This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
File:                     IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json)
Hash identifier:          dvHVD3saQZx+gvzI4096GA7P0NjzkGM4ct5s7DHAiZE=
Subject key identifier:   95:94:63:FF:20:9E:5E:DA:68:BF:DC:54:BC:90:C7:FA:70:A2:EB:EB
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Certificate issuer:       /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial:       07CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
Manifest number:          07C1
Signing time:             Sat 24 Jan 2026 20:41:50 +0000
Manifest this update:     Sat 24 Jan 2026 20:41:50 +0000
Manifest next update:     Sat 31 Jan 2026 20:41:50 +0000
Files and hashes:         1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: gs++sfieIbOEofWrElZwy34jVlZh9/Zn7CQQjt2H9GY=)
                          2: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: BlNMvykSVEqNeWKjQSI6MISWgcMVQUYKsr+oWp8+db0=)
                          3: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: CNZBv4FK9ZWvTtzm+cWIR1zfUXJg63OkryMkTZVFNpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
                          rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
        Validity
            Not Before: Jan 24 20:41:50 2026 GMT
            Not After : Jan 31 20:41:50 2026 GMT
        Subject: CN=69752e8e-fa84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:31:5b:79:82:bc:0b:f1:71:cf:d9:ee:fd:
                    14:68:fa:43:4b:62:aa:52:df:3f:9c:c0:da:51:6b:
                    53:10:52:79:d2:41:d9:90:d6:08:35:80:11:a7:ac:
                    c1:23:e9:fe:b5:16:0a:7b:3c:ae:50:f3:f4:01:9e:
                    93:8c:60:66:18:0c:05:96:83:7c:10:d7:ed:18:c8:
                    02:ca:e6:d4:ad:61:6b:45:0f:de:ae:3d:22:bc:c2:
                    1e:27:28:a0:3b:f2:ae:64:85:2b:fa:0e:ad:b4:c8:
                    97:3a:d4:85:81:22:6d:01:b5:dc:63:f3:90:89:54:
                    d4:f9:e0:d7:c0:16:f7:70:5f:87:d3:d1:d8:84:cc:
                    d8:0e:19:4a:a5:74:2b:fd:86:90:0f:15:7a:8e:4e:
                    89:1b:9c:22:78:47:87:97:33:f8:87:e4:c2:86:7e:
                    c5:0e:f4:76:83:d7:af:27:54:3b:d1:ce:20:20:1e:
                    07:4d:ac:e0:58:43:47:5a:d8:f3:9b:24:c0:80:30:
                    08:c2:af:76:27:c1:4a:32:2a:ec:1a:ac:4e:91:bd:
                    a8:cd:31:33:43:d3:36:82:2e:ea:11:39:ad:78:b1:
                    2f:13:b8:66:5b:b2:db:d1:e8:d4:82:76:c5:68:c4:
                    12:a6:5a:b0:f8:e4:01:39:03:87:45:c6:58:98:d5:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:94:63:FF:20:9E:5E:DA:68:BF:DC:54:BC:90:C7:FA:70:A2:EB:EB
            X509v3 Authority Key Identifier:
                keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5e:0b:a1:30:bf:48:ca:70:98:15:7e:b8:79:29:55:e0:6d:
         ee:5a:f0:15:d0:53:e2:65:d9:53:6a:b6:51:e6:3b:62:09:96:
         8e:fa:9d:46:e2:74:65:f3:a5:37:6b:a7:28:57:31:e8:6f:c4:
         a4:b3:58:45:b5:8e:4e:0d:33:d7:ec:df:af:be:d7:1d:63:29:
         3e:46:22:4d:66:ea:87:3f:3a:97:c4:89:43:df:f1:af:b8:ad:
         d6:7c:03:6f:ef:e1:93:6a:14:1e:b0:b7:e4:7f:cf:85:70:45:
         94:75:e0:e7:52:e4:8b:18:85:47:5b:99:7d:a8:40:89:42:1c:
         11:d8:72:4c:ba:20:f1:71:0f:7f:2b:ba:32:70:f1:13:1d:e7:
         59:a6:79:0f:5a:2f:8a:e1:b7:c5:2f:af:1a:38:56:fe:65:b2:
         98:cc:ad:a3:ff:b0:8e:c8:38:3d:e5:80:ec:3c:6e:8a:88:99:
         f2:c2:f5:66:f5:76:21:96:7d:88:7e:10:79:7a:28:1c:2c:ee:
         55:ca:4d:30:5a:65:3c:26:9a:fa:b5:11:4a:0c:ad:cd:da:93:
         2d:31:06:19:fb:99:51:11:68:7d:45:8c:4c:f6:56:b8:de:12:
         9a:9b:f2:40:59:56:3e:6b:b4:18:5a:84:c8:74:c7:d2:42:f8:
         fc:22:3d:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy
QjgzOUZCRUQwHhcNMjYwMTI0MjA0MTUwWhcNMjYwMTMxMjA0MTUwWjAYMRYwFAYD
VQQDDA02OTc1MmU4ZS1mYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAkxW3mCvAvxcc/Z7v0UaPpDS2KqUt8/nMDaUWtTEFJ50kHZkNYINYARp6zB
I+n+tRYKezyuUPP0AZ6TjGBmGAwFloN8ENftGMgCyubUrWFrRQ/erj0ivMIeJyig
O/KuZIUr+g6ttMiXOtSFgSJtAbXcY/OQiVTU+eDXwBb3cF+H09HYhMzYDhlKpXQr
/YaQDxV6jk6JG5wieEeHlzP4h+TChn7FDvR2g9evJ1Q70c4gIB4HTazgWENHWtjz
myTAgDAIwq92J8FKMirsGqxOkb2ozTEzQ9M2gi7qETmteLEvE7hmW7Lb0ejUgnbF
aMQSplqw+OQBOQOHRcZYmNWURwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWUY/8g
nl7aaL/cVLyQx/pwouvrMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5
MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC
cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChXguhML9IynCYFX64eSlV4G3uWvAV0FPiZdlTarZR5jtiCZaO+p1G
4nRl86U3a6coVzHob8Sks1hFtY5ODTPX7N+vvtcdYyk+RiJNZuqHPzqXxIlD3/Gv
uK3WfANv7+GTahQesLfkf8+FcEWUdeDnUuSLGIVHW5l9qECJQhwR2HJMuiDxcQ9/
K7oycPETHedZpnkPWi+K4bfFL68aOFb+ZbKYzK2j/7COyDg95YDsPG6KiJnywvVm
9XYhln2IfhB5eigcLO5Vyk0wWmU8Jpr6tRFKDK3N2pMtMQYZ+5lREWh9RYxM9la4
3hKam/JAWVY+a7QYWoTIdMfSQvj8Ij2k
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:48 2026 by rpki-client