This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File:                     i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier:          WyzgXUIQ24WviRph+XP+e+9mlE8jh5bXAFEAo59Qajk=
Subject key identifier:   38:FB:A5:36:0C:95:52:87:54:8C:78:18:A4:85:77:D2:0A:FE:FE:78
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       07D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number:          074C
Signing time:             Sat 24 Jan 2026 21:29:48 +0000
Manifest this update:     Sat 24 Jan 2026 21:29:47 +0000
Manifest next update:     Sat 31 Jan 2026 21:29:47 +0000
Files and hashes:         1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: zRzt3RNHO2HGgi515Q9nycssAKU6DeN1gOlyYSmhM3w=)
                          2: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=)
                          3: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=)
                          4: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=)
                          5: 317095E0A28911ECBC355360C4F9AE02.roa (hash: Pa0iKARYCWRSksppmbtkHK6D27x19i+sB6izIsd+594=)
                          6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=)
                          7: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=)
                          8: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: dZT8pFL3me/5jYG8Ea80HkYVcuX0yrJ/SdRGtako/ko=)
                          9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: ahURvf3WgTOlPvJ2Yvz5ikj2GmylBcCLMIT4Gjnelzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 24 21:29:47 2026 GMT
            Not After : Jan 31 21:29:47 2026 GMT
        Subject: CN=697539cc-27e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:ac:87:eb:aa:e3:0c:5f:22:8e:64:45:02:
                    3f:ff:be:ea:24:ef:2f:5c:32:11:dc:7a:f0:76:a4:
                    6e:95:c1:a9:10:68:74:39:8c:1d:99:6d:2d:4b:b5:
                    50:d9:d0:11:3f:ce:8c:e6:54:da:23:ff:b9:95:af:
                    77:4a:eb:fa:36:8e:c5:84:a7:2b:70:58:04:07:15:
                    ec:03:b8:bd:9d:e2:c5:31:85:81:25:b2:17:90:b1:
                    8a:0f:c5:dc:75:21:9e:77:d7:a8:d0:04:db:67:e6:
                    24:bb:38:d6:93:41:cc:16:e3:d2:0a:20:96:0f:a4:
                    7a:43:45:de:38:4a:2f:0d:a6:c5:d7:6f:95:85:ec:
                    a2:bb:53:54:d7:ab:89:fa:03:4a:28:5b:6c:02:78:
                    31:4f:4b:a4:ca:8c:59:10:1c:b4:8b:2e:d7:d0:87:
                    95:d3:e0:e6:83:94:d3:8d:07:01:17:5c:fb:4c:7d:
                    9f:ce:67:d6:e6:af:45:e1:13:d6:1d:3e:7c:15:21:
                    d7:1b:9f:48:1f:2c:8b:83:c8:2c:0e:e5:1b:5f:fe:
                    d0:d0:c2:4d:ba:12:38:8d:b7:03:69:99:a8:b4:f3:
                    13:a7:3d:0e:80:ea:18:b5:ee:a3:ca:ff:ea:8b:a5:
                    ef:e5:35:f4:b5:e7:32:fb:8f:59:11:b3:df:75:41:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FB:A5:36:0C:95:52:87:54:8C:78:18:A4:85:77:D2:0A:FE:FE:78
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5f:55:9f:14:48:4a:44:33:9d:83:f5:5c:95:de:04:ea:0c:
         f5:fe:c1:1c:6e:71:d0:a7:03:d0:e2:e3:c2:de:f2:2c:42:19:
         cc:26:cc:b1:be:44:c7:1d:39:7c:8d:1f:54:a0:dc:b6:ed:d2:
         49:75:a4:ba:50:65:0d:61:92:67:ae:f0:e6:eb:2d:7c:86:32:
         35:18:ee:07:3c:ee:53:36:0b:42:e4:ef:72:3f:a2:cf:c2:fc:
         39:61:3e:bc:8d:8e:fb:31:17:ba:c4:7a:56:8a:ee:1b:b2:a7:
         21:04:65:8a:ee:e0:c2:b2:9c:94:0f:68:3f:44:12:e6:c3:96:
         ac:8a:07:6d:96:45:d4:01:6a:65:31:89:e0:99:13:53:80:ef:
         e7:db:0c:50:68:3c:46:ed:5e:d7:4d:4a:7c:e2:f7:d5:5c:f0:
         ee:0c:2c:b6:2d:63:12:d0:0f:71:3e:37:6c:1e:93:57:2a:ed:
         9c:dc:a3:8e:58:6e:62:d9:09:c3:61:6b:46:b4:af:6e:af:15:
         22:e7:68:df:80:79:c0:dd:68:77:4e:77:1f:95:53:83:c5:df:
         2e:ec:65:38:60:c2:ac:53:98:b0:9e:a7:e2:58:87:c0:4b:8c:
         e3:7f:68:93:fd:c6:b5:3e:85:8d:dd:35:71:0a:03:55:01:4d:
         be:8e:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:13:42 2026 by rpki-client