This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
File:                     IIUPxwwl_bFV037LDsOWLGtH_K0.mft (raw, json)
Hash identifier:          hTSsoAYCFXmAFV1xh2c4Xmk8xojKTUmKglQtzmz3Cl4=
Subject key identifier:   4E:D8:1D:21:FB:E3:ED:41:6B:19:45:CE:B0:CB:8E:54:5F:56:90:63
Authority key identifier: 20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD
Certificate issuer:       /CN=A919D545/serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
Certificate serial:       07B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
Manifest number:          07B0
Signing time:             Sat 24 Jan 2026 20:44:58 +0000
Manifest this update:     Sat 24 Jan 2026 20:44:57 +0000
Manifest next update:     Sat 31 Jan 2026 20:44:57 +0000
Files and hashes:         1: IIUPxwwl_bFV037LDsOWLGtH_K0.crl (hash: gMGv3/+T/tFy1XPdP3w9qP6D2RvvSKFZto+0iDEl/Ac=)
                          2: 934C22582E1C11EBB3ADE232C4F9AE02.roa (hash: 1Nd3whCoQ3UeAyTbWO/1UHp1zlBom6OZhYQFPq70UDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl
                          rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D545, serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
        Validity
            Not Before: Jan 24 20:44:57 2026 GMT
            Not After : Jan 31 20:44:57 2026 GMT
        Subject: CN=69752f49-e54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:84:4e:fe:39:3e:c4:fb:af:f5:3c:7e:16:
                    35:15:44:4f:25:68:b3:e7:b3:81:9d:ec:db:53:79:
                    22:e5:a9:40:20:a2:bf:f0:d1:68:a7:40:79:83:3b:
                    32:c0:77:bf:bf:62:d1:ab:e6:fd:6f:85:a7:db:64:
                    b0:39:d9:cb:e6:a1:68:d0:4a:de:9e:e4:1e:f8:3a:
                    43:6c:85:9f:0c:f9:a2:1f:19:25:b0:23:21:df:02:
                    6c:7a:35:42:8d:78:4a:e0:0a:03:fd:7a:f5:d2:58:
                    5f:82:e8:3f:52:18:cd:ff:0c:a4:89:b6:be:cd:c7:
                    8a:33:ca:46:0f:92:53:39:f5:ea:4a:f4:6b:cd:c9:
                    5f:c4:cd:06:99:66:18:de:30:83:75:9a:fe:a2:5b:
                    63:85:05:19:93:37:97:02:c9:d1:6e:74:47:bb:62:
                    3a:8b:3e:0a:33:de:a1:e6:dc:33:33:d4:d5:5c:b0:
                    fb:eb:12:b0:fd:b0:98:a5:e9:4a:6b:2f:6e:af:19:
                    ca:68:70:86:73:68:95:8a:14:31:97:21:d4:33:6f:
                    cf:ea:30:c8:20:6f:81:bb:04:a7:d7:54:bb:95:f0:
                    01:69:0f:b6:5c:d1:db:67:13:d0:70:cf:5d:17:3c:
                    84:4c:40:b9:ac:3a:0d:e4:64:3d:8c:13:8c:c9:5a:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D8:1D:21:FB:E3:ED:41:6B:19:45:CE:B0:CB:8E:54:5F:56:90:63
            X509v3 Authority Key Identifier:
                keyid:20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:dc:28:69:27:84:8c:00:a0:c5:0e:e4:56:6f:1f:cb:6d:
         4e:b1:82:57:23:38:8d:6b:a8:53:c4:dd:f5:1d:18:5f:5f:9c:
         7d:1d:e8:a9:21:cf:69:23:71:4c:4a:10:0f:b2:52:5c:08:49:
         ba:d5:1b:ea:bf:9c:38:17:45:53:5f:05:71:5c:14:03:11:97:
         8d:80:5d:93:e4:f3:b8:2c:b6:f4:19:fa:7e:e1:07:19:e1:c4:
         22:ac:ec:72:ea:ca:0a:f4:ff:d5:e1:eb:4b:42:87:08:3d:b5:
         a2:3a:1e:1a:c3:e9:de:11:20:97:f0:ec:44:59:4b:c8:b4:7e:
         d9:cb:0a:66:33:79:33:58:65:0f:3c:c9:21:81:bd:89:77:e3:
         47:5d:79:61:e5:c7:0f:cf:b4:99:e3:eb:09:fc:97:86:20:58:
         ca:80:88:47:2b:d3:1b:92:e3:2c:0a:19:2c:f8:75:3b:2b:76:
         2f:39:3d:e5:7b:b9:72:dc:8c:2f:08:8a:a6:74:a4:4e:90:a6:
         2b:36:d0:1d:0b:0a:c0:94:29:5c:5a:75:bf:86:c3:90:09:c4:
         7e:f4:12:ec:77:e4:70:37:95:26:49:4d:73:16:68:42:de:56:
         47:ec:e0:37:f7:d3:30:1a:0b:ea:6f:f6:f6:ef:e0:70:35:a8:
         0d:20:76:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:28 2026 by rpki-client