This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
File:                     Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json)
Hash identifier:          mc8Q5+cfnm+58b9rFJCNU3O1JFzw5L6SChXqGGeii6g=
Subject key identifier:   45:B2:01:C0:8A:D6:0D:4F:E5:AF:71:94:7D:1E:09:E5:53:98:39:CD
Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Certificate issuer:       /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
Manifest number:          0102
Signing time:             Sat 17 Jan 2026 04:17:19 +0000
Manifest this update:     Sat 17 Jan 2026 04:17:19 +0000
Manifest next update:     Sat 24 Jan 2026 04:17:19 +0000
Files and hashes:         1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: dhw3FugKTombdS4Bjtlnlga3hCKuCZJLyxZ1yFlQUNU=)
                          2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 1z2L3hbnupa67ptFJmJyr3scDytw356F08ze+2XPBpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
        Validity
            Not Before: Jan 17 04:17:19 2026 GMT
            Not After : Jan 24 04:17:19 2026 GMT
        Subject: CN=696b0d4f-d5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:75:12:ae:90:73:04:09:ec:2d:3b:93:6c:
                    41:52:60:b7:b8:73:7d:54:b2:e4:95:53:73:d1:ea:
                    c3:6a:30:47:2e:82:b1:a7:a5:4c:db:56:a9:65:46:
                    55:75:8e:8a:f9:c7:f6:21:53:f4:42:46:12:32:a4:
                    7c:8a:75:1d:b5:82:ca:df:1c:40:72:83:8b:35:61:
                    c2:9a:3b:61:24:13:85:69:68:f6:7f:89:f5:c5:43:
                    b2:54:34:88:85:0b:34:e4:a1:1d:a1:f5:ae:40:82:
                    1d:de:ce:3e:94:db:f3:ce:81:ae:bb:72:85:81:06:
                    67:f5:8d:c5:f8:5b:01:e6:69:7c:25:a8:db:90:77:
                    1b:26:1b:28:79:0e:81:8a:29:54:e3:cc:25:34:76:
                    43:60:b5:4f:88:23:6e:ae:bd:ee:05:4a:41:2e:0f:
                    d5:bc:c9:5f:f1:13:eb:11:39:ef:7f:d6:8c:09:1d:
                    6a:34:a7:6a:45:59:f5:28:ce:3a:0a:8d:d3:bf:1b:
                    96:95:40:e9:16:35:80:ee:ae:6f:0a:06:88:7e:3e:
                    8f:9d:dd:b6:0b:62:52:7d:d9:23:90:6c:7e:8f:ac:
                    d0:d2:b9:c6:62:53:b6:bf:1e:56:10:c4:f4:fe:6b:
                    b0:fd:be:c5:35:55:02:66:07:3d:ae:c0:9f:91:1d:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B2:01:C0:8A:D6:0D:4F:E5:AF:71:94:7D:1E:09:E5:53:98:39:CD
            X509v3 Authority Key Identifier:
                keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f0:20:3c:fe:4d:d1:40:ac:8c:33:1b:fb:53:85:14:d7:44:
         9c:c0:a2:63:0c:e4:40:be:20:d7:88:07:ee:11:2d:01:fc:4d:
         1c:5f:1c:b0:74:b8:70:47:bb:f7:fa:1a:28:93:54:12:32:27:
         8b:85:93:88:b2:44:8a:88:49:56:82:4b:d0:dc:57:1d:97:c5:
         65:f4:d9:a0:02:2d:9d:df:99:df:1a:02:92:d3:0b:a7:7c:17:
         1c:68:de:a2:1f:df:d3:8e:72:65:18:a4:fa:83:cd:27:9c:d8:
         0c:1d:65:d4:46:da:cd:e3:70:f2:00:a6:1b:70:e8:8d:15:2e:
         70:40:f4:ab:52:19:61:52:0f:b5:d4:61:1e:79:dd:3c:e4:13:
         a1:67:d9:74:f0:70:27:9d:1b:6b:1d:9b:e7:1f:ea:98:48:27:
         73:7a:6f:9f:ae:68:10:8e:ad:f4:46:4e:a5:b9:bc:ed:62:a8:
         4a:bb:67:c9:f0:f5:61:ff:27:87:91:32:04:22:38:c7:ac:e0:
         10:c4:37:76:27:b4:75:9e:b5:48:bd:21:b7:a5:94:b0:9e:ae:
         09:b0:29:78:98:94:91:27:61:42:d4:d6:af:24:48:fb:a3:e3:
         27:5f:d2:55:9b:dd:2e:b7:c1:4b:a6:13:95:48:3b:7d:4c:97:
         ae:94:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:34 2026 by rpki-client