This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
File:                     IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json)
Hash identifier:          V27zys6oXhweDa45QmHVDToZVOzInr19x2UOq+fGxJs=
Subject key identifier:   F3:BC:DD:FB:78:DF:52:48:13:D3:FA:2C:3D:50:3A:5F:EF:D3:7B:3D
Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
Certificate issuer:       /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Certificate serial:       0766
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
Manifest number:          075B
Signing time:             Sat 24 Jan 2026 21:00:10 +0000
Manifest this update:     Sat 24 Jan 2026 21:00:09 +0000
Manifest next update:     Sat 31 Jan 2026 21:00:09 +0000
Files and hashes:         1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: iiz9hYDO1pkPYO8V7XcM4mx92cmqcQdoXVzeyA+gbmY=)
                          2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
        Validity
            Not Before: Jan 24 21:00:09 2026 GMT
            Not After : Jan 31 21:00:09 2026 GMT
        Subject: CN=697532d9-5fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:ec:b6:1d:95:0c:45:2d:13:58:05:b7:7c:
                    dc:ab:ad:60:86:4d:d7:70:9e:b5:0c:48:8c:81:d2:
                    e5:06:45:23:40:30:84:ab:a6:9b:96:44:9c:86:7a:
                    48:57:3d:24:d9:f6:f7:01:fa:f5:39:d4:cd:c9:82:
                    2f:11:a3:55:34:7c:b8:f1:93:7b:f5:1b:c9:3f:c7:
                    4a:a4:ac:91:d5:2a:61:7c:56:f1:24:16:ff:4f:a0:
                    ea:db:2a:0f:8f:c8:2f:1f:e0:68:0a:07:60:8a:64:
                    65:fc:51:54:fc:4d:1b:7d:ee:52:e0:15:a2:6a:37:
                    8f:7d:df:dd:45:4b:8a:f8:be:93:68:a8:4a:b7:77:
                    51:dc:e6:9b:cb:1e:5e:1c:43:89:17:43:3c:83:66:
                    ba:9f:db:fe:21:ce:0d:d1:e4:9d:70:c1:24:8c:f0:
                    b6:6e:48:1b:22:3f:90:df:13:10:0e:78:49:0a:f8:
                    bd:ce:7d:8d:b9:e9:5a:fd:3f:93:69:1f:f0:7f:89:
                    81:2c:0c:3a:41:ec:b2:33:9b:07:bb:fe:dd:b0:b7:
                    25:bd:c5:6e:b5:a2:27:73:96:42:22:01:4a:b8:8a:
                    f7:85:36:fd:f0:c1:2e:02:43:4d:e8:21:b0:f9:bc:
                    8f:ab:e6:a2:21:a6:75:80:17:e1:cb:b4:23:76:1b:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BC:DD:FB:78:DF:52:48:13:D3:FA:2C:3D:50:3A:5F:EF:D3:7B:3D
            X509v3 Authority Key Identifier:
                keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e9:50:aa:91:55:89:91:89:61:e8:49:e1:cf:67:9b:98:6e:
         9f:01:70:7b:95:21:6e:9a:19:13:13:cb:1a:2c:28:cd:84:4c:
         bd:76:cc:00:25:40:9e:2d:48:5c:14:c5:b5:84:1b:e3:ec:1d:
         a2:27:14:eb:11:f4:eb:dd:d8:38:87:ce:9c:c1:f0:43:4f:04:
         ee:96:72:bb:5f:a4:80:91:22:ed:bb:67:92:0e:9b:9e:2c:54:
         e6:75:b7:b7:50:52:25:44:e3:5f:b2:93:92:5b:0d:32:12:c7:
         de:78:b1:d9:9b:bd:3f:55:48:73:19:34:8d:e5:ac:dd:0d:58:
         6b:c5:35:80:fb:31:b4:bb:c4:1e:da:59:33:ac:0a:26:35:6c:
         5a:25:12:96:57:ea:9e:90:c0:29:40:ba:31:eb:14:b7:96:bb:
         a5:20:8e:78:7f:1f:87:75:a0:f6:fd:5c:17:d1:3e:f2:59:e0:
         11:58:03:9a:d0:80:89:97:4a:d2:a5:51:17:fb:a2:e1:4f:99:
         e9:0a:ad:f1:7b:91:24:64:a0:0e:7c:e5:93:ac:48:cf:b0:60:
         10:10:89:d5:ed:84:f4:01:f2:29:0b:1b:d6:21:56:35:31:af:
         dc:e2:eb:1c:1e:88:5b:7a:28:b1:ff:97:60:6e:38:f5:61:76:
         2b:57:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:39 2026 by rpki-client