This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
File:                     iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json)
Hash identifier:          HuIAflmHn6Ipa97WPRxuD90kQ20JYdoR0Sruou1AWfo=
Subject key identifier:   34:08:37:37:F3:B9:1E:6A:AD:49:0D:44:AA:8D:C2:E8:0C:F3:EF:3D
Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E
Certificate issuer:       /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
Manifest number:          0140
Signing time:             Sun 25 Jan 2026 03:41:25 +0000
Manifest this update:     Sun 25 Jan 2026 03:41:24 +0000
Manifest next update:     Sun 01 Feb 2026 03:41:24 +0000
Files and hashes:         1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: Cy2WaPa+RHfYzGgWBPOpygfNB4ZZwEL4gaUyevrJi3g=)
                          2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: 7Ge+Ur1HNSgNTEqBJNH+Y2JY0m3BlGqRwSkervRpW04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl
                          rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AACD, serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
        Validity
            Not Before: Jan 25 03:41:24 2026 GMT
            Not After : Feb  1 03:41:24 2026 GMT
        Subject: CN=697590e4-977d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:af:28:56:73:b6:2a:65:f9:99:cf:c0:9d:
                    9f:bf:68:59:8c:8a:56:5c:dd:78:e5:ec:ff:25:13:
                    e1:30:44:04:bd:15:c8:46:0a:1d:8f:71:1b:bd:e0:
                    4e:c6:97:87:8c:86:e5:d6:67:5a:b8:9f:c1:e4:d8:
                    51:e5:87:ef:1b:02:5d:2c:47:a5:b2:6e:a3:86:ea:
                    99:f5:d7:03:56:8e:e2:e8:a2:50:1c:7b:10:30:dd:
                    ae:41:5a:ca:cb:1a:39:25:96:41:19:f6:fb:5b:6d:
                    6b:e5:58:2d:f8:9b:bc:db:b7:92:42:78:f1:59:16:
                    b7:eb:48:c6:25:6d:67:82:8a:7d:0a:76:9e:66:29:
                    ec:3c:8d:4e:43:26:df:ec:8c:84:64:58:1f:b8:17:
                    36:6d:96:b1:cc:17:f6:bc:57:24:4b:1c:a1:96:7e:
                    6f:e9:e6:73:49:22:09:e7:c2:aa:e7:fb:ac:de:30:
                    7b:c2:c3:6a:27:14:6b:37:5a:06:46:40:24:02:eb:
                    e3:ff:b2:33:7f:4b:59:1c:0a:46:35:d5:23:78:39:
                    92:4b:73:87:fc:8a:b7:3e:44:03:cd:70:89:5f:05:
                    42:25:b1:29:f8:c4:5a:79:ab:5a:2a:a0:88:b8:3a:
                    2e:77:f0:0c:ad:33:01:3a:b2:5e:55:16:43:c8:3e:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:08:37:37:F3:B9:1E:6A:AD:49:0D:44:AA:8D:C2:E8:0C:F3:EF:3D
            X509v3 Authority Key Identifier:
                keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4f:5f:ed:0a:e6:23:af:9d:43:e5:65:28:ed:b2:3b:8a:a7:
         de:46:7b:25:08:b0:05:75:ec:ae:87:3c:ed:2a:0c:c7:8e:f8:
         b8:7f:f6:77:64:f2:3d:0b:1f:58:10:31:13:48:eb:ce:af:7b:
         08:9f:f5:50:f9:1c:47:b8:0e:5a:e1:25:31:fb:c0:56:24:24:
         61:5d:6e:2f:d1:a0:66:4e:c9:a8:4b:4e:08:1e:4f:c5:91:93:
         25:35:c2:07:ac:07:28:9f:d9:dd:90:64:f5:6f:56:7d:c9:3b:
         a6:f9:5a:2e:46:aa:37:a5:dc:0f:e7:12:b8:2a:3e:d2:53:7e:
         4e:8d:84:98:ab:c5:29:ef:d3:38:20:2d:b2:bf:28:5d:fc:20:
         24:1f:ef:96:0d:0b:9e:f3:2c:3c:6a:8c:3a:76:c3:d6:0e:55:
         77:62:56:56:e2:96:5b:8c:f8:93:41:f3:be:77:b5:eb:d8:06:
         51:c1:e1:44:b2:91:ad:f0:29:e1:6f:99:be:d4:99:45:16:8d:
         b8:3b:17:2c:f8:0b:52:be:08:3a:71:01:47:39:ff:0b:2d:55:
         5e:3a:3c:6d:d2:97:25:6d:68:95:23:4b:06:c5:fe:94:1c:b9:
         dc:cb:82:d5:f2:fc:d6:a7:4b:4a:bc:f1:e7:19:f8:1b:b7:ab:
         d6:bc:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:47 2026 by rpki-client