This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
File:                     iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json)
Hash identifier:          n6BwgJXPFfOtM1X6kgWCQkGvl4ud2Fq3SzhffCUDVEA=
Subject key identifier:   ED:3E:5D:52:B8:AC:4F:CD:02:E9:CE:C6:C8:F4:B1:D3:18:81:1C:F2
Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
Certificate issuer:       /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
Manifest number:          46
Signing time:             Sun 25 Jan 2026 06:24:50 +0000
Manifest this update:     Sun 25 Jan 2026 06:24:49 +0000
Manifest next update:     Sun 01 Feb 2026 06:24:49 +0000
Files and hashes:         1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: uw/Cr6497BwLrgnVdksPPo5tvsqjHKvVlS5q4pzlzdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
        Validity
            Not Before: Jan 25 06:24:49 2026 GMT
            Not After : Feb  1 06:24:49 2026 GMT
        Subject: CN=6975b732-1384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:40:d4:a0:48:8c:47:0d:43:98:71:f7:cb:
                    85:af:4a:f6:18:2d:99:2b:02:2d:0c:65:db:c9:ae:
                    e1:ae:b8:41:28:68:96:92:7f:c4:ae:b9:db:39:ee:
                    8c:7f:6b:c6:46:f9:77:04:ed:d3:98:61:8d:41:67:
                    02:80:fa:ed:de:e0:f7:c0:49:ed:e5:a8:ea:2f:fe:
                    44:d9:ae:45:b9:44:5d:f9:f9:cb:35:a2:c7:7c:ce:
                    7b:f6:7a:0e:0a:86:88:9f:aa:d0:c9:a9:db:89:73:
                    f4:27:4b:ec:cc:70:d3:c7:2b:2f:8d:5d:01:d8:0b:
                    0b:4e:2a:33:11:a2:28:0b:4d:92:ad:69:9e:e6:4d:
                    25:40:03:c7:b5:16:6d:86:ec:15:e0:b9:b1:e8:c5:
                    aa:a5:f0:7d:6e:1f:36:58:94:9c:db:31:71:09:53:
                    ca:9b:c9:0c:0b:00:a8:e4:a1:d9:46:aa:ab:34:42:
                    1e:60:8c:52:7e:6f:10:50:84:79:52:76:f7:a4:ce:
                    76:97:74:1b:67:94:55:a0:05:64:27:5f:fa:76:5d:
                    a9:80:f5:e7:ad:0b:61:52:92:9d:ae:d7:7c:bb:ba:
                    41:0d:73:58:f3:6d:5f:ca:39:4c:56:b7:e3:9d:81:
                    0e:ae:bb:20:26:12:fa:29:e6:e6:c1:4c:a5:ef:5f:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3E:5D:52:B8:AC:4F:CD:02:E9:CE:C6:C8:F4:B1:D3:18:81:1C:F2
            X509v3 Authority Key Identifier:
                keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:37:33:a0:2b:14:05:9f:72:ea:ea:d2:c6:d0:b4:61:c4:8f:
         12:c1:d5:38:c4:46:d1:41:40:01:41:a7:e9:0b:d5:a4:bb:14:
         16:38:44:53:f6:f6:4f:cb:ff:be:d2:bb:7f:26:af:20:a5:85:
         c7:80:03:0e:d8:af:98:7b:d1:e0:7c:43:86:81:90:1d:2c:4d:
         6f:75:23:bf:3a:83:40:00:1b:27:72:bb:47:88:62:df:fa:fd:
         cf:06:de:31:84:85:f4:0d:fc:e7:89:cb:66:a2:b0:f6:7e:06:
         2e:43:6b:af:2b:94:04:f8:e0:18:56:d2:47:de:97:bb:52:7d:
         d1:44:94:f1:dd:7f:dd:82:5f:e1:86:b4:51:88:99:5d:a7:28:
         3c:44:e5:90:a8:cd:6e:f3:91:dc:09:ba:ad:de:40:0f:1d:66:
         77:26:91:43:6b:6d:a5:3a:8e:ab:27:4f:62:4c:9d:12:ab:d8:
         2b:aa:e4:aa:cf:01:0e:4e:26:bb:72:d8:66:af:c1:0e:e5:3e:
         cd:51:f2:ee:59:93:9b:4f:56:50:88:1d:49:f9:b6:3c:06:04:
         33:a8:3f:ab:b5:84:a4:1f:4b:e9:6c:09:19:48:10:5b:bf:ef:
         4f:28:94:8b:fb:00:68:89:c7:58:d0:df:c3:94:85:b3:a7:5d:
         c8:2f:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:11:16 2026 by rpki-client