This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
File:                     IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json)
Hash identifier:          YbmKm5A5ANGKdS6BH0NK4Hj0ZU9KRDfZbbEkMHSTJzY=
Subject key identifier:   CE:E1:64:54:C4:0B:BA:6D:10:49:A4:42:EE:2C:41:1F:A9:96:E7:B7
Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
Certificate issuer:       /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
Manifest number:          0D
Signing time:             Sat 17 Jan 2026 07:03:07 +0000
Manifest this update:     Sat 17 Jan 2026 07:03:06 +0000
Manifest next update:     Sat 24 Jan 2026 07:03:06 +0000
Files and hashes:         1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: 3rl2H4Atu1WJdDgzikSgu52pWf4hyaeC4Jhi1Qrl0Hc=)
                          2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: kHK2laRL4zDNY/Ej1mLKEGPZW81NdbE5Yg/ARskhgEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl
                          rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
        Validity
            Not Before: Jan 17 07:03:06 2026 GMT
            Not After : Jan 24 07:03:06 2026 GMT
        Subject: CN=696b342a-a1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:91:a5:3d:e9:f5:c5:74:8e:38:ec:02:96:
                    07:d2:b7:66:ce:33:84:f9:c5:24:16:be:f0:d4:00:
                    9c:06:a4:31:cd:41:af:bb:3b:b1:5a:5f:52:71:04:
                    d2:08:d9:cd:f7:90:f8:0b:d6:75:1a:b5:70:86:f5:
                    0b:e7:62:4e:f3:53:79:4c:01:0c:b6:91:bb:95:cc:
                    c1:fc:d4:11:5c:39:94:f8:e8:40:b4:f8:e9:d0:5a:
                    bb:b8:e3:5f:8d:1f:d9:ea:33:6b:50:0d:01:bc:7c:
                    68:fa:00:57:1b:4b:06:6d:2f:cd:d1:5b:21:46:55:
                    95:a1:f6:4d:c5:1d:a5:62:66:18:08:dc:f6:c8:ea:
                    c7:8a:0d:f6:f9:15:56:90:aa:c0:78:02:c2:bb:4f:
                    cc:a7:ef:f1:2f:12:18:cd:70:4f:d1:45:bc:c1:de:
                    93:3a:0c:67:1b:7e:38:0e:dd:f1:f3:56:96:4b:ed:
                    31:62:a0:f8:4a:a8:8b:8a:76:9d:df:15:fd:be:ef:
                    08:8d:6b:58:49:f3:d8:89:79:3d:e2:28:c4:f5:bd:
                    b7:6a:8e:a5:8a:df:5a:1b:77:8a:4f:38:a3:29:9f:
                    8e:10:89:0a:d1:37:ff:84:da:c0:0e:41:cf:12:92:
                    43:96:80:e7:fd:32:bc:0f:ee:2f:e4:8c:cf:e7:ca:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E1:64:54:C4:0B:BA:6D:10:49:A4:42:EE:2C:41:1F:A9:96:E7:B7
            X509v3 Authority Key Identifier:
                keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:fc:19:3c:7a:c8:ac:cc:5d:36:cc:72:33:b8:01:1a:f0:
         a1:80:c5:ff:01:79:85:5b:52:56:79:20:d9:fb:49:08:35:65:
         5e:58:7f:a0:53:e3:5d:78:8c:9b:fb:52:ba:18:e8:75:ba:1b:
         d8:59:75:30:92:04:d7:a7:11:b8:cd:a2:30:bd:b4:53:e3:a9:
         95:4e:e3:0b:29:66:53:89:17:e7:d3:56:8b:a2:56:4f:d5:68:
         9d:26:76:d1:5c:68:be:a3:ad:b2:00:48:e6:5e:0f:33:11:26:
         d9:0f:9a:2f:8b:76:6a:d7:5c:f3:27:22:19:c1:1e:ee:da:69:
         e2:32:77:1e:53:ae:30:0e:48:84:17:2e:2e:c8:bc:a2:3e:6f:
         c5:47:ee:7a:24:89:52:3a:a9:21:21:19:2e:e7:b7:b2:58:21:
         40:ad:f3:2f:00:81:dd:88:a2:98:01:ef:b5:b9:1b:95:bf:6d:
         0f:52:dc:6c:ce:fa:f8:d1:e4:72:2b:fa:5e:32:53:2f:5f:f1:
         92:64:92:91:27:9d:22:31:29:c1:cb:b5:dd:20:23:6f:b0:21:
         b9:ba:12:41:a4:f9:b4:0f:13:c4:f5:4a:f5:84:ab:2c:1e:61:
         6c:c2:76:fa:71:a0:16:ff:db:c7:2c:c7:3a:bc:e5:51:11:0b:
         49:c4:9d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:13:10 2026 by rpki-client