This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File:                     iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier:          u5G1nY5ujpYHdann8o6Ymekw5qfVF851bGcqk5c/M24=
Subject key identifier:   0F:70:C0:D0:05:EE:68:64:43:14:00:19:65:25:24:0C:80:08:18:6C
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer:       /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number:          0265
Signing time:             Sun 25 Jan 2026 00:50:40 +0000
Manifest this update:     Sun 25 Jan 2026 00:50:39 +0000
Manifest next update:     Sun 01 Feb 2026 00:50:39 +0000
Files and hashes:         1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: 5NG21rZ44J7vDJtQW96LH5zkqOzvDBZ7S5Df/TGIWuY=)
                          2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: MDsONJ4hpkxo4XypcmXy3n39INmGozN6I7wK4cJeqNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
        Validity
            Not Before: Jan 25 00:50:39 2026 GMT
            Not After : Feb  1 00:50:39 2026 GMT
        Subject: CN=697568e0-b14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:25:01:2c:7f:f9:12:69:5d:97:47:9d:fd:
                    23:9f:68:38:5a:72:e8:70:48:01:17:65:f0:ee:a6:
                    fd:33:96:ec:b8:1e:0c:b0:2a:33:0c:20:31:ff:8c:
                    7d:80:5f:55:c2:2e:8c:f6:10:35:dc:93:0f:99:d5:
                    f4:87:03:4f:77:f7:4c:21:19:7b:bb:b4:1c:6b:6c:
                    da:71:78:45:3b:9d:bc:6b:3a:5f:33:dd:72:23:b6:
                    41:fb:ae:ba:5c:cb:74:72:58:24:11:bf:f7:b6:d4:
                    17:88:9f:b1:cd:06:b9:cc:56:1b:4a:fc:23:32:7f:
                    77:18:07:1d:30:9b:a0:f4:f6:86:d1:4b:cf:41:90:
                    78:07:00:b4:dd:84:fa:c1:ab:6e:42:3a:d9:7e:22:
                    d1:27:40:67:c3:62:fc:b2:c5:da:40:e9:e0:c0:b8:
                    f3:ed:db:61:3b:cb:c2:82:86:db:d5:17:f3:20:7c:
                    0a:4a:39:7c:2e:ee:c2:d9:7e:72:bc:0e:ad:ed:7a:
                    5d:e9:47:38:a9:49:cb:48:ee:d5:9c:a5:8f:94:3e:
                    55:a4:ea:95:8c:2a:08:39:0f:4e:59:e8:4b:66:f0:
                    a4:10:b0:55:b3:09:02:a2:fa:98:de:85:34:b9:18:
                    53:5c:8a:9b:19:b3:25:ba:9e:f2:05:9f:23:18:17:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:C0:D0:05:EE:68:64:43:14:00:19:65:25:24:0C:80:08:18:6C
            X509v3 Authority Key Identifier:
                keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:09:52:bb:4f:e0:9c:34:20:03:0c:75:42:63:25:75:ff:
         29:65:cb:d5:66:7d:7d:99:ed:26:29:d5:64:23:f2:c3:21:89:
         6c:f5:77:a4:1d:41:5a:6c:1f:38:e7:f7:76:10:f6:02:2a:ac:
         3f:05:5b:e6:82:83:39:e6:d6:cc:af:42:d9:39:c9:49:f7:ab:
         8b:d1:d4:1e:05:b2:9d:d6:91:a1:96:8a:0d:eb:a2:b6:be:7d:
         7b:a5:e4:78:e8:3f:56:7c:92:4b:ec:2c:c0:6a:cf:fc:6f:fb:
         6c:c8:a9:e5:a9:73:f1:a4:89:de:c0:c0:de:87:81:14:30:54:
         0a:b1:97:a0:08:6a:c6:82:02:8d:47:99:b2:f3:71:a3:7a:5a:
         52:d8:fa:90:28:58:2a:38:f4:97:8a:99:b1:73:60:c5:90:32:
         c9:2f:42:7c:25:7a:6a:15:cb:73:9c:53:e1:ef:f4:06:c2:f6:
         24:66:9a:1c:12:f3:63:a4:50:72:85:62:cf:ae:94:a0:56:95:
         6f:a5:79:1a:94:87:6f:f9:60:52:17:e4:61:89:0f:62:2c:99:
         49:68:03:36:81:2d:90:04:dc:ed:b4:e2:97:62:b5:94:d8:93:
         5a:8b:f4:bb:59:5c:f4:8d:fc:21:b2:03:96:eb:91:bd:fb:c8:
         c9:9a:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:54 2026 by rpki-client