This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
File:                     Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json)
Hash identifier:          CHVy4Hpdtpn+z3xs/kNLxI7ctN933DA4UUPhdiZ17Ek=
Subject key identifier:   CE:E4:E0:1B:38:7F:DE:D7:C8:47:3A:3D:3A:FA:98:69:06:D3:64:2E
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Certificate issuer:       /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
Manifest number:          0135
Signing time:             Sun 25 Jan 2026 03:47:11 +0000
Manifest this update:     Sun 25 Jan 2026 03:47:11 +0000
Manifest next update:     Sun 01 Feb 2026 03:47:11 +0000
Files and hashes:         1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: XfhEwhgmFxFW/5CSNEJCGPokXOXdnxl+acwFDedANxE=)
                          2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: Ha/cGz3EuqzsAq4mNf1LJHzYtP6EU2XABOfv8TEGk30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
        Validity
            Not Before: Jan 25 03:47:11 2026 GMT
            Not After : Feb  1 03:47:11 2026 GMT
        Subject: CN=6975923f-1075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:22:ef:0b:9e:ba:49:ef:96:b6:5b:a4:ec:
                    2a:31:a0:e4:33:74:5f:80:a1:ad:4e:8e:58:36:e5:
                    a6:90:55:f0:12:1a:d6:4e:02:18:25:53:e0:f5:5e:
                    9d:59:36:1a:51:52:7c:00:fb:c8:0a:f4:93:af:4a:
                    83:05:06:8b:12:dc:c9:d9:c2:99:43:80:3d:37:39:
                    19:ad:2d:cc:94:3e:b3:e4:db:19:10:33:28:11:8d:
                    3a:9e:fe:f0:55:99:35:e0:42:80:f1:91:a8:87:7f:
                    8a:23:1a:c5:d6:06:99:5b:01:6a:13:30:da:aa:7e:
                    78:5c:df:5d:d0:c6:08:cd:3e:9a:e7:23:a7:65:70:
                    6a:be:f4:80:78:f8:87:1b:8c:1e:25:e4:37:69:b5:
                    58:f0:32:ce:37:17:63:68:d0:2f:db:51:4c:96:5a:
                    24:f4:1c:c6:f0:ec:c6:d9:20:d6:45:71:56:9e:e2:
                    69:85:7f:0a:8f:cb:60:20:a9:44:ca:3c:c1:c2:c7:
                    89:ad:e0:bb:3a:02:1d:ee:3b:dd:d2:e9:b6:eb:20:
                    2b:8e:15:95:0c:a9:5e:e6:f8:e9:ba:c8:7f:3d:48:
                    66:f0:af:69:54:78:4c:33:83:9f:8f:0c:99:37:5f:
                    6a:6c:57:d6:1c:ec:65:33:f7:f8:27:26:9e:6e:3c:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E4:E0:1B:38:7F:DE:D7:C8:47:3A:3D:3A:FA:98:69:06:D3:64:2E
            X509v3 Authority Key Identifier:
                keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:0a:6c:dd:a5:4c:3d:14:dd:c9:2e:63:84:d2:ff:24:df:b1:
         fc:16:0a:b2:0e:5e:8a:2d:46:28:1a:72:0e:cf:2e:13:09:29:
         f9:70:b6:bf:ee:11:fb:af:c4:31:96:e6:87:26:90:d7:bd:5f:
         e6:2a:8a:a5:a6:16:99:c1:3d:85:df:a2:ef:d6:84:cb:64:56:
         02:6b:03:c4:23:f5:a7:bf:64:02:fa:2c:13:c6:d0:af:74:a0:
         60:5b:cd:fc:3a:95:d8:e3:86:fd:85:4b:d4:6e:88:fb:ce:5f:
         a7:e4:8c:85:33:c3:62:30:20:c8:02:d9:c8:87:a4:04:6c:3d:
         df:ff:a6:04:8c:8a:12:82:d2:06:19:4e:61:89:9e:f9:8e:74:
         9c:3c:43:a0:44:d0:03:d6:8e:bb:e5:a3:cc:29:95:d8:33:37:
         a2:1e:a3:92:14:a0:bd:24:1e:d0:2a:99:cf:14:21:92:3a:ff:
         6c:d7:b9:8e:9b:f8:12:e0:89:31:e8:9a:76:08:93:40:a8:8d:
         bf:a9:4b:d2:5b:21:f2:54:e4:2e:8b:56:23:3f:22:a8:57:6f:
         60:32:c5:21:86:01:55:08:82:8f:61:ef:3a:58:95:c9:00:24:
         32:22:6d:ec:14:9f:92:be:a4:36:10:3b:d5:24:6d:02:58:a5:
         c7:54:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:31:07 2026 by rpki-client