This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File:                     I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier:          Hi3Wnl77k4tcN0Me2unCxdgWnvt9kBOWk5xhXa9vqNE=
Subject key identifier:   10:77:E4:A3:BF:FC:08:40:25:5F:8E:FC:5F:D3:19:63:71:47:18:10
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer:       /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial:       0C9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number:          0C86
Signing time:             Sat 24 Jan 2026 18:10:40 +0000
Manifest this update:     Sat 24 Jan 2026 18:10:39 +0000
Manifest next update:     Sat 31 Jan 2026 18:10:39 +0000
Files and hashes:         1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: hCS3kHbF81uhSF32X7q1PMGizL0y5QlzBfg7rVGT8sc=)
                          2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: 71wtlkFspbYtUock+BFXzeZYBB331wF/cr+DbtyBMzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
                          rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3229 (0xc9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
        Validity
            Not Before: Jan 24 18:10:39 2026 GMT
            Not After : Jan 31 18:10:39 2026 GMT
        Subject: CN=69750b20-35ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:02:6a:45:ba:35:5a:f3:0b:76:ff:c9:40:
                    f6:f1:54:15:7c:ac:44:c2:ce:e3:fe:06:64:39:74:
                    f2:86:07:ee:61:29:2b:0d:0a:a5:7d:fe:f3:ad:92:
                    e2:04:ec:0c:28:a5:db:86:17:e4:f2:be:84:ca:47:
                    7e:fe:5d:ff:98:09:c0:3d:29:ac:bc:69:e0:e3:ce:
                    1a:1a:11:c5:a1:1f:12:04:7a:fc:b1:5f:cf:9b:56:
                    82:17:9e:d5:27:6b:09:1f:d4:c9:41:9a:cd:51:5b:
                    4f:f2:bd:42:8e:db:3b:76:6a:8b:99:ec:68:55:56:
                    4f:e9:8f:03:62:a9:33:6b:92:76:96:27:c0:63:44:
                    80:49:b6:35:c6:3d:73:e9:df:78:4d:25:ce:10:4d:
                    2a:8d:8a:59:a2:c4:20:3e:d2:5c:c7:d2:65:80:d0:
                    d5:df:92:6d:e1:42:09:9e:0d:57:2a:2a:06:97:01:
                    73:24:9b:88:71:87:3e:8c:2a:30:9b:f5:a0:7b:0b:
                    39:79:34:ce:b0:41:fc:dd:d2:68:a8:2b:ae:67:4a:
                    c7:df:86:16:e0:b0:0f:6a:75:d1:f5:db:9e:54:00:
                    d7:ea:e5:9c:1c:8d:b5:e1:30:68:1e:01:8b:c3:98:
                    2c:0c:cb:50:36:1a:4a:df:b5:29:de:0f:fe:a8:4c:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:77:E4:A3:BF:FC:08:40:25:5F:8E:FC:5F:D3:19:63:71:47:18:10
            X509v3 Authority Key Identifier:
                keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:43:7a:92:1a:13:ea:7e:ab:7a:74:73:b1:9c:06:c4:70:9c:
         55:d4:f0:d1:ac:dc:86:57:5b:fc:01:a3:3d:47:8c:26:26:90:
         6c:c6:45:3a:89:f1:a3:c9:09:ac:ad:5e:e5:41:98:d0:a2:20:
         6b:bb:57:d0:c5:f3:d6:52:20:08:a1:c6:39:24:93:f5:58:32:
         8b:0d:c0:9d:49:c2:b0:97:8d:3c:a2:3d:c1:46:4d:14:6e:61:
         98:49:66:9d:ae:56:28:c4:26:7b:45:dc:38:65:83:4b:21:b1:
         70:9b:fd:33:da:c9:14:0f:57:01:d1:b9:b1:b3:4c:ba:d1:82:
         03:65:91:71:29:01:a6:fb:eb:d8:c3:d2:33:79:0e:f2:06:c7:
         8f:c8:8d:18:53:3d:a9:4f:f4:1f:61:c4:ab:b2:de:56:cc:a7:
         9c:9b:b4:4f:d5:7a:d2:da:b5:31:73:13:ef:8c:72:ff:98:1c:
         15:87:81:d4:04:62:31:0b:6a:dc:5c:97:5c:f3:57:97:86:14:
         a0:15:70:b5:35:5e:d9:71:c6:b0:e1:27:3f:3b:26:61:c7:57:
         b2:b1:ac:92:a0:91:07:9b:d8:cb:0a:df:92:f4:fc:2b:3f:4a:
         cf:81:66:8e:60:ca:f4:e6:66:4c:6f:53:08:59:c4:87:6b:23:
         1c:b2:f7:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5
OTI1RkJENEYwHhcNMjYwMTI0MTgxMDM5WhcNMjYwMTMxMTgxMDM5WjAYMRYwFAYD
VQQDDA02OTc1MGIyMC0zNWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArPkCakW6NVrzC3b/yUD28VQVfKxEws7j/gZkOXTyhgfuYSkrDQqlff7zrZLi
BOwMKKXbhhfk8r6Eykd+/l3/mAnAPSmsvGng484aGhHFoR8SBHr8sV/Pm1aCF57V
J2sJH9TJQZrNUVtP8r1Cjts7dmqLmexoVVZP6Y8DYqkza5J2lifAY0SASbY1xj1z
6d94TSXOEE0qjYpZosQgPtJcx9JlgNDV35Jt4UIJng1XKioGlwFzJJuIcYc+jCow
m/Wgews5eTTOsEH83dJoqCuuZ0rH34YW4LAPanXR9dueVADX6uWcHI214TBoHgGL
w5gsDMtQNhpK37Up3g/+qEwS+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB35KO/
/AhAJV+O/F/TGWNxRxgQMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0
MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj
TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwQ3qSGhPqfqt6dHOxnAbEcJxV1PDRrNyGV1v8AaM9R4wmJpBsxkU6
ifGjyQmsrV7lQZjQoiBru1fQxfPWUiAIocY5JJP1WDKLDcCdScKwl408oj3BRk0U
bmGYSWadrlYoxCZ7Rdw4ZYNLIbFwm/0z2skUD1cB0bmxs0y60YIDZZFxKQGm++vY
w9IzeQ7yBsePyI0YUz2pT/QfYcSrst5WzKecm7RP1XrS2rUxcxPvjHL/mBwVh4HU
BGIxC2rcXJdc81eXhhSgFXC1NV7Zccaw4Sc/OyZhx1eysaySoJEHm9jLCt+S9Pwr
P0rPgWaOYMr05mZMb1MIWcSHayMcsvcA
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:24 2026 by rpki-client