This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
File:                     iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft (raw, json)
Hash identifier:          69WrTs9hpWcw/fchNTjDx20vjvzPzoMIpw2PpMxj2/8=
Subject key identifier:   CF:C0:C9:19:69:39:18:2C:FA:B8:F7:6C:67:FB:70:E9:55:30:77:F4
Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD
Certificate issuer:       /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
Manifest number:          07
Signing time:             Fri 23 Jan 2026 07:09:20 +0000
Manifest this update:     Fri 23 Jan 2026 07:09:19 +0000
Manifest next update:     Fri 30 Jan 2026 07:09:19 +0000
Files and hashes:         1: iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl (hash: MlERieJObTh38j5VebLvhan4UHGXIj2bzZhyo7h/ZIQ=)
                          2: 75431F44F12311F09E054F8D4F6F56BC.roa (hash: iBIYNyeUkoupOA2AKZcEx68TEpke4G90iHPCdBZl/tA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD
        Validity
            Not Before: Jan 23 07:09:19 2026 GMT
            Not After : Jan 30 07:09:19 2026 GMT
        Subject: CN=69731ea0-2e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:4d:0c:3f:77:c5:72:17:b6:df:5b:81:99:
                    2d:45:21:16:5a:73:3c:d0:e7:59:ed:b1:3d:9b:e6:
                    59:da:ab:48:a3:42:e1:21:00:69:a8:dc:a3:d3:5e:
                    ab:b4:95:89:88:e5:e4:5b:6c:7f:ee:99:64:ba:ae:
                    f6:c7:00:9a:19:11:68:86:3f:54:39:89:75:33:b0:
                    da:bf:68:45:52:dd:cc:6a:57:d6:90:4b:21:07:e1:
                    d9:c9:1e:59:35:9e:08:fe:fb:a1:33:a3:f0:7b:9a:
                    f4:3a:a1:67:4b:29:2a:de:8f:64:39:27:41:37:31:
                    50:97:cd:44:b6:36:fc:d2:dc:1a:1f:e1:2a:b9:1f:
                    0f:29:69:5c:9f:97:c8:5e:87:da:65:ca:aa:f7:9c:
                    19:5b:64:92:c2:53:0f:f1:32:f5:80:d2:f3:c8:32:
                    22:ed:7e:13:c9:b3:ca:ec:b8:78:51:78:90:2a:12:
                    ca:03:c2:21:b7:16:5a:e4:70:24:94:d1:d0:b6:36:
                    47:1a:d1:96:23:2c:12:01:1e:c4:e8:18:4b:ef:26:
                    18:6b:61:1f:28:a9:84:ce:0a:69:43:ee:ff:df:b7:
                    cd:9e:aa:10:4b:de:a3:59:5b:7d:dc:d8:fb:83:c2:
                    68:58:5d:ba:7f:cd:12:36:ad:e0:c8:1b:6f:98:53:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C0:C9:19:69:39:18:2C:FA:B8:F7:6C:67:FB:70:E9:55:30:77:F4
            X509v3 Authority Key Identifier:
                keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:03:08:99:69:78:cc:04:4f:dd:fe:28:ac:58:d0:05:8a:13:
         f7:c8:0a:30:6e:2c:48:9a:79:78:83:b1:e1:39:aa:db:3b:f4:
         07:31:67:b5:e1:17:7c:7f:fd:5e:0f:6b:b0:13:24:02:83:d6:
         e5:16:98:1c:ee:63:c7:f0:22:0d:24:b0:d0:09:91:20:e0:f0:
         d9:64:f8:ae:fe:20:a0:f8:96:ee:5b:74:60:32:fc:df:7c:e6:
         ae:09:83:b1:39:bf:e0:5e:0f:cd:29:54:87:79:13:73:dc:73:
         79:4b:b5:89:db:a4:41:75:76:2f:91:84:d7:3e:c4:33:70:b5:
         1e:00:bf:1d:d9:8b:3c:94:e1:e1:9c:9a:95:ff:fa:dc:ea:d0:
         c6:02:70:69:86:8f:7c:5c:d7:8e:de:fb:94:85:25:26:96:e9:
         9e:e7:bd:47:db:47:b3:98:3f:66:b2:f3:e4:4c:1d:7e:c7:76:
         13:58:4e:99:0c:a3:45:d0:e2:a2:ab:cd:fc:99:5b:88:08:c3:
         1d:f4:26:ed:8a:32:2e:56:ab:38:a8:f3:20:1f:3a:70:93:08:
         67:60:10:14:49:a3:8b:09:f8:51:a3:f2:a6:d1:3e:5c:cc:2e:
         77:35:3a:9a:25:2e:13:05:37:e3:d9:ed:4c:f8:70:b9:28:dc:
         95:ea:e0:37
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE
MkI5QTExMC8GA1UEBRMoODkwMjY4RkQyNUM3NzlFMzZGQkI4NzJGNjAxM0YzMDQx
NUZGQTJERDAeFw0yNjAxMjMwNzA5MTlaFw0yNjAxMzAwNzA5MTlaMBgxFjAUBgNV
BAMMDTY5NzMxZWEwLTJlNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCo4k0MP3fFche231uBmS1FIRZaczzQ51ntsT2b5lnaq0ijQuEhAGmo3KPTXqu0
lYmI5eRbbH/umWS6rvbHAJoZEWiGP1Q5iXUzsNq/aEVS3cxqV9aQSyEH4dnJHlk1
ngj++6Ezo/B7mvQ6oWdLKSrej2Q5J0E3MVCXzUS2NvzS3Bof4Sq5Hw8paVyfl8he
h9plyqr3nBlbZJLCUw/xMvWA0vPIMiLtfhPJs8rsuHhReJAqEsoDwiG3FlrkcCSU
0dC2Nkca0ZYjLBIBHsToGEvvJhhrYR8oqYTOCmlD7v/ft82eqhBL3qNZW33c2PuD
wmhYXbp/zRI2reDIG2+YUyMPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz8DJGWk5
GCz6uPdsZ/tw6VUwd/QwHwYDVR0jBBgwFoAUiQJo/SXHeeNvu4cvYBPzBBX/ot0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzVFQTM0NjJBRjEy
MjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVOdnU0Y3ZZQlB6QkJYX290
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaVFKb19TWEhlZU52dTRjdllCUHpCQlhfb3QwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
QjlBLzVFQTM0NjJBRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVO
dnU0Y3ZZQlB6QkJYX290MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKQDCJlpeMwET93+KKxY0AWKE/fICjBuLEiaeXiDseE5qts79AcxZ7Xh
F3x//V4Pa7ATJAKD1uUWmBzuY8fwIg0ksNAJkSDg8Nlk+K7+IKD4lu5bdGAy/N98
5q4Jg7E5v+BeD80pVId5E3Pcc3lLtYnbpEF1di+RhNc+xDNwtR4Avx3ZizyU4eGc
mpX/+tzq0MYCcGmGj3xc147e+5SFJSaW6Z7nvUfbR7OYP2ay8+RMHX7HdhNYTpkM
o0XQ4qKrzfyZW4gIwx30Ju2KMi5Wqzio8yAfOnCTCGdgEBRJo4sJ+FGj8qbRPlzM
Lnc1OpolLhMFN+PZ7Uz4cLko3JXq4Dc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:08 2026 by rpki-client