This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File:                     IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier:          11FpFbqEgR6gG/cXaWo2Cn0iz7Qz5BKOE+tfKB38dQ0=
Subject key identifier:   E9:5A:F0:13:AC:E0:29:EF:75:97:90:E9:44:D6:BA:A3:7F:78:05:FE
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer:       /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial:       038B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number:          0384
Signing time:             Sun 25 Jan 2026 00:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:08 +0000
Manifest next update:     Sun 01 Feb 2026 00:01:08 +0000
Files and hashes:         1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: CudUPJ4fQpJvgQh69KJFCeM3nzK2sULZzPx/CLGAvao=)
                          2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
        Validity
            Not Before: Jan 25 00:01:08 2026 GMT
            Not After : Feb  1 00:01:08 2026 GMT
        Subject: CN=69755d45-bb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:0a:69:7b:2f:e6:70:80:b1:df:9c:7f:ff:
                    af:8f:b0:b5:5a:d6:e5:b6:7b:17:5b:63:b7:9c:ea:
                    01:0b:c7:66:c5:b1:fd:b9:51:d1:67:2e:4f:69:43:
                    95:89:45:de:a8:d2:4f:1f:11:fd:1f:be:05:58:b7:
                    87:6f:5d:25:43:b7:b7:59:18:bd:f8:22:c5:e0:5a:
                    37:fb:9a:14:e8:55:d6:96:05:ee:20:3e:65:de:1c:
                    ab:e2:f5:59:2f:f0:ab:20:bf:9b:07:6d:2c:0d:ed:
                    64:e6:b4:b3:91:d0:c7:ed:89:53:53:09:b0:30:90:
                    a0:3f:42:50:2e:02:3b:6b:31:13:ce:ca:6f:28:77:
                    fe:ab:b5:a1:ad:13:33:c5:20:90:c4:08:70:3d:7a:
                    cd:aa:f1:c4:44:22:c1:bc:9d:8d:cc:3e:b8:94:88:
                    5a:95:a0:71:eb:63:8b:b8:10:67:0f:7b:29:62:5d:
                    6e:23:14:0e:fc:27:18:d0:26:ec:3f:5c:09:69:d0:
                    7f:66:ad:4b:32:90:e2:64:14:9c:dd:69:b2:99:7b:
                    da:1a:b6:a8:f4:14:47:f0:b7:7b:dd:d2:54:3c:5f:
                    d9:31:ae:9f:a9:1e:48:ce:09:e8:e4:10:fa:10:40:
                    c0:5a:88:7d:52:af:cf:d1:bc:9e:6d:7e:f2:55:9e:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5A:F0:13:AC:E0:29:EF:75:97:90:E9:44:D6:BA:A3:7F:78:05:FE
            X509v3 Authority Key Identifier:
                keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:55:a0:76:04:49:2e:df:9b:35:d9:3a:c4:87:e0:8f:54:47:
         f4:8d:e1:b5:49:10:f3:20:59:7c:93:95:77:06:ae:1c:e1:bb:
         3b:43:bc:14:54:a3:5a:45:b1:77:66:95:7b:f3:6e:4e:f8:b6:
         13:d0:c0:4c:15:ef:d8:3f:a7:61:45:e5:b5:67:3a:71:60:2b:
         a5:f1:93:de:82:5a:70:f9:33:2b:be:eb:1b:b7:0f:9e:03:a3:
         5a:2b:82:67:53:47:ed:fb:49:e6:d5:d0:d5:e0:42:cf:0b:43:
         52:9a:26:84:e9:b8:68:fa:41:27:53:e4:eb:ed:b4:21:3a:2f:
         e4:20:81:93:6a:ea:d9:8b:1b:5b:51:58:3d:21:22:b9:1a:e9:
         f1:69:20:18:2e:bb:a5:62:c2:33:c1:01:41:48:55:32:30:d8:
         3d:b7:ea:eb:b3:2f:91:cf:d2:34:87:a2:ec:54:12:6c:3c:53:
         a7:d7:95:91:80:65:b9:49:fb:26:a4:0b:49:30:5c:6a:34:f5:
         0b:cf:e7:3a:31:95:1d:1b:f1:62:14:87:c7:3d:13:27:c0:24:
         48:95:66:f8:61:67:d1:96:8e:93:2e:82:8d:1a:88:f1:e2:28:
         9b:a9:0c:f2:68:93:23:79:77:7d:ac:07:5b:65:33:35:ae:80:
         aa:d9:c9:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG
RjFEQjY2NzUwHhcNMjYwMTI1MDAwMTA4WhcNMjYwMjAxMDAwMTA4WjAYMRYwFAYD
VQQDDA02OTc1NWQ0NS1iYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4KIKaXsv5nCAsd+cf/+vj7C1WtbltnsXW2O3nOoBC8dmxbH9uVHRZy5PaUOV
iUXeqNJPHxH9H74FWLeHb10lQ7e3WRi9+CLF4Fo3+5oU6FXWlgXuID5l3hyr4vVZ
L/CrIL+bB20sDe1k5rSzkdDH7YlTUwmwMJCgP0JQLgI7azETzspvKHf+q7WhrRMz
xSCQxAhwPXrNqvHERCLBvJ2NzD64lIhalaBx62OLuBBnD3spYl1uIxQO/CcY0Cbs
P1wJadB/Zq1LMpDiZBSc3WmymXvaGrao9BRH8Ld73dJUPF/ZMa6fqR5Izgno5BD6
EEDAWoh9Uq/P0byebX7yVZ6gqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOla8BOs
4CnvdZeQ6UTWuqN/eAX+MB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0
RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkI1NC83MjczNzVCNEQ0RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBL
VVJLODJNdnhlcGpfSGJablUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzVaB2BEku35s12TrEh+CPVEf0jeG1SRDzIFl8k5V3Bq4c4bs7Q7wU
VKNaRbF3ZpV7825O+LYT0MBMFe/YP6dhReW1ZzpxYCul8ZPeglpw+TMrvusbtw+e
A6NaK4JnU0ft+0nm1dDV4ELPC0NSmiaE6bho+kEnU+Tr7bQhOi/kIIGTaurZixtb
UVg9ISK5GunxaSAYLrulYsIzwQFBSFUyMNg9t+rrsy+Rz9I0h6LsVBJsPFOn15WR
gGW5SfsmpAtJMFxqNPULz+c6MZUdG/FiFIfHPRMnwCRIlWb4YWfRlo6TLoKNGojx
4iibqQzyaJMjeXd9rAdbZTM1roCq2ckl
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:20 2026 by rpki-client