This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
File:                     iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json)
Hash identifier:          bwEQf/saJ1kFo7fI6qCjaZTOuCSSkF+qZr0OMp2wUxM=
Subject key identifier:   DA:91:2D:84:D4:76:BD:B4:03:33:86:CA:05:75:CE:66:BE:E5:8A:BE
Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17
Certificate issuer:       /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
Certificate serial:       06C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
Manifest number:          06BB
Signing time:             Fri 02 Jan 2026 21:34:25 +0000
Manifest this update:     Fri 02 Jan 2026 21:34:25 +0000
Manifest next update:     Fri 09 Jan 2026 21:34:25 +0000
Files and hashes:         1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: C5pq2/LIhVteMLniU03Cz5OirkJjGJaIjaEIWK0cbUU=)
                          2: 6339493A516311ED90F04711C4F9AE02.roa (hash: EnQQRsdbuh6a9LFGDXuyZNBkPFb6g4Js7d+vXOGm2IY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl
                          rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 19:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1733 (0x6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
        Validity
            Not Before: Jan  2 21:34:25 2026 GMT
            Not After : Jan  9 21:34:25 2026 GMT
        Subject: CN=695839e1-0161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:33:26:48:c2:5c:cf:e7:26:92:fe:2c:c8:
                    5d:85:c5:ad:7f:ac:7e:3c:28:01:0b:3d:b0:45:59:
                    e0:c8:b4:cb:41:ea:2e:fc:e3:01:cb:7f:96:45:dc:
                    fc:57:f2:ab:c4:51:62:e2:b4:6a:36:c3:c4:39:a5:
                    78:ae:44:c5:09:51:7f:f5:6e:85:48:d1:d0:47:79:
                    0e:2a:66:69:41:92:d2:5e:1d:09:b9:e2:55:80:50:
                    54:ba:62:5e:df:37:36:4f:38:77:c6:16:94:02:97:
                    60:95:7e:7a:40:39:cf:5d:57:e7:33:30:79:a6:33:
                    1a:fb:96:68:39:3b:8b:b0:8e:41:9e:38:d4:6f:da:
                    dd:97:3c:23:21:9c:6d:d1:d7:04:ab:9f:95:45:c6:
                    25:64:09:9f:5f:33:c1:40:fc:cb:36:41:78:01:1b:
                    75:ce:3c:f5:ee:55:93:dc:4f:d2:2f:65:25:67:4c:
                    01:0d:cc:b6:11:47:d1:84:ae:64:d1:85:95:cd:e2:
                    6c:fb:e5:ac:c3:27:1b:7f:63:f0:e5:33:07:9c:88:
                    6b:57:00:e1:03:5a:a1:51:a7:b8:a7:50:12:6d:17:
                    0b:3b:a3:85:00:1c:32:18:19:15:16:a7:b6:51:94:
                    17:cb:49:80:68:6e:f9:e7:dd:09:c1:10:be:e7:67:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:91:2D:84:D4:76:BD:B4:03:33:86:CA:05:75:CE:66:BE:E5:8A:BE
            X509v3 Authority Key Identifier:
                keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5e:b2:b1:ad:02:33:1e:f8:55:ef:b6:e4:d6:f5:7b:b7:c7:
         95:32:85:e7:57:39:24:e2:16:d3:ec:2f:a6:37:44:c1:fc:b8:
         d4:e5:90:a2:25:1d:ae:4c:d0:91:c7:e4:5d:27:33:f0:0e:32:
         de:bd:89:59:5b:39:93:23:86:40:b3:6a:ac:ff:22:4c:8e:5e:
         09:32:35:a0:84:b3:2c:8e:9b:81:eb:bc:4a:5e:5f:f9:35:dc:
         23:77:bd:3f:77:27:5c:09:3f:5a:35:27:d1:3b:3c:51:fd:8b:
         b5:81:98:a6:bf:ac:6c:e4:4c:42:3f:c5:29:a1:b5:93:d3:f2:
         d4:1b:cf:04:06:a1:c5:0d:06:5b:89:6e:9f:9e:be:95:08:f3:
         49:7d:6a:4b:17:c4:4a:5e:14:36:41:48:5a:db:c7:af:63:3b:
         d3:b9:f9:42:21:f1:66:24:24:48:61:b7:ce:92:37:02:ed:92:
         0b:81:60:45:05:1f:e8:32:53:0e:23:6f:06:a0:19:47:ce:1e:
         a5:12:95:8d:eb:38:60:b7:b6:3f:bd:36:88:3a:47:c0:a0:d1:
         2e:d6:1c:5f:d4:d8:6b:7d:26:ad:21:1f:6f:d2:20:c8:b7:79:
         08:b3:2a:a7:88:bf:27:0f:27:fd:a7:30:ea:d9:35:ac:00:e2:
         cb:bb:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:29:30 2026 by rpki-client