This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          ExUcuT2qWkUpCswNuDqw/BivNQHwqZP7GgqogWT+exY=
Subject key identifier:   87:9E:C4:E1:6A:36:CC:B0:C3:AC:C7:2E:52:85:27:88:13:5F:4F:74
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       096C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          086E
Signing time:             Wed 21 Jan 2026 11:21:05 +0000
Manifest this update:     Wed 21 Jan 2026 11:21:04 +0000
Manifest next update:     Wed 28 Jan 2026 11:21:04 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: ZU1kITMxuyjoZ/iWlnZM6Vc/5czIH9dJt4SzqSTIjMo=)
                          2: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=)
                          3: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=)
                          4: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: GoONDGq2mntV4VCH8ruKRLPZW7gF389h40xYTQMS4WY=)
                          5: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: lBS8kvbF9qc+MDE0imJFbA2HjjKTcdMHa+qxsQV+XxU=)
                          6: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=)
                          7: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: NNAqDSA6qZkwyXwW5LJm0ax1QL7uOfCZD/otvzKqxLc=)
                          8: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: FezbKF9kO0jDnIHasf+ZGAxTpu3bLao4gPSsw3YsObk=)
                          9: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: S9g/XqrkQ3EKwy6SH+loLjPtlBRwhe3c36A/g6yjOOI=)
                          10: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: 5ouufnP7Ctej4xce5TMz+xAplrLrKCKTZMwQ7r/Y7pY=)
                          11: 77439A048A3911F0AA9D4C75C4F9AE02.roa (hash: 4gOxRljY2ajSaw9L+py/l3Z65NBPVaVQD1LWDmNg++Y=)
                          12: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ru4CDY9kB7xpZ7Gn5BJCqXlyrSix5gXPE9YTTMWfsno=)
                          13: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: X4XJ5Vg4GOFvVKCrXpY0V9iGok/qikvYBC+EwepyjvQ=)
                          14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=)
                          15: 55493366013C11ED9864F33CC4F9AE02.roa (hash: anyPqCvlt+dub0m+upybD86mloI3z1ObTHZ5cOmKdEQ=)
                          16: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: eYqTvYLPgNnCsX8XZsOGNBvCb+uxIeIiPxmKdWTMhWU=)
                          17: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DxsPcmRyMvqxvilkvhZcPekY1GWFfShT1K4h6XO4HIU=)
                          18: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=)
                          19: 6D98103E938011F09B37C61AC4F9AE02.roa (hash: pzuj9KSvbEkotlcxdC0RYvYhqjMkIavfOrEzp2PusPQ=)
                          20: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: /NbIlZMNBHck/exxSqKy2xdIIBSuAAci2V/DM520lf4=)
                          21: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: o3tJcryC81c5rX1xhCkHjKVGZCjhtaRQoK8u6zdAIkI=)
                          22: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: lktIkPl22eqSwsqChqGX/PiBITeHZ0j0XKVggRutMPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 11:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2412 (0x96c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jan 21 11:21:04 2026 GMT
            Not After : Jan 28 11:21:04 2026 GMT
        Subject: CN=6970b6a1-5142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:28:88:2f:d2:59:29:ed:8f:3b:e9:a8:41:
                    c2:8b:87:a9:1f:61:a8:40:03:7c:8f:16:b6:f9:c7:
                    8d:54:57:ed:a5:b7:a6:17:36:20:f0:a7:fb:fd:ee:
                    3c:b2:94:33:a4:9e:5f:a5:ad:27:c1:f8:79:53:ca:
                    8f:5a:92:e2:36:99:10:9a:2a:c5:51:84:d5:b3:62:
                    06:18:e7:11:d0:02:2d:2e:06:7d:a5:a4:93:49:3b:
                    ca:fe:73:60:b2:af:11:f4:3f:42:97:ae:61:0d:59:
                    32:b0:2b:3b:e7:24:23:40:6d:71:b8:2a:60:29:61:
                    18:5d:50:3c:31:07:ce:7b:28:34:65:79:5b:13:37:
                    98:31:ce:65:8f:ab:23:0f:b1:3c:e9:c8:33:ce:aa:
                    bd:aa:f2:40:0a:84:9b:69:26:41:61:fb:bc:66:ac:
                    24:64:f0:b3:9b:4d:ef:22:ff:65:e5:98:d3:68:05:
                    2d:12:51:bf:fb:fa:b1:f2:4d:f1:14:12:bb:6b:33:
                    8c:52:bb:e9:e2:45:b4:3e:3e:28:a0:93:69:eb:af:
                    a4:5d:30:fa:c5:99:84:d6:f2:79:2b:34:6d:b8:c0:
                    b2:e5:59:fe:65:d3:76:13:f2:33:07:44:99:9c:50:
                    a3:44:bd:2b:2f:cd:f9:ff:32:fd:37:b3:30:5f:2e:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9E:C4:E1:6A:36:CC:B0:C3:AC:C7:2E:52:85:27:88:13:5F:4F:74
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:14:bb:d1:ce:64:fc:09:61:6f:06:79:63:6e:df:6a:a4:9f:
         43:f5:90:4d:fd:1a:b6:14:8c:3a:45:7f:db:3e:f4:fd:9a:bb:
         90:fd:35:d5:14:91:86:7f:a2:6d:ba:fb:ba:57:15:6e:65:4c:
         68:42:1c:36:70:2d:31:a1:19:9c:28:7c:bc:b1:d1:b1:54:c7:
         a3:00:14:87:76:8f:08:a8:cf:17:aa:bd:76:54:dc:06:0b:e8:
         1c:d3:a5:82:41:08:ba:37:36:7e:3b:4f:b0:89:d5:28:bd:53:
         a0:c7:06:ef:f3:2e:72:13:79:22:15:0c:e6:0f:3e:1c:b7:cf:
         6c:ee:d7:46:f7:ce:76:16:02:32:29:c1:e7:94:48:d9:5b:9d:
         9f:f2:85:66:7f:dd:3b:9d:33:4c:d7:e3:4b:f8:a5:48:38:f0:
         ed:d5:bc:e5:ae:bb:7c:25:fb:e4:89:d6:01:24:1d:72:67:16:
         8f:5d:db:2f:61:6d:58:3d:76:53:f8:85:9c:85:ec:cd:a4:8f:
         48:4a:98:ef:6a:65:8f:74:da:e2:d4:e7:5f:c8:90:17:2d:53:
         a3:8d:88:d7:7f:8b:aa:9e:32:7c:96:e4:7b:4f:55:8b:2a:93:
         d9:96:18:59:1b:53:f4:56:32:e6:7b:a9:6a:00:b1:c7:2a:a4:
         8b:57:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 00:11:09 2026 by rpki-client