This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
File:                     v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json)
Hash identifier:          bLeOuQVr1YeHF5rp0TpR5wOO1naLe//chso7z3GKj1k=
Subject key identifier:   59:96:82:55:57:0B:A6:B9:F1:BB:05:52:4A:B7:13:1E:47:98:32:9F
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Certificate issuer:       /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial:       1C51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
Manifest number:          1C4B
Signing time:             Sat 24 Jan 2026 15:59:25 +0000
Manifest this update:     Sat 24 Jan 2026 15:59:25 +0000
Manifest next update:     Sat 31 Jan 2026 15:59:25 +0000
Files and hashes:         1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: b5CLEI3H6+AHtQ1byQHvtDZH6BZvQa87gECQPXv6oGA=)
                          2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: arvR+VfB5fxBjJ8WptxMyVsFJiGGZaQvn5Kv4Mcr+ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
                          rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7249 (0x1c51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
        Validity
            Not Before: Jan 24 15:59:25 2026 GMT
            Not After : Jan 31 15:59:25 2026 GMT
        Subject: CN=6974ec5d-e402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:4d:68:f3:28:78:2b:3a:ff:d0:32:55:76:
                    ba:2b:11:37:20:43:d0:1e:cf:be:d9:fc:a4:f0:37:
                    00:42:cd:b1:7d:4c:67:b0:2e:1e:bc:fc:60:25:64:
                    92:4b:8e:1b:22:82:d0:32:bf:7e:5e:86:2a:c3:5d:
                    a0:a8:d7:88:3e:cb:f0:14:4e:71:66:14:b5:d3:0d:
                    e6:9f:4a:11:78:34:77:25:f9:d1:97:ca:5e:56:bb:
                    00:5b:ed:b2:9d:d7:e4:39:de:19:28:8b:28:27:ab:
                    23:8c:95:ac:a2:79:44:2c:3e:67:0f:0a:fc:fb:77:
                    fe:43:dc:d5:d8:1c:13:e5:07:46:f0:4f:91:97:26:
                    d2:79:8f:08:46:a7:2e:58:2e:80:c9:c0:e4:0c:f4:
                    45:63:cc:33:eb:e2:ba:f3:94:30:d7:a5:be:6f:7d:
                    ce:7f:dd:f0:dd:b2:42:8f:b4:29:09:61:a2:e1:95:
                    71:74:83:b3:00:06:a0:ca:55:03:a0:88:45:ba:9a:
                    d6:d2:60:27:4b:de:b7:ff:81:1e:52:09:de:60:8d:
                    0b:b2:56:e9:04:1b:5b:67:f9:31:4b:93:ab:fa:c5:
                    21:7b:28:dd:26:e8:bc:14:88:a7:de:ee:90:80:39:
                    c0:97:b4:d6:08:ae:f1:33:b0:49:fe:98:51:3f:a3:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:96:82:55:57:0B:A6:B9:F1:BB:05:52:4A:B7:13:1E:47:98:32:9F
            X509v3 Authority Key Identifier:
                keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:20:4f:39:30:40:84:7f:d9:84:20:80:d3:a8:f8:c2:33:
         84:1d:83:b6:a5:7c:2f:70:ed:d8:94:d3:83:06:c0:05:c6:ab:
         68:eb:6b:be:cc:c6:43:f0:b5:1b:a1:b9:fc:fc:0c:dd:d1:b3:
         28:70:d0:1c:20:da:90:2f:37:b4:b6:7d:b1:19:6a:d4:ae:23:
         0d:de:05:21:3a:3c:3a:82:77:e5:d4:fb:94:37:a6:05:fd:c9:
         2d:d2:ce:5b:97:1a:01:a8:cd:d0:98:65:d3:0c:94:98:e5:ae:
         99:ed:a7:8b:d6:49:61:dc:6f:88:da:81:03:a1:2c:85:5e:c5:
         c4:83:42:9f:20:dc:71:0b:e4:92:e4:7f:ee:f4:84:7c:cd:27:
         18:af:0c:e3:99:66:d0:f8:24:5d:e9:ca:10:17:b2:f5:28:35:
         8a:57:99:0f:5c:5e:db:82:36:af:0e:44:fe:24:9d:98:76:d4:
         15:54:bf:5d:d5:18:d9:6c:bc:ae:8b:d8:54:e7:92:8b:a0:dd:
         94:7b:0a:d8:91:fc:ac:a7:2b:54:53:8a:e6:70:93:f5:5c:ad:
         2b:8a:63:25:7e:3b:cc:8c:5f:fe:94:e4:32:6f:af:68:9d:a6:
         66:1d:97:a1:39:6a:71:fd:67:7f:e3:94:b8:c3:09:25:3a:ec:
         fe:4d:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:46:37 2026 by rpki-client