This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          q+jGU+s7VV69tp95gyJjZzxERz0+i5hG6AUy4huE4ys=
Subject key identifier:   1E:49:6E:92:36:F6:AA:BE:AA:33:D8:96:0D:40:96:FA:91:B1:1C:4A
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          95
Signing time:             Sun 25 Jan 2026 05:36:50 +0000
Manifest this update:     Sun 25 Jan 2026 05:36:49 +0000
Manifest next update:     Sun 01 Feb 2026 05:36:49 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: zEjkDlC92eFO752R+ElxCv5sYjut9tdFVT2dyC8Bnck=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: A91jNhWQ9cnGYIRVqtdkyzCyicJkvevuLDYE+UHqhA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Jan 25 05:36:49 2026 GMT
            Not After : Feb  1 05:36:49 2026 GMT
        Subject: CN=6975abf2-02ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:fe:9e:c0:e6:6f:82:12:bf:14:ec:61:2d:
                    84:da:d8:b7:6d:e0:bb:9e:56:12:e9:ac:99:97:89:
                    d9:c5:8b:89:1e:f1:df:23:d1:e9:c8:b1:71:e6:e3:
                    0d:48:85:f2:aa:ec:23:7c:fe:8a:3b:16:59:8c:67:
                    6a:37:29:e3:a6:25:1c:fa:5f:80:b2:68:0d:4f:a6:
                    a6:16:04:fa:1d:ee:ed:33:ab:a0:0a:ff:38:6a:bb:
                    78:bf:ec:1d:08:d2:d0:cc:c4:12:90:e0:6f:af:d6:
                    0f:57:76:bb:47:1a:dc:77:63:3e:11:db:fe:93:34:
                    d6:2f:95:c4:5e:58:70:7c:7e:e6:1d:2d:63:7d:70:
                    58:07:ef:66:2f:05:8b:56:6e:68:3b:b5:b1:b0:b1:
                    01:80:18:0b:13:39:9a:5e:4c:1e:26:ce:c1:44:b4:
                    cf:c1:4f:5b:b1:5d:10:27:c6:70:ef:b3:0a:ad:e0:
                    8b:21:03:35:b9:29:96:15:a1:75:ca:3c:98:5a:ab:
                    e9:e0:51:a9:cb:3d:bf:73:a9:f7:05:84:30:01:76:
                    54:84:63:46:5f:a3:8c:76:4c:3f:58:54:cc:28:d1:
                    7d:fe:51:fe:a5:f3:1e:85:ff:43:0f:ff:1c:95:28:
                    63:58:3c:c9:5e:3a:a2:89:6b:95:c8:76:0f:33:f2:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:49:6E:92:36:F6:AA:BE:AA:33:D8:96:0D:40:96:FA:91:B1:1C:4A
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:27:ae:07:b0:33:60:e1:4f:f9:37:21:ec:cc:5c:af:12:b3:
         6e:31:72:74:ec:b8:27:d0:85:42:76:83:19:10:b3:13:65:18:
         50:2a:d8:7e:2c:e6:92:7e:8f:30:13:b9:02:35:01:61:89:ff:
         0b:a5:3b:24:39:4b:7c:9d:53:d5:1f:e1:89:28:62:0c:8b:ef:
         49:c5:4a:45:f5:33:2b:51:64:f4:77:93:ff:64:0a:ac:67:0e:
         3c:cd:99:bf:40:68:76:b7:3a:81:e5:bc:25:2d:85:d3:85:10:
         0b:be:bb:f8:46:4b:e6:45:17:92:d6:c4:b4:18:c7:48:19:0e:
         70:cd:39:64:f2:39:cf:13:1c:e7:76:96:d0:b2:dd:d3:6d:91:
         71:84:f4:3c:12:93:cf:e1:b0:27:0e:89:2d:dd:55:d7:f8:0a:
         15:85:71:0c:cc:d5:3a:5f:2c:27:5b:1d:c7:48:11:df:c3:77:
         62:59:49:cc:a5:0c:89:f5:eb:57:d5:3c:d4:8c:97:f1:8a:16:
         51:28:5c:0f:7b:ea:5f:0d:a6:0d:10:cc:10:a2:d8:9c:18:48:
         77:c1:9f:a0:ed:77:ee:0f:7a:6f:a4:9a:44:6a:55:a6:91:75:
         ad:33:5f:c3:41:24:f4:31:a7:8f:f4:29:cc:6c:7f:63:0c:0a:
         0d:97:a3:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QjQ0NjAxMTAvBgNVBAUTKDg4OTE5NTM4RUVERUM4MzIwRDVFQUY2QjFGMzJCMjk4
MjNBQjc4MTAwHhcNMjYwMTI1MDUzNjQ5WhcNMjYwMjAxMDUzNjQ5WjAYMRYwFAYD
VQQDDA02OTc1YWJmMi0wMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAws7+nsDmb4ISvxTsYS2E2ti3beC7nlYS6ayZl4nZxYuJHvHfI9HpyLFx5uMN
SIXyquwjfP6KOxZZjGdqNynjpiUc+l+AsmgNT6amFgT6He7tM6ugCv84art4v+wd
CNLQzMQSkOBvr9YPV3a7Rxrcd2M+Edv+kzTWL5XEXlhwfH7mHS1jfXBYB+9mLwWL
Vm5oO7WxsLEBgBgLEzmaXkweJs7BRLTPwU9bsV0QJ8Zw77MKreCLIQM1uSmWFaF1
yjyYWqvp4FGpyz2/c6n3BYQwAXZUhGNGX6OMdkw/WFTMKNF9/lH+pfMehf9DD/8c
lShjWDzJXjqiiWuVyHYPM/LTjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5JbpI2
9qq+qjPYlg1AlvqRsRxKMB8GA1UdIwQYMBaAFIiRlTju3sgyDV6vax8yspgjq3gQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDQ2MC8wNDk4NjQ3NjE0
ODcxMUYwQTc5RUFCMjZDNEY5QUUwMi9pSkdWT083ZXlESU5YcTlySHpLeW1DT3Jl
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDQ2MC8wNDk4NjQ3NjE0ODcxMUYwQTc5RUFCMjZDNEY5QUUwMi9pSkdWT083ZXlE
SU5YcTlySHpLeW1DT3JlQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4J64HsDNg4U/5NyHszFyvErNuMXJ07Lgn0IVCdoMZELMTZRhQKth+
LOaSfo8wE7kCNQFhif8LpTskOUt8nVPVH+GJKGIMi+9JxUpF9TMrUWT0d5P/ZAqs
Zw48zZm/QGh2tzqB5bwlLYXThRALvrv4RkvmRReS1sS0GMdIGQ5wzTlk8jnPExzn
dpbQst3TbZFxhPQ8EpPP4bAnDokt3VXX+AoVhXEMzNU6XywnWx3HSBHfw3diWUnM
pQyJ9etX1TzUjJfxihZRKFwPe+pfDaYNEMwQoticGEh3wZ+g7XfuD3pvpJpEalWm
kXWtM1/DQST0MaeP9CnMbH9jDAoNl6Nb
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:01:18 2026 by rpki-client