This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
File:                     iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft (raw, json)
Hash identifier:          6+zNhF0064EEJw+e9DRfnAeqZCnsB6s7ztQXjb3vc/o=
Subject key identifier:   50:4B:C5:66:8F:CA:97:68:2F:D2:44:68:9D:5D:5F:E4:FB:85:55:B2
Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8
Certificate issuer:       /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8
Certificate serial:       1133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
Manifest number:          1127
Signing time:             Sat 24 Jan 2026 16:58:13 +0000
Manifest this update:     Sat 24 Jan 2026 16:58:12 +0000
Manifest next update:     Sat 31 Jan 2026 16:58:12 +0000
Files and hashes:         1: iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl (hash: QnGRkg12tPrX/uPGQLBRJEqFa8My2SFKvPP7EGbzW1E=)
                          2: 2DB6F886286111E9BA245A71C4F9AE02.roa (hash: eRK6+Zz8rhdfBO2+ST4cGsgHBpHnrY/0jrg7ws+2BsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl
                          rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4403 (0x1133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182948, serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8
        Validity
            Not Before: Jan 24 16:58:12 2026 GMT
            Not After : Jan 31 16:58:12 2026 GMT
        Subject: CN=6974fa25-f516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:42:ea:88:10:6d:75:db:54:b1:1c:28:b5:
                    dd:72:16:6b:36:6d:4e:ef:fe:ea:61:6f:ad:20:9e:
                    4e:fb:e5:50:70:4a:e3:9f:c8:21:73:e1:86:bd:ed:
                    da:3e:99:06:02:ff:31:42:ac:ee:bc:8d:20:a4:fb:
                    0c:da:32:24:9d:f6:28:7d:a2:96:c5:4a:2a:84:4a:
                    40:99:24:6c:cf:28:c5:f6:da:3e:18:0e:2a:26:71:
                    eb:72:6d:f3:22:cf:b2:0a:41:f6:9b:db:5e:c1:87:
                    26:f3:16:e1:b2:74:35:3c:1a:5d:7e:fa:e4:69:a2:
                    6a:91:57:2e:5e:51:64:a0:00:38:10:3a:8f:cc:f0:
                    f3:b2:6a:cf:66:89:0d:8b:c1:97:be:e5:6c:64:57:
                    4c:34:3c:e0:ec:b1:30:ab:1c:8b:eb:cb:3d:d5:d3:
                    a7:58:1d:df:91:2d:84:84:95:ac:be:87:50:cd:b7:
                    4e:91:20:b7:41:c3:7f:55:48:08:de:17:3b:26:90:
                    9d:a6:8c:c1:54:6a:b1:87:e0:3b:ca:e7:61:d6:3a:
                    2f:86:2d:6a:77:54:4a:9c:ca:3a:c3:b0:c3:e5:d9:
                    9e:61:30:9e:4b:04:62:68:c0:68:fb:e1:c9:3b:ea:
                    13:b8:15:1b:b8:96:b3:ff:86:fe:70:92:61:5b:a4:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:C5:66:8F:CA:97:68:2F:D2:44:68:9D:5D:5F:E4:FB:85:55:B2
            X509v3 Authority Key Identifier:
                keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:20:1f:65:85:f7:57:17:1b:df:a3:92:ff:76:6f:98:c3:7f:
         2d:e4:11:a0:f1:f9:72:69:51:e2:f7:30:51:f4:4e:c1:bc:c7:
         41:58:63:5e:bc:61:ba:64:1d:67:31:e3:f7:7c:5e:bd:90:d2:
         a5:c7:76:e5:2d:51:d9:e2:1e:39:46:d1:f3:22:36:55:1c:73:
         7e:3f:66:4c:32:44:fc:42:96:60:2c:a4:fa:c5:fa:ac:7e:45:
         f3:13:93:ba:9b:96:88:33:61:ae:de:0c:c6:92:12:22:3f:fe:
         b5:bd:8f:cf:e7:56:30:dd:fe:5e:be:a1:dd:80:95:e1:1d:83:
         91:79:00:69:52:6c:a2:c5:3a:a6:a4:d1:d0:54:70:01:84:4f:
         d0:90:2f:6f:2d:53:12:4a:be:41:b6:d8:4b:5c:48:dd:ad:4c:
         eb:c7:a9:27:7c:e0:00:19:ae:a3:5a:14:d9:ad:f3:1d:f5:44:
         ce:2d:e0:6b:88:93:f3:69:f8:31:a3:81:c0:d3:e2:cf:3f:67:
         5d:7e:d1:7a:c2:e2:74:ef:e9:18:d0:3d:91:90:1a:a7:1c:4c:
         73:3c:c4:b2:9f:96:95:41:ba:c2:0a:1a:bc:ea:81:45:01:08:
         d4:e4:ec:57:f3:f2:5b:06:11:93:2a:04:77:75:2e:74:bb:f3:
         92:d2:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:50:22 2026 by rpki-client