This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
File:                     Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json)
Hash identifier:          OtNo4b3QL4+lchR3AuwIIQiB9sDncKfk4HfmA/JBxtw=
Subject key identifier:   03:DE:42:2D:CB:B2:52:53:75:8C:4A:F2:C4:C6:AD:9E:CC:11:AF:83
Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Certificate issuer:       /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
Manifest number:          0106
Signing time:             Sun 25 Jan 2026 04:19:32 +0000
Manifest this update:     Sun 25 Jan 2026 04:19:32 +0000
Manifest next update:     Sun 01 Feb 2026 04:19:32 +0000
Files and hashes:         1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: JbJD7DY97BLluvBnmtlOgth0YeudALLGqqzegCv78Lc=)
                          2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 1z2L3hbnupa67ptFJmJyr3scDytw356F08ze+2XPBpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
        Validity
            Not Before: Jan 25 04:19:32 2026 GMT
            Not After : Feb  1 04:19:32 2026 GMT
        Subject: CN=697599d4-7135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:07:2e:53:bc:2b:d5:66:57:12:1e:db:8b:
                    04:27:1f:a4:7c:7c:13:05:48:77:f0:d9:2c:59:a9:
                    c3:54:90:51:7c:cb:78:11:da:75:58:17:9f:1e:a7:
                    9a:0b:41:45:3d:fe:a4:a2:91:3d:6e:3a:05:06:81:
                    39:e5:e1:40:a4:cf:9f:47:b4:9d:88:06:70:3a:41:
                    4c:81:2d:08:21:ab:b0:31:85:34:85:4d:e9:41:97:
                    67:83:34:fe:5c:89:0d:f2:df:c4:7d:77:cb:a9:89:
                    b2:c1:cb:7f:0b:ab:c1:17:5e:ff:2d:3f:be:19:9a:
                    dc:97:57:72:75:a4:fb:39:0e:3d:41:ed:a1:47:2b:
                    9c:3f:60:b8:d7:3d:47:9a:89:b0:c1:01:03:15:49:
                    bb:ea:d8:25:12:6d:70:6d:67:e7:39:8d:48:04:64:
                    a8:60:3c:57:a5:b4:0b:8d:d5:bc:0f:54:79:e5:8e:
                    c8:50:a8:55:de:ea:09:5b:e5:93:1e:cd:89:f2:6f:
                    73:18:78:67:d0:7a:82:d7:eb:e3:0d:84:43:c5:fb:
                    b6:ee:ec:51:78:ef:92:86:52:b9:19:b8:d5:ab:2f:
                    9d:a0:58:86:60:2f:53:1e:32:c1:34:d8:97:6a:1a:
                    c8:1d:88:6e:03:10:c6:7f:e1:bb:3d:93:ee:ca:41:
                    d1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:42:2D:CB:B2:52:53:75:8C:4A:F2:C4:C6:AD:9E:CC:11:AF:83
            X509v3 Authority Key Identifier:
                keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3d:08:e8:f3:9c:54:a8:73:5f:d7:d3:01:ca:4d:6b:f2:e2:
         e4:1a:91:ca:b0:32:55:02:04:55:03:7c:d6:a1:96:bc:8d:81:
         39:29:97:d8:8d:dc:99:36:eb:29:53:4b:f4:b2:a5:a0:8f:f1:
         6b:61:f5:a8:a9:96:63:d7:48:8d:ad:7f:a3:3d:ce:5d:d9:29:
         81:4b:7c:01:59:23:bf:f2:fe:6b:8f:7b:70:46:c6:71:63:23:
         31:38:95:41:14:2a:22:6f:b9:9d:b6:05:94:5d:47:2f:39:fc:
         92:92:47:84:f9:c9:68:5d:d7:30:f9:f8:09:0e:f4:1f:4f:12:
         2a:a5:6b:9a:c9:1a:16:7c:09:de:39:bd:2a:58:f1:d1:99:94:
         f6:02:85:e9:2d:a7:12:6f:26:80:08:67:e3:e6:15:a3:10:14:
         b8:74:2f:78:18:99:1e:22:12:36:25:9b:57:5a:d5:00:d7:0a:
         18:35:18:30:70:0f:33:96:9b:f0:9c:ab:0c:73:5d:01:63:1e:
         8a:bd:91:35:8f:18:24:c8:92:fc:9b:2d:f5:e7:cc:98:0e:4d:
         86:63:b4:05:95:e5:c2:88:54:97:25:80:0f:60:35:40:19:a8:
         10:49:7d:09:3a:0c:b5:67:0f:35:72:f7:be:3c:41:aa:38:db:
         c8:a9:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:31:23 2026 by rpki-client