This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
File:                     7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json)
Hash identifier:          amtbAzxHjMk2lL+FesQiawZ6pX9IBcC8WR/ZGdLQEvY=
Subject key identifier:   79:21:EF:5C:9F:EF:96:A0:65:41:53:9B:61:31:74:5B:B5:04:E7:CD
Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
Certificate issuer:       /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
Manifest number:          0202
Signing time:             Fri 16 Jan 2026 22:13:24 +0000
Manifest this update:     Fri 16 Jan 2026 22:13:24 +0000
Manifest next update:     Fri 23 Jan 2026 22:13:24 +0000
Files and hashes:         1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: gga+GZPv6+oH1eAtzBuoHxd4OXQlQSkPJyEvaATu/Ec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
                          rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 22:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
        Validity
            Not Before: Jan 16 22:13:24 2026 GMT
            Not After : Jan 23 22:13:24 2026 GMT
        Subject: CN=696ab804-17df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:f6:6b:f6:85:df:d8:a8:82:11:6b:3a:ed:
                    84:ad:60:79:30:fb:19:f6:eb:7e:93:43:3b:8a:79:
                    4c:64:67:11:14:87:36:49:6c:1c:d7:b9:ff:e3:a4:
                    61:ff:fe:31:ef:72:36:8c:81:41:c1:c3:bb:85:02:
                    a7:4a:2e:e4:d2:ad:9b:0d:e7:71:ad:da:8b:76:72:
                    2e:30:c9:63:73:5f:15:66:f3:2f:80:ba:00:4e:01:
                    85:fc:74:b0:c0:e1:a2:08:76:0d:41:93:88:dd:8b:
                    d2:74:a1:60:79:c9:2c:05:b8:f8:2a:d3:c5:ca:da:
                    86:e5:ac:de:76:c7:ea:38:b0:9d:f5:9f:20:c4:11:
                    59:50:8b:6a:d3:63:50:06:6e:80:53:9e:93:46:27:
                    4f:16:3f:9d:f5:d3:8b:42:fd:13:e4:d8:ea:86:c6:
                    bb:56:11:ae:64:98:b3:35:57:38:8a:a1:a6:b4:a0:
                    67:b5:e2:ec:f4:94:8d:69:84:69:23:e1:0a:5a:e5:
                    35:fc:2e:97:e9:ee:33:d7:a8:8c:35:61:19:41:05:
                    00:5c:42:8f:25:73:ae:c7:cd:01:e0:e4:31:50:bb:
                    37:97:c5:2c:94:4d:8f:6f:77:45:66:85:8b:59:a4:
                    60:a7:99:ca:6e:cb:65:ac:b9:cf:93:31:f6:59:96:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:21:EF:5C:9F:EF:96:A0:65:41:53:9B:61:31:74:5B:B5:04:E7:CD
            X509v3 Authority Key Identifier:
                keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0e:4b:14:b8:36:4e:2c:a2:10:95:65:c1:79:6c:3c:a1:e5:
         d6:d8:2c:1c:48:2f:f3:87:8a:3a:b0:b4:08:6a:4b:34:04:67:
         aa:3f:c9:60:70:3e:cc:af:ea:d2:93:e3:d6:e0:e7:56:d8:0e:
         9a:a2:e9:ba:31:4e:f2:ea:57:d4:b4:28:95:47:64:6a:1c:c3:
         0a:82:c7:a5:9c:c8:c5:97:5c:c7:b5:fe:83:d3:48:fa:1e:7e:
         f1:49:4c:a1:dd:7b:43:8c:14:7f:cf:62:b8:a3:06:cc:8c:39:
         65:eb:a0:d8:ba:9d:e5:ca:cf:fb:70:bc:dd:8e:a1:b1:58:76:
         62:6e:ce:1b:9e:e0:bc:de:32:7c:0b:36:84:4c:a0:b8:ec:9e:
         21:31:6f:08:01:29:32:98:cd:b4:8b:57:5a:12:b7:fb:68:95:
         35:e5:27:36:a5:ba:5d:ac:a7:c5:3d:a9:ca:95:0d:c8:23:f6:
         c6:d4:52:5e:ea:d7:7c:ed:8c:26:5d:f8:8c:4b:ac:47:87:6f:
         f7:d6:42:3f:6b:b5:bd:eb:fa:77:9e:57:a5:4c:10:4c:88:d1:
         7b:87:e7:b7:36:a1:81:5d:9d:92:10:6d:2b:e1:a5:57:b1:10:
         f2:aa:94:df:af:3a:af:b2:3e:02:2b:16:30:43:30:f2:f4:a2:
         87:59:01:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC
RkY0ODk3ODEwHhcNMjYwMTE2MjIxMzI0WhcNMjYwMTIzMjIxMzI0WjAYMRYwFAYD
VQQDDA02OTZhYjgwNC0xN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzDT2a/aF39ioghFrOu2ErWB5MPsZ9ut+k0M7inlMZGcRFIc2SWwc17n/46Rh
//4x73I2jIFBwcO7hQKnSi7k0q2bDedxrdqLdnIuMMljc18VZvMvgLoATgGF/HSw
wOGiCHYNQZOI3YvSdKFgecksBbj4KtPFytqG5azedsfqOLCd9Z8gxBFZUItq02NQ
Bm6AU56TRidPFj+d9dOLQv0T5Njqhsa7VhGuZJizNVc4iqGmtKBnteLs9JSNaYRp
I+EKWuU1/C6X6e4z16iMNWEZQQUAXEKPJXOux80B4OQxULs3l8UslE2Pb3dFZoWL
WaRgp5nKbstlrLnPkzH2WZa+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkh71yf
75agZUFTm2ExdFu1BOfNMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG
RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk
eTNEN3doMXNiS09fOUlsNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBDksUuDZOLKIQlWXBeWw8oeXW2CwcSC/zh4o6sLQIaks0BGeqP8lg
cD7Mr+rSk+PW4OdW2A6aoum6MU7y6lfUtCiVR2RqHMMKgselnMjFl1zHtf6D00j6
Hn7xSUyh3XtDjBR/z2K4owbMjDll66DYup3lys/7cLzdjqGxWHZibs4bnuC83jJ8
CzaETKC47J4hMW8IASkymM20i1daErf7aJU15Sc2pbpdrKfFPanKlQ3II/bG1FJe
6td87YwmXfiMS6xHh2/31kI/a7W96/p3nlelTBBMiNF7h+e3NqGBXZ2SEG0r4aVX
sRDyqpTfrzqvsj4CKxYwQzDy9KKHWQGG
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:15 2026 by rpki-client