This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
File:                     IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json)
Hash identifier:          3306lQBCUMyoFv1muOllF0BwzPfNrDwedM540/T9R2M=
Subject key identifier:   1F:3C:46:7C:7A:25:85:AA:76:A1:C8:F8:90:7A:55:99:65:15:E8:B9
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Certificate issuer:       /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial:       042A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
Manifest number:          0422
Signing time:             Sat 24 Jan 2026 23:34:03 +0000
Manifest this update:     Sat 24 Jan 2026 23:34:03 +0000
Manifest next update:     Sat 31 Jan 2026 23:34:03 +0000
Files and hashes:         1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: BCiLlO92gDcHgQL3GpVv7wb0XnFIqXbPh4/8kC4EreY=)
                          2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: hgdL5UTkf8oZABpJrnOGmK5k+01vc9XVo1jTsrlgdWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
                          rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
        Validity
            Not Before: Jan 24 23:34:03 2026 GMT
            Not After : Jan 31 23:34:03 2026 GMT
        Subject: CN=697556eb-4c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:de:05:84:b9:c9:82:7d:08:0a:5b:4d:57:
                    ef:69:55:1d:0c:45:bf:d9:a1:f2:de:dc:f4:d5:a2:
                    b1:4d:f1:52:18:83:12:3e:5c:72:5b:ea:c0:50:8c:
                    8b:bf:f7:37:06:e4:f5:5c:f8:ae:a0:c1:2a:93:5a:
                    ce:9b:68:06:bc:ca:b8:f8:b8:b5:c3:a3:af:d2:ac:
                    68:f5:9e:59:89:2f:95:23:92:20:a5:7f:5a:5e:ec:
                    f8:a0:4f:ce:f5:67:6f:36:54:6d:74:e3:4a:2b:7e:
                    98:62:a2:d7:81:a8:00:a1:5b:36:e6:24:a3:37:0a:
                    d6:4a:fe:ed:d2:90:b5:13:9f:5e:d4:ab:ab:bb:08:
                    d3:31:f9:a8:28:c6:fa:4f:6d:b7:6c:85:1b:32:ca:
                    27:54:a6:2b:01:28:65:8f:e4:cc:ae:b6:48:e5:60:
                    8f:e9:15:ab:9f:ac:a4:f0:1a:31:80:b5:8f:0a:4f:
                    e2:92:c7:79:e5:26:d5:c0:63:cd:ab:de:ee:cc:bb:
                    22:0d:74:67:8a:52:80:25:90:11:4e:fc:b4:19:d6:
                    72:b2:21:ec:81:49:e5:66:7d:67:38:e4:61:89:a4:
                    57:6f:0d:2c:ab:d6:4c:1a:da:0e:95:b6:48:7b:f6:
                    37:66:af:99:d6:96:20:85:82:64:73:4c:b6:b5:f4:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3C:46:7C:7A:25:85:AA:76:A1:C8:F8:90:7A:55:99:65:15:E8:B9
            X509v3 Authority Key Identifier:
                keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c5:6c:12:19:24:74:6c:ae:76:74:13:d8:27:0b:9d:27:8a:
         07:fa:c2:e6:ec:2f:50:96:c6:26:30:a7:4b:29:41:fe:09:00:
         2e:d5:3f:24:89:60:64:04:09:67:35:0a:c7:9c:49:f6:3c:77:
         dc:94:21:f8:88:c2:01:a6:24:92:c7:10:e6:6c:af:3d:34:0a:
         5b:17:36:55:93:cb:67:31:48:f4:2d:61:3c:72:6f:dd:e7:17:
         e3:a4:ea:dc:6f:69:00:9d:46:66:86:44:95:9b:a1:07:51:bb:
         d1:08:15:97:fc:c2:14:8b:92:0a:7a:ab:9a:38:57:1b:de:c1:
         35:9f:8d:2a:e3:ba:50:af:0f:8a:66:5d:08:2c:71:e4:47:74:
         68:4e:d4:6c:eb:81:e1:73:5a:d4:9b:60:fe:e9:75:98:b4:f5:
         bc:e2:ef:81:9b:02:2a:d3:96:05:2f:e5:5d:47:83:69:79:e8:
         86:90:f2:fc:df:06:ce:22:80:04:a5:95:c1:1a:5b:0e:b4:48:
         c5:8e:3c:47:16:26:31:f1:58:ba:89:bc:2a:29:13:92:34:41:
         c5:42:be:47:66:39:b6:a7:6f:18:e4:e3:6b:ea:b8:5d:02:00:
         de:1f:5a:b5:de:ab:9e:f4:fc:d9:bc:84:6c:3a:2d:d6:ec:06:
         af:5e:d4:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx
QzZFQ0I3QjMwHhcNMjYwMTI0MjMzNDAzWhcNMjYwMTMxMjMzNDAzWjAYMRYwFAYD
VQQDDA02OTc1NTZlYi00YzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxPreBYS5yYJ9CApbTVfvaVUdDEW/2aHy3tz01aKxTfFSGIMSPlxyW+rAUIyL
v/c3BuT1XPiuoMEqk1rOm2gGvMq4+Li1w6Ov0qxo9Z5ZiS+VI5IgpX9aXuz4oE/O
9WdvNlRtdONKK36YYqLXgagAoVs25iSjNwrWSv7t0pC1E59e1KuruwjTMfmoKMb6
T223bIUbMsonVKYrAShlj+TMrrZI5WCP6RWrn6yk8BoxgLWPCk/iksd55SbVwGPN
q97uzLsiDXRnilKAJZARTvy0GdZysiHsgUnlZn1nOORhiaRXbw0sq9ZMGtoOlbZI
e/Y3Zq+Z1pYghYJkc0y2tfRjZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB88Rnx6
JYWqdqHI+JB6VZllFei5MB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5
RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw
anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnxWwSGSR0bK52dBPYJwudJ4oH+sLm7C9QlsYmMKdLKUH+CQAu1T8k
iWBkBAlnNQrHnEn2PHfclCH4iMIBpiSSxxDmbK89NApbFzZVk8tnMUj0LWE8cm/d
5xfjpOrcb2kAnUZmhkSVm6EHUbvRCBWX/MIUi5IKequaOFcb3sE1n40q47pQrw+K
Zl0ILHHkR3RoTtRs64Hhc1rUm2D+6XWYtPW84u+BmwIq05YFL+VdR4NpeeiGkPL8
3wbOIoAEpZXBGlsOtEjFjjxHFiYx8Vi6ibwqKROSNEHFQr5HZjm2p28Y5ONr6rhd
AgDeH1q13que9PzZvIRsOi3W7AavXtSY
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:06 2026 by rpki-client