This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
File:                     Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json)
Hash identifier:          oqT5hjy7g1uiIvK/20yF8fvd51zBRklrW0aOWIrQ+L8=
Subject key identifier:   7B:CD:DC:F9:01:40:09:A2:0B:DB:10:C2:9A:2B:0A:C3:98:16:5F:A4
Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
Certificate issuer:       /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
Manifest number:          3D
Signing time:             Sat 17 Jan 2026 06:26:43 +0000
Manifest this update:     Sat 17 Jan 2026 06:26:42 +0000
Manifest next update:     Sat 24 Jan 2026 06:26:42 +0000
Files and hashes:         1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: 4wZPWFSbedWW8hMVlaAp7qvFHNpLd5C6NXupLyOc7+A=)
                          2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: 6x2cZtG1O8RYzD8OGoXsH+NShNfzIbk96k46lysq5xU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
        Validity
            Not Before: Jan 17 06:26:42 2026 GMT
            Not After : Jan 24 06:26:42 2026 GMT
        Subject: CN=696b2ba3-116c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4f:56:f6:fb:c6:4a:06:1f:1a:be:eb:68:d0:
                    f8:41:01:28:a6:e8:f5:1d:f1:24:b3:2f:95:08:af:
                    10:0a:2c:09:0f:b2:2b:5c:fe:07:f8:e6:c5:47:d4:
                    3a:7f:b2:81:55:03:16:72:56:db:1c:f2:b4:78:3a:
                    15:96:db:ba:03:42:98:59:bf:4d:c8:c3:25:a8:e2:
                    82:fc:e8:61:a0:99:9b:70:1f:90:1f:d1:6c:2b:9c:
                    70:29:e4:7c:9d:e1:34:7c:e2:01:54:12:20:75:57:
                    71:ed:08:d9:4d:4a:c8:6f:10:72:cb:c1:01:08:d0:
                    4e:d5:48:9f:53:d5:32:54:48:c6:05:8d:27:ec:13:
                    22:0a:44:84:7c:59:38:bc:75:2e:b5:50:a5:34:e0:
                    3f:64:76:5e:3b:25:b0:50:c3:ea:25:7c:13:58:18:
                    80:21:8d:97:cf:63:91:e1:80:77:a7:ef:b0:84:8e:
                    24:ce:21:d5:06:8b:80:fd:51:fb:84:14:3b:75:df:
                    7f:3a:96:71:39:de:3e:f4:76:1e:74:08:d2:4f:24:
                    cf:90:b6:bb:39:44:25:47:cb:ed:33:d5:08:dc:a7:
                    38:24:02:f7:2f:55:f3:79:6f:20:03:89:0e:e5:a6:
                    32:56:03:2f:4e:d1:63:db:a7:e2:21:b1:29:d3:70:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:DC:F9:01:40:09:A2:0B:DB:10:C2:9A:2B:0A:C3:98:16:5F:A4
            X509v3 Authority Key Identifier:
                keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b1:80:0c:4d:4e:e2:73:e0:ff:e6:83:cc:98:4d:6c:e0:68:
         fd:0e:32:c5:44:35:8f:41:15:87:27:86:b5:22:89:fe:d1:4b:
         82:61:4c:43:9c:b2:24:a4:ad:ed:02:22:a0:91:00:c6:06:7c:
         3e:ba:5a:ea:8b:34:9b:9b:7d:66:aa:a8:d1:6d:2f:67:e0:b1:
         30:58:3e:63:69:cb:1f:d4:0a:7c:d4:52:c7:b9:5b:ef:28:56:
         8e:69:db:a8:9d:87:72:d3:32:6b:35:ac:e8:4b:c8:ad:41:2b:
         34:63:54:c3:59:41:eb:5e:b3:b3:31:36:7f:1f:94:c5:5e:63:
         3f:ab:4b:ee:aa:3c:d3:62:91:be:b2:4b:2d:ac:c9:ee:7c:fe:
         0e:dd:6c:06:13:65:ff:54:4e:a2:57:12:72:37:c1:23:37:16:
         cb:ae:f5:1a:87:2d:7c:13:44:2f:5d:93:6d:bc:c4:c2:b2:7b:
         91:1c:a0:f1:2f:15:dc:6a:0b:b5:91:77:89:25:83:b6:22:05:
         31:e9:29:7c:6f:94:c3:f8:1f:8b:59:19:69:a7:86:5e:ca:a8:
         2d:cd:b2:18:4e:b0:f3:55:2a:17:19:56:e1:81:32:3a:33:47:
         ca:a3:a6:9d:a5:b2:67:c4:c2:c0:0b:a4:bd:61:70:44:f5:e1:
         66:47:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:25 2026 by rpki-client