This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File:                     ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier:          OYulhdmtUhpHx474iXRZHhD47Q7N/1U0owPS3boHh40=
Subject key identifier:   3F:4B:1E:50:33:62:EC:05:C3:C3:F8:68:05:4D:62:47:07:B0:DE:4F
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       03CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number:          03BC
Signing time:             Mon 26 Jan 2026 23:47:15 +0000
Manifest this update:     Mon 26 Jan 2026 23:47:14 +0000
Manifest next update:     Mon 02 Feb 2026 23:47:14 +0000
Files and hashes:         1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: p+ZoIGABpKK7Qmqe6pEoR+SnVXkf54ZvWeAOElUZumM=)
                          2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=)
                          3: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=)
                          4: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=)
                          5: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=)
                          6: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 23:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Jan 26 23:47:14 2026 GMT
            Not After : Feb  2 23:47:14 2026 GMT
        Subject: CN=6977fd02-e71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:ad:0e:5f:ac:50:62:2e:cf:d2:48:50:8e:
                    54:2f:b7:1f:9c:38:97:9a:0d:60:21:ed:69:0f:09:
                    c6:75:6d:47:56:d5:3c:0b:19:f7:a4:ac:f8:06:ec:
                    93:72:7b:94:ff:87:37:cf:c4:cc:52:1e:b2:2f:c2:
                    8f:8e:ad:07:52:f2:1f:03:24:68:71:2c:01:40:00:
                    9d:b3:b5:f8:0c:9f:01:bd:73:9a:0e:f2:33:2a:59:
                    70:c9:25:51:cb:81:9f:d8:4a:8a:b4:ab:67:8d:12:
                    2a:28:9f:d1:dc:e9:1a:4a:ca:44:40:c7:8c:b8:8a:
                    cb:a7:5b:b2:c8:fa:82:c8:93:be:5b:1a:b4:0d:ac:
                    ae:8d:d1:cf:ca:b2:b4:ef:5d:5a:e6:47:21:fe:f2:
                    67:82:5f:9b:b4:5b:dc:d8:a9:ce:95:d7:65:93:75:
                    40:d7:fd:aa:f5:37:02:7f:50:a4:11:29:37:9e:df:
                    12:3f:f0:b7:1d:0b:37:fe:ea:69:26:6f:97:32:4d:
                    42:5d:d8:b4:90:0c:4d:ba:ce:cb:db:e6:98:d7:ff:
                    7c:8e:3f:5e:70:bc:cc:89:22:1e:0c:92:d0:f4:0e:
                    6f:30:aa:cf:59:cb:b8:77:e9:68:41:49:c5:4b:b7:
                    90:57:b8:4f:42:4a:8b:f4:ab:69:e3:85:95:df:72:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4B:1E:50:33:62:EC:05:C3:C3:F8:68:05:4D:62:47:07:B0:DE:4F
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c6:75:19:08:de:20:ca:44:e4:4b:04:90:83:ee:f1:82:92:
         11:0a:03:0d:77:37:ae:e2:47:9d:ff:b1:a7:f6:dc:50:49:7a:
         aa:d3:3e:3e:97:d7:ac:cd:3e:0f:b6:4c:ae:23:3b:56:88:f8:
         6a:79:6d:04:b5:6e:76:02:b2:89:9b:9a:fb:10:44:0b:42:ba:
         68:74:c5:21:8e:8f:3c:e1:3a:25:71:bc:bb:6c:ff:5b:a2:15:
         b1:db:da:25:09:2d:58:66:87:be:8a:a6:ec:d3:42:3d:26:0b:
         a9:b6:6e:4d:42:66:3a:3f:fd:dc:0c:20:64:c5:cc:d3:8a:16:
         ab:ad:ab:38:c2:eb:1c:8d:10:6f:53:36:20:e0:fb:c4:9c:65:
         c4:12:e8:6f:02:44:bf:bb:9d:9f:7e:3d:7f:ef:70:14:9a:89:
         50:48:a9:2d:10:77:fd:ce:59:de:a2:9a:32:c6:47:2a:6f:c2:
         a5:97:25:d4:a5:c7:02:19:08:c3:f2:d5:15:64:cd:46:db:4d:
         db:e6:f0:cd:4f:50:fd:ba:82:5b:2d:78:ed:e0:32:85:30:2b:
         7b:62:da:71:b8:2f:36:00:1f:1e:cf:84:12:d3:23:ff:ea:df:
         e1:87:66:fa:0a:ab:ab:4b:d1:88:0a:f7:a9:5a:e2:27:27:9d:
         ce:b9:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:41:44 2026 by rpki-client