This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File:                     iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier:          9TgeU4bJhIq5ZqRSSFZ//y/sIZYOgV8NhnKzubI1lPY=
Subject key identifier:   C7:78:8E:3B:B5:3E:6C:28:98:37:4E:9F:AC:EE:43:C7:6C:A0:84:FE
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer:       /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number:          085E
Signing time:             Sat 24 Jan 2026 20:28:00 +0000
Manifest this update:     Sat 24 Jan 2026 20:28:00 +0000
Manifest next update:     Sat 31 Jan 2026 20:28:00 +0000
Files and hashes:         1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: PbHg8/IjeFzbUDMadqj87qsb0vMtRokZ0yoLVAidhls=)
                          2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: cqaNGUAp+AM9Nk5TWMcE/5SRJKY4Makpxzc5uTKkH7g=)
                          3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: O05NjBwYNNvXC8JoMWk3EyZg7iktCjusVDBEEW7nGKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
        Validity
            Not Before: Jan 24 20:28:00 2026 GMT
            Not After : Jan 31 20:28:00 2026 GMT
        Subject: CN=69752b50-cd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:df:ce:10:63:af:e8:0a:67:92:70:3f:33:
                    10:ee:4c:ec:a0:4a:8a:ce:aa:b1:ce:ae:6c:25:e0:
                    94:23:43:3a:27:b7:64:ff:7c:00:4e:4d:fa:8c:9c:
                    64:f2:97:5f:61:ca:2b:da:5b:5c:8a:bc:b7:05:5b:
                    35:d9:6a:d1:af:0e:ec:90:07:4c:c6:4d:88:bc:78:
                    d8:90:df:44:e9:fa:12:b6:56:55:04:76:75:a4:ab:
                    24:04:af:94:35:54:e0:93:1b:f5:d5:c0:e5:92:27:
                    da:ad:30:79:ed:a6:18:ff:06:f6:43:0e:49:df:4b:
                    1a:d8:77:c3:26:2a:d7:45:f5:6e:6d:46:0c:5f:1a:
                    6f:81:e2:bd:f0:e1:af:12:63:85:f9:cc:77:2e:c5:
                    b0:88:24:09:94:7d:26:af:a3:d1:29:8f:9e:fd:97:
                    f5:7b:1a:6e:22:2f:0a:a2:7e:a2:9f:38:7c:fb:22:
                    c7:53:ac:f0:63:60:0b:f8:82:9f:32:17:b9:e0:d4:
                    e6:52:17:8d:84:c0:fa:37:87:51:bc:d9:f8:82:f8:
                    19:2c:88:14:34:f9:f1:5a:8b:ce:57:ff:0b:f1:cc:
                    fc:bb:60:14:ab:32:ab:d6:40:6d:ec:ab:56:bf:75:
                    8c:eb:bb:20:6f:5b:a3:bc:54:8e:78:a7:a4:91:91:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:78:8E:3B:B5:3E:6C:28:98:37:4E:9F:AC:EE:43:C7:6C:A0:84:FE
            X509v3 Authority Key Identifier:
                keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0a:92:08:5a:5b:8d:5f:c7:07:af:08:6c:0c:5a:36:d0:4f:
         ef:cb:89:5f:ec:d2:d4:50:9c:e2:34:af:27:84:79:a1:d3:c4:
         2f:3d:d8:d8:5b:fb:85:cd:1c:ce:82:02:aa:f2:31:09:cd:33:
         85:c7:54:a1:7c:05:7b:04:ea:b8:2f:1a:ec:3c:c9:4e:ab:28:
         4f:b9:8d:80:6c:c0:54:4c:9b:85:07:ba:fc:b3:fa:64:c9:12:
         78:ff:54:5b:2f:07:74:0c:40:d6:5e:6f:ba:c6:f1:8e:e8:5a:
         ad:19:30:45:a1:8c:9d:e0:dc:d1:45:c9:74:5a:03:a1:da:95:
         18:77:e4:12:2d:9d:48:09:6a:c8:7d:93:a6:d2:3d:50:71:3f:
         f0:95:f6:10:3c:1a:54:c6:ac:4d:7f:6c:d1:5b:ef:19:a3:b4:
         17:e4:c8:df:e1:e7:1d:72:88:b8:7a:ce:dc:99:8b:c6:48:52:
         74:46:5f:95:59:51:98:85:dd:a0:44:a2:9c:38:ed:57:06:c6:
         bf:9e:2a:07:7b:8a:9f:89:db:a9:50:91:00:03:a7:7a:d1:7a:
         20:35:bd:84:4d:ba:50:f4:b5:c8:ff:16:3c:b7:58:60:17:fb:
         92:08:f4:27:1a:61:42:c7:ad:0b:a0:fb:da:87:52:92:88:64:
         e0:23:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:49 2026 by rpki-client