This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
File:                     IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json)
Hash identifier:          bfBE+bMJD37yrvrJt3qmjKKi5qKdXVNWJzcztG3wNY0=
Subject key identifier:   F8:21:39:6F:D7:72:F1:EE:F2:E7:DF:DE:64:C1:9A:69:13:54:3F:1E
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Certificate issuer:       /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
Manifest number:          06F0
Signing time:             Sat 10 Jan 2026 21:29:43 +0000
Manifest this update:     Sat 10 Jan 2026 21:29:43 +0000
Manifest next update:     Sat 17 Jan 2026 21:29:43 +0000
Files and hashes:         1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: BU5vBTxjZFxz+2FvQfOvOAAIsfZqnhR4pngOH5s4lp8=)
                          2: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: MaAskf0TRxO3f2o7SBOUwJQzY2TsNLzK4Ofbrs+UHf4=)
                          3: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: wn/BM8TotG6wUb8Xjf5M9ZHwY2tRk82b/jlK0HvYDSc=)
                          4: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: PNBgm38gEmoFv4lqFvpAuI8EsQlFaIm9tEIE9Q4A0Q8=)
                          5: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: uv9fFw+pkg9pgF9/d+q2xTVafbCWlh0YWB4iJUOPl98=)
                          6: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: EbkFTiXwUuM4uKc+Le4LDTESLEZ3plcvfpf4GyS68jQ=)
                          7: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: eCzZBGM4yO3X43+DBBXORK5pWKKgJ5ykZOExObNr3Lw=)
                          8: A08AFBB284F211EE89828225C4F9AE02.roa (hash: +rlXfE57KQq96FSve4vj7ymxepa9D4fVPV/TYC7d4nQ=)
                          9: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: UjSbQygt5LC2l7V88EjIn2A0ZEggmitZY+iL8OvjiZ8=)
                          10: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: s8KDuc2GwuTam8uLkRKj65TwjJKxip9pxFU2PqilzJk=)
                          11: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: SjDNqIV8bfIECZ7LITLY5GAVFbuQWPpjP+0XRPHjJnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 21:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
        Validity
            Not Before: Jan 10 21:29:43 2026 GMT
            Not After : Jan 17 21:29:43 2026 GMT
        Subject: CN=6962c4c7-aa1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:be:3a:fb:93:7b:ed:9b:5b:31:23:0a:97:
                    bc:d9:4e:07:a2:96:7f:53:da:c6:dc:23:ec:1e:c8:
                    09:00:bb:fd:b0:38:a9:7d:f6:c3:9f:4b:b9:ee:4c:
                    e1:97:eb:31:13:34:a7:1f:81:5f:fd:ba:cc:bb:80:
                    f0:cd:7f:2f:8c:b3:01:04:a3:30:64:0c:cb:58:22:
                    84:f4:69:f4:a4:99:92:10:ea:2d:86:7e:49:ff:8d:
                    d9:3f:f7:5a:56:74:24:cd:89:26:2d:7f:6b:a2:71:
                    8d:65:6a:9a:4e:c4:e2:69:50:ff:20:3d:52:e1:51:
                    bf:8e:f0:41:a9:29:50:ec:e5:c0:d9:b9:db:5c:87:
                    3f:a0:6b:3b:27:66:87:2a:84:2c:38:07:a4:70:0f:
                    58:c4:ae:2f:7a:25:40:72:25:4b:11:bf:62:6d:26:
                    4f:c8:b9:5d:04:33:73:ae:8c:fc:26:1e:7d:a5:72:
                    07:9b:59:2c:72:f2:2a:2b:d0:38:77:40:25:5f:dd:
                    96:73:e6:db:0a:d4:55:20:e9:5c:a3:16:5b:79:1c:
                    44:42:ab:57:3f:d9:7d:b3:a7:ce:15:8b:6e:cc:07:
                    44:7a:b7:69:76:23:ee:45:16:46:58:22:3a:32:1c:
                    63:a5:30:89:d4:d9:a4:04:91:8e:d9:2b:b1:c1:a1:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:39:6F:D7:72:F1:EE:F2:E7:DF:DE:64:C1:9A:69:13:54:3F:1E
            X509v3 Authority Key Identifier:
                keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:ad:12:7e:e0:50:10:2e:52:2d:4e:c5:13:72:3a:1f:e6:
         6f:55:fd:4d:be:c5:a7:48:69:af:2f:a1:34:4f:05:a6:4a:4d:
         aa:1a:ac:bc:1b:4a:0b:d0:de:6d:1a:62:b3:1c:58:b4:2e:c3:
         c6:4b:68:49:df:e8:dd:59:77:58:19:1d:60:60:ba:4e:ec:8a:
         7d:03:1f:6b:91:b2:6b:5f:dc:b8:b5:71:a3:b5:97:fe:4c:4d:
         d2:b8:e1:25:34:46:d4:5e:58:17:de:cd:51:aa:bd:75:59:1a:
         d7:17:ab:5f:cc:3c:34:f3:22:6c:55:26:bc:56:52:af:a8:c6:
         ac:65:02:c6:86:60:6e:6d:51:0f:2d:53:57:7c:cf:7c:c9:c3:
         f7:a6:7e:4e:ff:83:c6:da:8a:95:c6:3d:c7:b8:4a:51:e6:17:
         8f:13:5f:7a:5b:50:e3:55:1d:f1:8c:4f:a6:a2:41:d7:2c:41:
         22:48:70:87:2c:98:ef:d3:ec:2a:1e:43:91:78:e6:d7:6a:a9:
         a4:9e:03:e8:3e:40:f3:7b:9e:45:c3:b3:f4:a9:96:fe:85:90:
         63:0f:84:3e:cc:c8:25:ff:81:1b:b7:1e:98:4c:3b:c5:68:7e:
         ef:f8:41:da:08:49:cf:6c:73:7a:5b:2a:07:dc:46:6e:e5:07:
         2d:54:f8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:02:15 2026 by rpki-client