1d:cd:c7:48:b3:76:53:6d:cf:0f:af:eb:fa:ad:96:94:e9:
         c0:5c:14:ea:2b:27:08:96:84:d4:eb:3b:50:70:9e:27:85:27:
         11:98:b9:65:b1:46:a2:5f:0f:c4:25:e6:f2:5f:dd:ba:48:81:
         ef:0a:3d:e3:70:6f:de:3c:de:04:69:d4:10:5a:33:2d:2b:2e:
         d7:d0:f4:0d:56:35:21:7c:67:80:be:19:db:bb:1c:f1:93:79:
         12:9b:8a:1b:37:c4:75:05:07:b9:30:0d:05:f9:85:51:3b:d5:
         01:00:87:eb:68:c0:44:dc:f8:b8:d5:2a:a8:73:04:cc:8a:24:
         55:7e:03:a8:f6:7e:cc:f3:a8:6e:03:bb:3c:42:9b:67:76:83:
         15:c5:a8:0e:bb:4c:fa:45:21:7f:83:7b:1b:f2:5b:24:2c:9b:
         e1:ee:c4:cc:f0:d9:f5:95:f9:42:cc:64:8f:23:e6:d4:bf:c3:
         ef:9f:a6:43:ba:f3:79:38:1a:6f:84:6a:03:1c:7c:cb:b0:f3:
         61:e3:31:36:b9:87:e4:c9:9a:41:7c:4c:73:9c:90:fb:66:84:
         ad:28:32:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:56 2026 by rpki-client