This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
File:                     IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json)
Hash identifier:          qxI1MNbsB9V/ai4XGsl1YCs6P/BpEI7007XsS/COmzI=
Subject key identifier:   B4:06:B5:29:DE:11:30:39:BD:6F:CF:35:C9:03:C7:74:DB:A4:C9:52
Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
Certificate issuer:       /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Certificate serial:       056B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
Manifest number:          0564
Signing time:             Sat 24 Jan 2026 22:36:04 +0000
Manifest this update:     Sat 24 Jan 2026 22:36:03 +0000
Manifest next update:     Sat 31 Jan 2026 22:36:03 +0000
Files and hashes:         1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: uyr5BzYDJBN87I2TXU4wDqlroIHHWVlyR0EGYkML9wE=)
                          2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: WpqCjTjP9KCfjNLt14+mScZN2fCuV4hnCNhQMCWaA5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
                          rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
        Validity
            Not Before: Jan 24 22:36:03 2026 GMT
            Not After : Jan 31 22:36:03 2026 GMT
        Subject: CN=69754953-50b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:ee:64:2c:cb:18:83:37:08:c1:b5:2e:be:
                    2f:c4:8f:a4:d0:fe:7e:3e:c1:72:ab:ea:b3:ba:f8:
                    6b:42:a3:f8:1d:e3:0f:c4:4b:4d:81:57:1d:cd:93:
                    29:32:67:8b:ef:fe:67:14:4b:89:83:3d:6d:b5:e3:
                    a1:c9:2c:bd:a9:5d:81:7a:88:6f:69:ea:61:4b:dd:
                    b6:25:67:39:15:17:fb:d5:21:c1:8c:ed:ad:c6:f2:
                    1b:8c:be:33:2c:32:a8:9e:65:95:ea:32:97:8b:51:
                    a9:ff:d1:63:83:76:82:85:6a:98:d3:f5:0a:f2:a1:
                    65:c1:22:8f:5f:88:25:97:30:2d:0b:31:73:4f:55:
                    69:02:ec:7a:eb:11:84:e1:68:9b:de:92:da:fc:9b:
                    93:d9:4f:89:e7:07:b1:38:7e:f5:7d:2d:5e:63:43:
                    b8:e4:bd:53:33:62:ff:65:b0:ee:85:ad:f9:99:b5:
                    e6:66:39:a9:21:b3:e7:88:c4:9a:48:95:2e:61:3f:
                    8e:d8:b2:9d:73:92:b8:1d:2d:75:c5:88:2c:81:7c:
                    07:a9:51:4f:96:01:89:0d:26:6a:92:f9:6e:7e:27:
                    40:0a:5e:04:40:ba:21:c5:a9:cd:54:f1:70:a2:a6:
                    ca:19:6e:0d:3e:6f:e8:0b:4a:f9:ae:a5:ad:80:87:
                    a7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:06:B5:29:DE:11:30:39:BD:6F:CF:35:C9:03:C7:74:DB:A4:C9:52
            X509v3 Authority Key Identifier:
                keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:66:27:50:a4:17:12:c7:5d:5c:98:42:8d:21:03:79:24:58:
         7e:3f:1f:4d:6f:6e:f7:8a:e4:2e:0a:83:0e:1d:7e:6e:f9:aa:
         0d:65:be:86:91:e8:4b:aa:83:fe:dd:0f:06:01:43:1a:c9:0c:
         bd:c0:05:b6:4b:31:b3:06:d0:5c:28:3b:04:f0:a9:b2:b8:d0:
         10:e9:c6:7b:4b:58:93:29:d2:5b:5d:ba:e4:fb:76:78:1c:47:
         40:c5:bc:21:fb:30:99:49:08:d7:84:2b:c9:05:e3:98:13:92:
         58:8d:3d:90:05:46:76:89:b9:7b:55:46:ca:1c:e4:63:ab:e7:
         7d:12:48:cf:95:81:a2:62:fc:c2:7a:c4:00:e1:82:58:81:4e:
         6d:00:33:0a:d5:e8:dd:39:9d:f9:fb:6d:7d:c4:62:a5:c0:2a:
         a7:45:c7:b6:15:06:71:68:f3:df:69:32:35:27:76:e2:cd:d9:
         b5:e5:04:bd:34:0f:50:a6:36:60:43:18:d2:f9:d1:ac:e7:e6:
         91:7c:6a:0e:a1:7e:d4:dc:89:03:9c:d9:39:ca:6a:bd:d0:19:
         6b:df:77:3a:7e:02:91:33:b9:8d:8b:53:60:ab:b2:85:cc:22:
         84:bb:af:97:b0:dd:bc:8d:3c:d1:de:f8:be:28:e3:b3:94:bf:
         1a:86:ff:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF
RDA3QjQxMDcwHhcNMjYwMTI0MjIzNjAzWhcNMjYwMTMxMjIzNjAzWjAYMRYwFAYD
VQQDDA02OTc1NDk1My01MGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxoHuZCzLGIM3CMG1Lr4vxI+k0P5+PsFyq+qzuvhrQqP4HeMPxEtNgVcdzZMp
MmeL7/5nFEuJgz1tteOhySy9qV2BeohvaephS922JWc5FRf71SHBjO2txvIbjL4z
LDKonmWV6jKXi1Gp/9Fjg3aChWqY0/UK8qFlwSKPX4gllzAtCzFzT1VpAux66xGE
4Wib3pLa/JuT2U+J5wexOH71fS1eY0O45L1TM2L/ZbDuha35mbXmZjmpIbPniMSa
SJUuYT+O2LKdc5K4HS11xYgsgXwHqVFPlgGJDSZqkvlufidACl4EQLohxanNVPFw
oqbKGW4NPm/oC0r5rqWtgIenGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQGtSne
ETA5vW/PNckDx3TbpMlSMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3
RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV
djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcZidQpBcSx11cmEKNIQN5JFh+Px9Nb273iuQuCoMOHX5u+aoNZb6G
kehLqoP+3Q8GAUMayQy9wAW2SzGzBtBcKDsE8KmyuNAQ6cZ7S1iTKdJbXbrk+3Z4
HEdAxbwh+zCZSQjXhCvJBeOYE5JYjT2QBUZ2ibl7VUbKHORjq+d9EkjPlYGiYvzC
esQA4YJYgU5tADMK1ejdOZ35+219xGKlwCqnRce2FQZxaPPfaTI1J3bizdm15QS9
NA9QpjZgQxjS+dGs5+aRfGoOoX7U3IkDnNk5ymq90Blr33c6fgKRM7mNi1Ngq7KF
zCKEu6+XsN28jTzR3vi+KOOzlL8ahv+t
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:46:38 2026 by rpki-client