This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File:                     Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier:          huPvhaZY4z6RRGhGGVAmZ0y/hPkSb37HYxp4wS7wook=
Subject key identifier:   27:B5:35:08:51:71:07:49:F1:43:6D:B6:07:67:98:14:BF:18:47:A4
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer:       /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial:       04D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number:          0497
Signing time:             Tue 20 Jan 2026 23:23:29 +0000
Manifest this update:     Tue 20 Jan 2026 23:23:28 +0000
Manifest next update:     Tue 27 Jan 2026 23:23:28 +0000
Files and hashes:         1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: 35ia66ZnvvuEdn0jLS8nDH8VHrfDizvWMzLcp8/QZWI=)
                          2: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: EY9KwkGQCsbs1MqQbJgggG8QXozMeXajqta7rUD1mjY=)
                          3: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: KZUF8BssowgeDDElrmfBd3Wi1MTanQLIgwgvTwUCAKk=)
                          4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: Fh2Am2j7U9RrgdFXomlyNwcsWnidXxkcXn7XnXDFM7E=)
                          5: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: 7dMYBh5Kias3dynE3RyF2gF6pXmk7AknkGd9fyD3NyM=)
                          6: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: P/gd5ogaMLRm6x7eKVq37vdyn0rcHoT75P+S2vnsqkQ=)
                          7: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: l8HZr/1K5iTql38w4D2ptDQ0JXfBGGoepbsVMHkB3ic=)
                          8: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: jyQmQuKWMrWFivOkwu2cRS9J3e3CFqHg+uuwbKI9XeE=)
                          9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: s4fCKmAzfLfiyPtpMm1I7YInFjR2uqzY8ys3Fd5Sz5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
                          rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
        Validity
            Not Before: Jan 20 23:23:28 2026 GMT
            Not After : Jan 27 23:23:28 2026 GMT
        Subject: CN=69700e70-f739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:70:c7:48:9b:23:bf:2b:66:c6:af:a7:b2:
                    5a:39:95:a7:09:90:95:a6:41:80:93:1d:61:3f:65:
                    9a:2a:d2:0b:0a:11:7f:71:e2:9a:9b:f1:a9:db:5e:
                    67:21:5c:a1:f5:cc:e4:0b:a2:7f:56:19:82:e3:22:
                    62:b5:a2:85:29:65:38:e1:dd:20:55:fd:c2:fa:2a:
                    96:73:9c:eb:c2:1d:35:e8:a3:d1:0a:b5:9c:c9:15:
                    78:2e:a9:10:84:a4:37:3d:bc:56:10:ac:08:cd:eb:
                    4e:0e:35:88:e0:e9:af:f3:7b:e1:38:86:ff:9b:b9:
                    16:9b:42:97:67:6f:91:7d:cf:1b:a0:20:1d:fb:3f:
                    78:02:1f:24:a1:72:45:ad:d9:39:4e:34:2b:a5:61:
                    e7:46:6e:05:95:52:46:08:07:23:8b:36:eb:81:8f:
                    36:8e:2a:bd:6a:8d:2f:1a:b5:0e:06:e7:63:67:b4:
                    0a:41:f1:53:c6:8c:8b:51:e5:51:d9:fb:5d:80:76:
                    3d:e4:6b:89:a9:89:b4:15:b0:d3:76:da:b8:00:3a:
                    48:9c:7d:95:de:2e:67:52:da:c4:a3:8f:35:3b:7c:
                    75:e5:c0:a7:ae:13:38:94:b6:00:57:fa:39:69:fe:
                    2c:cd:24:40:38:17:58:0c:5a:f0:0a:96:7d:99:3e:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B5:35:08:51:71:07:49:F1:43:6D:B6:07:67:98:14:BF:18:47:A4
            X509v3 Authority Key Identifier:
                keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8a:94:6f:e4:67:58:ef:91:c3:35:80:d1:ea:07:c9:6d:25:
         8d:3d:17:21:bf:3b:b5:fa:e0:a3:f4:49:17:02:c5:fb:5e:c4:
         95:66:2e:78:8b:f7:49:e4:70:de:de:5a:e1:8f:49:85:70:b2:
         ce:84:77:9c:ec:e7:b4:f8:02:0c:1c:6c:a0:ba:fe:13:22:9f:
         2e:d8:93:bf:5e:67:04:3b:a1:52:16:07:d3:ab:57:c0:df:53:
         a9:8f:35:81:19:59:cc:e5:e1:5d:40:b9:f4:e8:f0:0b:80:6f:
         e7:28:5e:63:8d:a2:45:03:e0:28:53:cb:b5:06:05:85:8d:2a:
         b0:72:13:29:8a:b9:8d:35:f0:49:86:38:df:2b:fa:5a:ca:47:
         d7:83:ef:01:57:db:75:2a:c4:69:91:34:b0:36:da:60:a7:a4:
         d8:6c:d0:a2:cb:c2:35:cb:fa:57:d6:a3:f5:bf:81:8b:8f:86:
         26:3c:c2:b3:e2:0d:be:bd:d7:b0:90:e9:ec:71:81:e3:0d:b2:
         c1:0f:ce:73:12:2b:3a:20:62:d9:31:78:fe:3c:57:fe:38:4f:
         4f:7f:7b:af:23:b3:46:b4:48:6f:c4:8e:67:cc:d9:18:ed:67:
         bd:01:c8:7f:a7:a4:e0:d4:cf:98:04:2d:98:68:db:92:44:be:
         c9:c4:db:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE
MTg4MDg4RDUwHhcNMjYwMTIwMjMyMzI4WhcNMjYwMTI3MjMyMzI4WjAYMRYwFAYD
VQQDDA02OTcwMGU3MC1mNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9hwx0ibI78rZsavp7JaOZWnCZCVpkGAkx1hP2WaKtILChF/ceKam/Gp215n
IVyh9czkC6J/VhmC4yJitaKFKWU44d0gVf3C+iqWc5zrwh016KPRCrWcyRV4LqkQ
hKQ3PbxWEKwIzetODjWI4Omv83vhOIb/m7kWm0KXZ2+Rfc8boCAd+z94Ah8koXJF
rdk5TjQrpWHnRm4FlVJGCAcjizbrgY82jiq9ao0vGrUOBudjZ7QKQfFTxoyLUeVR
2ftdgHY95GuJqYm0FbDTdtq4ADpInH2V3i5nUtrEo481O3x15cCnrhM4lLYAV/o5
af4szSRAOBdYDFrwCpZ9mT5I0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe1NQhR
cQdJ8UNttgdnmBS/GEekMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz
QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5
RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAiipRv5GdY75HDNYDR6gfJbSWNPRchvzu1+uCj9EkXAsX7XsSVZi54
i/dJ5HDe3lrhj0mFcLLOhHec7Oe0+AIMHGyguv4TIp8u2JO/XmcEO6FSFgfTq1fA
31OpjzWBGVnM5eFdQLn06PALgG/nKF5jjaJFA+AoU8u1BgWFjSqwchMpirmNNfBJ
hjjfK/paykfXg+8BV9t1KsRpkTSwNtpgp6TYbNCiy8I1y/pX1qP1v4GLj4YmPMKz
4g2+vdewkOnscYHjDbLBD85zEis6IGLZMXj+PFf+OE9Pf3uvI7NGtEhvxI5nzNkY
7We9Ach/p6Tg1M+YBC2YaNuSRL7JxNuk
-----END CERTIFICATE-----
Generated at Thu Jan 22 10:55:43 2026 by rpki-client