This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
File:                     iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json)
Hash identifier:          Lzk2OGWUQYrlnT/YhP0xKBU0hmhaLSM6s8A4okjgB0Q=
Subject key identifier:   1C:8B:17:96:FC:78:3C:CD:C8:37:1A:61:5D:5D:8F:C2:0A:A2:77:12
Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34
Certificate issuer:       /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934
Certificate serial:       0C75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
Manifest number:          0C6D
Signing time:             Sat 24 Jan 2026 18:10:47 +0000
Manifest this update:     Sat 24 Jan 2026 18:10:46 +0000
Manifest next update:     Sat 31 Jan 2026 18:10:46 +0000
Files and hashes:         1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: M8Afm4X/KzyQWhpuNqdUZpQuyKkUY+WRKr3Oaxv7j6w=)
                          2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: rye/vsaOUj66vGp57/X5s/x49eVAPsN1yMEMAoZJ8dk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3189 (0xc75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934
        Validity
            Not Before: Jan 24 18:10:46 2026 GMT
            Not After : Jan 31 18:10:46 2026 GMT
        Subject: CN=69750b27-25e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:c7:21:27:ee:05:ea:7a:c7:22:e8:65:85:
                    03:1c:5b:57:7a:22:bc:66:ee:6a:d6:5b:60:7d:c1:
                    89:fc:3c:ad:e5:f3:a0:6a:3d:8e:77:f7:ec:35:49:
                    59:8c:70:38:91:82:c8:a3:67:fc:f5:64:95:a3:6d:
                    1d:44:fe:e0:62:61:50:53:33:80:df:0d:e3:62:2f:
                    55:db:b0:98:9b:a6:b6:83:53:93:ba:f0:34:6f:ec:
                    05:f3:9e:e1:44:cd:e7:69:4e:7c:ce:97:c7:e0:17:
                    13:28:72:89:bb:28:ba:7e:5c:81:0d:74:ff:c4:c6:
                    36:cf:a5:1e:a4:56:58:db:a8:3c:2c:75:52:75:7f:
                    d2:6d:83:c0:98:09:a6:73:39:42:f4:b3:33:40:4f:
                    d0:a8:e5:f4:34:53:ba:3e:64:9d:62:ba:c2:e1:4f:
                    8e:30:f3:cd:53:cb:a2:25:a9:1f:7d:4d:bb:9f:a8:
                    81:3b:e8:b7:65:4b:f8:67:eb:a4:06:ae:a9:64:a5:
                    48:4c:c9:63:73:8a:bd:69:4f:c3:a0:bd:3d:52:80:
                    27:1c:d2:4b:b8:bb:f2:d2:16:79:3c:f9:88:88:6a:
                    ca:6c:28:f1:dc:7b:5d:58:b8:52:8a:67:95:99:f3:
                    d5:3a:1e:97:ad:99:0a:9d:07:07:26:57:f5:01:d5:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8B:17:96:FC:78:3C:CD:C8:37:1A:61:5D:5D:8F:C2:0A:A2:77:12
            X509v3 Authority Key Identifier:
                keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:da:f1:58:ee:8b:cb:14:72:06:ab:b9:e3:a4:be:3f:86:19:
         8f:09:be:9d:d3:e6:d6:bf:fe:0f:50:d0:db:66:20:ce:22:8c:
         82:fc:2b:3f:2b:ef:59:c6:dc:6f:22:48:0d:3b:c6:60:a5:cb:
         18:d6:ae:fe:27:af:3b:75:1c:7d:02:75:21:f5:b1:7d:11:4c:
         e7:67:9e:69:43:39:e5:2c:ed:02:b5:bd:f0:66:99:11:65:5e:
         85:c1:b5:40:81:76:d4:11:ed:85:46:f5:b9:2d:b7:5e:b3:33:
         db:af:11:ea:e5:22:c4:bc:e2:05:69:ed:39:22:09:37:e3:18:
         db:1c:06:3b:fe:e0:89:c6:b6:92:63:48:73:f3:ba:a5:24:53:
         4b:cf:2c:5c:2f:27:4d:79:29:b6:9b:86:cc:26:92:79:76:1f:
         1e:9c:bc:8e:10:c2:d7:4a:3e:8e:45:58:d7:65:2c:bf:3d:c9:
         bd:b9:5f:b0:9b:f0:ab:89:08:99:19:d7:07:59:6d:1c:54:f0:
         fb:b4:51:bd:91:f2:60:89:1b:55:29:9d:a6:0c:4d:f2:ca:d6:
         56:43:4a:3f:b8:88:d6:7c:59:82:67:24:51:18:00:57:ab:5d:
         68:a9:c9:99:57:8b:84:1c:d7:16:73:c6:b9:36:d1:70:29:2e:
         b6:d0:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:23:41 2026 by rpki-client