This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File:                     IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier:          VQMrxpQniDQ39ZH+xfXPKQcQbf4j7VEPXtbN7cFXCNY=
Subject key identifier:   43:E8:B5:74:AA:62:3E:8F:A3:55:BD:55:C0:6D:3F:C4:C2:52:11:7B
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer:       /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial:       0B74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number:          0B66
Signing time:             Sat 24 Jan 2026 18:43:01 +0000
Manifest this update:     Sat 24 Jan 2026 18:43:01 +0000
Manifest next update:     Sat 31 Jan 2026 18:43:01 +0000
Files and hashes:         1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: +EbH1kBHoXsnHyFbNQQm+Nh+flYAe8NHP5AGgwgFzpI=)
                          2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: kISEPEmE2ZLNGr7M+gIIuLb+wfjhIl0pN5Ozrn7290M=)
                          3: A558194E801F11EFB86B2647C4F9AE02.roa (hash: yZl4Rgg31ofEgyuQezY4Q6zD53Q3cflOAAa2hJJAiIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
                          rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2932 (0xb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
        Validity
            Not Before: Jan 24 18:43:01 2026 GMT
            Not After : Jan 31 18:43:01 2026 GMT
        Subject: CN=697512b5-bdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:c9:7d:91:52:ba:a1:25:4a:cd:0b:b5:8d:
                    22:7a:aa:03:07:27:cb:6d:96:93:75:bb:54:83:d5:
                    fb:e5:e4:13:c9:cf:18:63:4b:a3:32:cc:62:3b:40:
                    a7:bb:8e:ac:08:98:9c:65:51:08:fe:29:ac:68:0d:
                    94:ae:c5:a7:73:25:9b:4b:92:99:11:87:b1:15:80:
                    3a:2b:66:08:5a:fd:90:2b:49:54:df:3d:fa:4c:f5:
                    78:11:16:85:05:44:e8:a6:e3:33:3f:79:6c:51:22:
                    da:a7:2b:8a:a8:8d:7d:ff:cb:71:59:73:d7:5b:59:
                    95:0f:aa:3f:b4:01:c8:f1:a6:06:0d:5e:7f:e5:07:
                    b4:65:7b:1a:a8:75:b1:2d:e0:0f:0a:70:d3:ca:28:
                    fe:14:16:29:53:1b:b3:f0:b8:e1:18:fe:da:8a:13:
                    ab:ff:e9:b0:db:b1:d6:2a:bc:86:fc:cf:d4:3b:1d:
                    3a:30:c2:3d:8a:02:c8:de:29:7f:f7:47:0f:10:77:
                    de:da:2a:fd:a1:87:c8:1d:44:2d:38:c6:ec:92:bc:
                    11:55:d8:cf:51:33:2d:6d:bb:e4:ac:ba:fb:05:d6:
                    58:bb:e9:ad:b4:d8:d6:a5:3d:e0:ec:64:a8:8f:64:
                    db:f2:1b:95:a0:c6:5d:34:99:22:7d:d2:45:e4:d9:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E8:B5:74:AA:62:3E:8F:A3:55:BD:55:C0:6D:3F:C4:C2:52:11:7B
            X509v3 Authority Key Identifier:
                keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:85:af:f8:75:f3:34:31:bb:f4:17:b5:66:59:8c:11:58:bb:
         af:c7:52:59:93:5a:31:2d:da:58:e0:15:a0:50:56:35:67:06:
         f8:f0:6b:c6:63:28:e6:60:ba:07:02:2f:b7:1c:18:e7:a7:05:
         4b:1c:71:21:a9:37:c6:e1:da:5d:3e:17:24:b7:46:78:ec:8b:
         18:ae:e2:48:b0:2f:93:de:fd:80:6d:22:b0:31:52:9e:75:f8:
         90:9b:ab:fd:e7:3a:1f:a0:88:95:30:28:29:36:c1:49:39:01:
         dc:61:3e:3a:37:e3:f0:85:ae:7b:ef:5e:fe:45:9b:48:b4:f5:
         ee:d7:83:f6:46:f6:a5:7f:00:a3:a1:07:c6:33:67:01:30:8d:
         c1:08:b3:69:12:6d:46:e2:93:c8:ca:1e:f1:42:a8:2e:1e:a5:
         40:83:7a:21:26:2b:00:6e:13:ad:b2:f6:e1:13:47:c3:ae:c4:
         1a:44:94:3a:e7:1a:c8:fb:8d:38:92:61:a2:b5:a3:8e:a8:a7:
         dd:dc:b6:24:fb:17:e2:7a:21:aa:22:6d:9c:dd:78:0f:66:23:
         3c:4d:9c:d9:9c:ca:18:90:6c:6f:fd:db:5d:5d:ed:ef:65:f1:
         d1:ca:93:0c:1e:32:fe:77:3d:c6:4b:41:9a:f9:9a:1e:e7:a8:
         34:f0:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:32:39 2026 by rpki-client