This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
File:                     IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json)
Hash identifier:          4E3lCGuE4Y9bdl7cOw6qajNcB/Yc4T70mBae918pRQw=
Subject key identifier:   F2:AF:54:DD:A0:B4:FD:BB:D4:14:0D:01:83:D2:78:6E:E8:22:C2:07
Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
Certificate issuer:       /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
Manifest number:          11
Signing time:             Sun 25 Jan 2026 07:04:03 +0000
Manifest this update:     Sun 25 Jan 2026 07:04:03 +0000
Manifest next update:     Sun 01 Feb 2026 07:04:03 +0000
Files and hashes:         1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: 1thiqQ/PktMulc2GItLkHdbiNkcHcRNdP5hFczIoRA8=)
                          2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: kHK2laRL4zDNY/Ej1mLKEGPZW81NdbE5Yg/ARskhgEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl
                          rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
        Validity
            Not Before: Jan 25 07:04:03 2026 GMT
            Not After : Feb  1 07:04:03 2026 GMT
        Subject: CN=6975c063-194c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:5f:b1:3e:e4:af:b2:83:13:35:32:4a:d2:
                    e0:e3:78:aa:98:ae:f0:8a:62:cf:36:cd:45:19:c7:
                    64:af:1e:9c:fe:6d:c5:e3:03:6e:0d:f4:55:68:e6:
                    d1:f3:a9:88:36:b9:35:a7:85:6e:d5:69:60:3f:68:
                    d8:08:93:0e:e9:b2:98:4a:5a:b4:2d:75:97:e2:06:
                    85:55:80:c7:2c:c2:14:48:6d:19:29:55:34:8d:c6:
                    5c:90:57:f9:64:f6:f0:b1:1d:84:f6:ca:2c:d7:63:
                    d1:4d:a4:03:32:44:bd:3d:a0:93:d8:bb:4f:c9:ef:
                    f0:6e:51:78:e1:a3:01:0b:4c:96:e7:ad:ec:83:fb:
                    ab:7e:c1:ae:ed:ac:f5:c2:55:39:09:6d:22:47:43:
                    55:c7:5f:7b:55:11:c2:f1:0e:9f:d3:89:bb:c3:66:
                    52:a5:bf:67:7e:59:0e:26:c8:58:dc:28:97:7d:59:
                    c7:59:2e:e7:87:22:50:66:aa:81:bf:04:3b:a1:85:
                    c2:3b:da:34:92:49:b2:3b:5c:7b:3f:d8:44:4e:0c:
                    46:72:e0:33:31:66:87:a5:de:e2:1c:71:fe:c0:12:
                    f1:3f:76:4b:f4:8d:3b:ef:51:bf:ca:9d:aa:a6:4c:
                    02:54:29:ab:3c:e3:f2:54:30:24:9b:3a:67:a0:cc:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AF:54:DD:A0:B4:FD:BB:D4:14:0D:01:83:D2:78:6E:E8:22:C2:07
            X509v3 Authority Key Identifier:
                keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2e:98:5d:81:bc:9b:67:1e:bb:80:18:81:bd:b6:4b:96:09:
         87:a5:b2:fe:bc:72:c8:de:db:78:46:59:af:75:cc:4f:2b:25:
         88:e6:8e:27:2b:11:7b:64:f3:25:0b:3c:cf:44:ae:be:3e:ac:
         13:c7:25:57:7a:0b:98:ed:40:91:af:f0:6a:0c:1e:9c:e7:33:
         7c:ae:d3:88:ae:60:f2:bf:6c:71:d1:fb:83:9f:e9:41:e5:83:
         ee:d5:be:bc:43:32:5e:1b:32:1f:c7:50:cd:b0:7f:71:56:6d:
         f1:79:fe:82:04:56:c8:3b:5d:42:f8:b5:f5:f8:67:d3:d1:51:
         29:b3:e1:da:d7:77:f6:67:d3:9c:58:a4:9c:7a:7d:6d:50:29:
         b3:b5:cd:48:52:74:fb:6a:5b:73:d9:31:ef:2a:23:00:a4:c3:
         31:1c:1a:e2:86:c0:ea:38:7d:6f:bc:9d:be:be:ed:30:6f:22:
         f6:5b:9f:7b:b6:f6:24:d8:6f:10:28:3a:fa:e7:00:33:19:2b:
         88:57:4f:81:dc:91:c8:24:1f:2f:0f:89:39:f4:76:bd:dd:4e:
         d1:bf:4a:86:a8:a5:7c:9c:a4:d4:b9:26:93:54:4a:ce:9c:b2:
         a2:b8:9a:99:b9:b1:17:15:b6:24:0f:48:c2:0f:47:c3:b9:c4:
         05:78:58:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:46 2026 by rpki-client