This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File:                     aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier:          rnGr6A9yd1vMvu1Ae+PAi9xIU8hryg5OQjKM8tD8rt8=
Subject key identifier:   E4:CA:F0:37:BB:C9:D4:3E:24:C2:87:EA:49:24:52:53:AE:8C:7D:FB
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       0816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number:          080E
Signing time:             Fri 16 Jan 2026 20:24:43 +0000
Manifest this update:     Fri 16 Jan 2026 20:24:42 +0000
Manifest next update:     Fri 23 Jan 2026 20:24:42 +0000
Files and hashes:         1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: EUL2tFLx94b3I+5RH1QL98BDrwim8mxTzzkapUF2BwE=)
                          2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
                          rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 20:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
        Validity
            Not Before: Jan 16 20:24:42 2026 GMT
            Not After : Jan 23 20:24:42 2026 GMT
        Subject: CN=696a9e8b-6ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:c3:5f:87:0c:d6:b1:fc:ec:02:c1:fa:8f:
                    0e:d8:77:98:be:f8:90:5c:80:03:b2:0d:f6:b0:92:
                    a4:d3:e6:ad:2f:b4:43:07:51:3d:84:58:30:7d:fb:
                    ec:90:d5:1c:d9:9b:a0:33:ad:d1:f3:b9:ea:fc:64:
                    3e:32:3f:2b:a5:fe:27:fe:8d:06:1c:c3:3c:4c:92:
                    84:7e:33:e9:82:2e:ce:36:b4:af:4d:45:0d:c6:fa:
                    c5:e8:e9:5e:24:da:4d:b1:1b:8d:44:68:04:1f:4a:
                    d8:7c:14:67:3a:75:34:aa:7e:5d:9f:31:60:e1:4d:
                    cc:d1:d6:fa:a5:e0:cb:4a:13:74:89:a9:ae:cf:df:
                    7f:3b:1b:7d:d0:31:37:66:6a:a2:b8:68:3b:ec:ed:
                    a3:90:af:23:e2:88:82:d1:2d:0b:26:e0:2f:36:c9:
                    46:fa:d8:58:b5:35:99:05:44:27:5d:e5:77:47:89:
                    2c:36:f7:56:5e:7c:8f:0a:f2:82:3c:0f:1c:26:77:
                    ee:2e:d6:f1:a9:c3:15:cf:f7:2a:ec:e9:76:c1:6e:
                    19:3c:e4:36:b7:70:50:d8:7a:ea:6e:49:4e:ed:d8:
                    1a:e5:6a:e6:cd:6a:16:f6:41:d5:f6:60:cc:01:ce:
                    a5:d9:4d:cf:f4:9a:e5:30:ba:44:8e:f0:b9:78:67:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CA:F0:37:BB:C9:D4:3E:24:C2:87:EA:49:24:52:53:AE:8C:7D:FB
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:69:29:b5:ac:80:29:6d:48:e9:52:7c:34:ce:e4:8e:89:32:
         fb:6a:74:57:b2:fe:1d:ec:18:fe:32:bd:7b:fe:6a:0e:58:b2:
         16:28:a1:e0:41:d2:9b:42:9c:c9:d2:1b:48:67:26:8d:ba:8a:
         1a:23:fa:28:89:c1:03:21:e6:57:2d:a0:9f:e7:b9:8d:ca:88:
         1a:d4:72:d9:5a:55:93:49:86:0e:f4:f5:60:32:fc:c3:70:3f:
         5c:a9:31:17:c1:83:ae:12:3f:30:29:dd:8f:5f:5a:04:88:79:
         ff:84:37:0e:1e:79:01:24:7b:ac:52:0f:6f:19:48:e6:f7:f6:
         9f:b9:e0:2d:fc:08:3e:3f:ed:9d:49:48:70:d5:8e:fe:0e:df:
         45:fa:ec:43:94:46:f7:ed:f4:d7:64:b6:9f:61:84:16:40:ec:
         6e:fe:eb:cf:d0:c5:94:86:b1:db:80:8d:c8:0d:06:ac:a0:47:
         2e:0d:e7:3d:e8:1c:36:45:a9:8d:73:2e:98:69:f3:ed:c6:a5:
         12:ec:54:09:41:f8:09:0b:45:a9:3a:2a:b0:ff:58:50:20:61:
         7e:f9:54:bf:d6:e3:2f:38:97:73:c7:39:62:47:4a:a2:86:af:
         d9:8c:db:18:ab:f2:17:a5:bb:9e:59:0b:d8:7b:33:f6:44:4d:
         5c:0c:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 05:26:17 2026 by rpki-client