This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
File:                     IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json)
Hash identifier:          Tj+tY2qyKGg9csV+g2D2UxOfiQsj+50N6U1VtdHnobs=
Subject key identifier:   B1:EC:19:B7:09:38:85:75:A8:A1:57:D4:05:68:80:DB:A4:FE:C7:94
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Certificate issuer:       /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial:       0765
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
Manifest number:          0752
Signing time:             Mon 02 Feb 2026 21:18:36 +0000
Manifest this update:     Mon 02 Feb 2026 21:18:36 +0000
Manifest next update:     Mon 09 Feb 2026 21:18:36 +0000
Files and hashes:         1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: Sot4/MLvysUvdiUIwbEkTEznlSwXBhYYcJVc+uVrWlw=)
                          2: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: wIAUJo6pLOtcdDl/q+XVckYcgHnVKsYs5npKOOs0/x0=)
                          3: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Ac+21perclmyIdH4cwpABd4VrpSu8D0aj/0rXmLovJY=)
                          4: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: TMdvekGhsYRkD7vQxOC9M1BNi4ODftadLHkHNnnsSEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
                          rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 21:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
        Validity
            Not Before: Feb  2 21:18:36 2026 GMT
            Not After : Feb  9 21:18:36 2026 GMT
        Subject: CN=698114ac-0442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:9d:d9:32:06:58:0d:66:38:3b:d5:d4:83:
                    99:be:92:b0:81:3c:ca:e0:dc:7d:cc:66:2a:0f:8b:
                    9a:0d:5c:d8:94:d1:dd:14:56:83:fe:90:5c:16:a5:
                    88:b5:ba:fb:12:00:0f:a9:38:f0:fb:b1:74:37:c5:
                    f9:eb:ce:76:db:1e:02:fc:6a:23:0b:20:41:db:6d:
                    91:23:b4:9a:28:75:51:7c:03:0c:eb:16:d9:27:81:
                    de:35:07:89:84:64:e6:1f:16:c2:7e:16:19:0c:88:
                    7a:77:2d:2e:69:53:12:d8:16:f3:19:32:cc:93:e1:
                    e9:db:74:83:fd:6d:33:b4:24:e1:65:7a:27:ec:84:
                    4e:da:d8:e9:6b:9d:41:ba:1a:e2:ce:47:40:4c:eb:
                    f9:41:ef:67:9a:73:1f:fb:3a:d3:e7:6c:77:f1:71:
                    b2:31:f5:05:4c:4c:68:89:e9:0a:09:cd:3a:2c:a5:
                    60:c5:48:63:48:ce:d8:f5:a8:e5:a9:8f:41:40:93:
                    92:e8:9d:90:c2:77:fa:ea:b3:c3:07:4d:8f:2b:97:
                    9c:f1:40:de:88:ba:06:a0:6a:21:ec:13:24:6f:14:
                    30:26:4f:e0:a3:9d:50:f7:10:e6:2c:9a:e5:5b:41:
                    d5:c1:d1:d2:ab:56:10:2b:07:b9:f5:0a:39:a4:71:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:19:B7:09:38:85:75:A8:A1:57:D4:05:68:80:DB:A4:FE:C7:94
            X509v3 Authority Key Identifier:
                keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0b:30:80:50:04:38:8a:e6:21:8f:ed:35:18:19:41:5e:ca:
         42:30:b3:11:be:87:98:52:13:12:eb:b7:e6:54:7c:92:80:41:
         d0:d6:7f:3f:62:47:14:e3:85:d3:98:40:1b:6b:c9:d4:90:b9:
         fd:8e:f0:28:11:8c:6b:ca:1f:b1:bb:a9:f8:b9:fd:e8:21:ae:
         21:61:cc:27:c6:23:a8:40:04:c5:ff:3e:89:6b:cb:77:f3:d3:
         74:62:94:1e:cd:78:1b:07:ea:70:aa:fb:b9:65:c1:08:06:d4:
         8d:d3:5f:d9:ef:ff:48:18:7c:e8:a6:34:c1:11:03:d0:bf:ac:
         cc:2c:38:d7:71:13:e1:83:53:e8:66:34:53:a0:db:b8:d9:3f:
         e4:79:53:f2:a1:94:28:44:7c:68:c8:71:ed:28:6b:a9:b9:ac:
         51:59:08:00:ce:94:31:86:4b:1e:57:ae:4e:1e:cc:b7:7c:47:
         b1:34:c1:40:60:9d:94:b4:46:84:05:d7:53:46:d7:41:12:70:
         b2:cd:89:eb:25:94:f0:26:cf:37:97:ad:6f:b3:89:e0:4a:1b:
         9e:b4:85:24:5a:62:f2:2c:ad:db:b6:16:cf:b3:0e:3a:80:a8:
         3b:44:11:e2:f4:f1:16:b9:b0:7c:4e:e1:dc:c5:07:f2:b2:72:
         e7:6a:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 02:14:20 2026 by rpki-client