This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
File:                     iUKJrUDufmJvXNgvzsVAbbkeHnE.mft (raw, json)
Hash identifier:          UfRf1+objP+SQrQfaQsrNlbwQi5pZLX5fa6CIGF/xdc=
Subject key identifier:   57:3D:69:78:F6:8A:8E:83:65:FD:80:D1:32:27:5F:7A:E7:5E:DF:1D
Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
Certificate issuer:       /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
Manifest number:          0117
Signing time:             Sun 25 Jan 2026 04:08:29 +0000
Manifest this update:     Sun 25 Jan 2026 04:08:29 +0000
Manifest next update:     Sun 01 Feb 2026 04:08:29 +0000
Files and hashes:         1: iUKJrUDufmJvXNgvzsVAbbkeHnE.crl (hash: PUea9AP1V86WXvl3NbEyVFRxoyoaFnzeOCJX1vvvDHI=)
                          2: 9EC3DA0CABC311F0B5C5583DC4F9AE02.roa (hash: 2zozSPDx04yxBo1WhaEzc27J/w3MqI9UcdjsXWDV7UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
                          rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
        Validity
            Not Before: Jan 25 04:08:29 2026 GMT
            Not After : Feb  1 04:08:29 2026 GMT
        Subject: CN=6975973d-9357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:92:1f:72:40:b1:9d:27:47:5a:72:48:b1:
                    fd:f7:d0:d8:c4:ad:88:58:ff:4f:99:cc:02:09:54:
                    eb:46:2e:6c:b1:e6:f8:24:dd:35:03:6f:22:9d:c5:
                    8f:29:fa:f1:0d:72:1d:1c:32:18:61:5a:91:d0:b2:
                    74:cb:6f:e9:17:f8:1b:ad:9c:59:20:19:25:44:5e:
                    83:5a:d3:25:32:f2:41:cb:37:99:34:ed:c5:a0:14:
                    10:01:37:5f:f0:69:12:c7:5a:36:12:c7:66:e3:cb:
                    de:0b:7b:cb:c1:76:78:df:15:48:58:21:2d:f4:62:
                    f8:9a:46:84:1f:ce:04:43:fa:b0:82:d1:3c:3b:10:
                    12:05:53:ab:48:a4:e5:a9:67:3b:3d:27:39:5e:f3:
                    4d:2b:2b:36:16:58:cf:8d:09:c3:14:9a:b8:03:5f:
                    85:b0:78:b6:76:f0:f4:2a:4e:98:66:e4:fe:65:61:
                    26:e6:57:db:6f:72:0d:24:ca:ae:54:06:b8:2c:7f:
                    d0:bc:3c:96:9a:8e:dd:39:16:f5:b0:89:63:ce:19:
                    0c:ec:6b:9f:29:55:ce:66:20:31:3c:61:59:0f:4c:
                    20:fb:2d:aa:97:d0:f9:d2:ed:ff:05:51:73:1a:c0:
                    ef:39:3d:cd:68:56:3b:12:ce:aa:b9:19:00:70:dd:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:69:78:F6:8A:8E:83:65:FD:80:D1:32:27:5F:7A:E7:5E:DF:1D
            X509v3 Authority Key Identifier:
                keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0a:0a:8e:ef:71:62:45:26:13:63:3f:a3:b6:b1:00:69:d8:
         38:63:16:c1:b9:fb:eb:f1:16:24:27:82:f0:29:2d:22:24:cd:
         f7:86:c3:c2:cf:1f:bf:fb:36:23:d7:0c:49:e0:ac:47:4f:fa:
         7d:5d:2f:e0:15:76:c2:c2:78:83:5b:7d:50:0f:ee:90:bb:a7:
         dd:d6:b0:19:73:22:0d:d4:1e:2c:6f:87:c8:14:f5:e1:cb:b9:
         43:d4:de:b4:2b:31:9e:21:78:62:18:7e:54:94:53:92:33:26:
         7d:31:15:62:28:43:6f:80:5b:9b:5a:7b:cc:14:a3:8a:05:cf:
         a2:db:b5:e8:bc:15:ac:1d:58:06:bb:62:07:ea:41:be:32:a9:
         3c:df:ad:10:e1:87:1f:81:69:9f:02:a4:a5:e8:2c:98:89:e5:
         f8:a5:5d:ea:4a:e5:b4:8c:2e:fa:cd:4c:42:cc:c2:0d:c3:ee:
         a3:45:15:fd:77:3b:d2:4b:aa:f3:27:49:22:6f:68:c4:72:d5:
         ea:62:61:2f:44:c4:97:58:5e:ca:a1:c2:68:ba:54:ba:c5:31:
         2e:47:15:1a:19:1a:f2:89:77:dc:28:40:9d:63:a2:2a:38:c1:
         56:d2:b1:fa:94:45:2a:24:ed:0e:31:3e:80:da:84:54:a8:bd:
         2f:69:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:34 2026 by rpki-client