This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File:                     xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier:          WI2WWhkHKS66dfaQ2394KUZe1Axtnq7SN2c6ro1mMJ0=
Subject key identifier:   4B:80:9F:FA:28:AE:84:BF:08:59:2B:6A:09:4E:D4:C4:D9:70:AD:00
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer:       /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number:          C2
Signing time:             Sun 25 Jan 2026 05:06:09 +0000
Manifest this update:     Sun 25 Jan 2026 05:06:09 +0000
Manifest next update:     Sun 01 Feb 2026 05:06:09 +0000
Files and hashes:         1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: aEVvy3AAimPumRgMTiigDNMK/po1AMMBY18pLwd2XmA=)
                          2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: yxYbVT0G3FIFNHaQq21RRd4odOx6/tGbrON4MVMOYMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
        Validity
            Not Before: Jan 25 05:06:09 2026 GMT
            Not After : Feb  1 05:06:09 2026 GMT
        Subject: CN=6975a4c1-c112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:e0:29:1c:8a:82:1a:1d:79:59:80:05:87:
                    72:93:b7:4a:92:5b:0f:f1:6a:5c:70:ef:52:e1:14:
                    e8:e6:11:14:bf:ee:9d:68:b5:5a:6f:5e:f7:85:0c:
                    59:60:3c:5e:55:85:3f:4c:74:2a:ee:88:ec:04:81:
                    f7:af:94:7d:f1:29:c1:ef:3c:e8:7b:d3:8a:a9:30:
                    38:ed:4a:ad:f7:f4:54:7a:04:1a:39:6c:9d:ca:32:
                    fc:f8:a7:e1:8a:de:89:cb:70:30:7c:68:8e:8b:8c:
                    42:db:b8:a1:b6:7b:9a:1d:3b:ac:b9:ee:2a:ae:0a:
                    c0:b2:b8:f4:94:dc:dc:7e:79:d3:e5:80:ff:d2:d9:
                    1c:ca:96:f1:6f:ef:5a:bc:d7:88:04:54:20:eb:2c:
                    f2:80:51:f6:c7:86:58:95:c9:ca:d0:09:76:b3:fc:
                    da:f4:ca:ed:9a:03:21:8b:6e:50:33:72:0e:53:74:
                    5e:aa:07:52:cc:33:31:5a:36:d2:fc:33:4d:fa:d1:
                    ca:a2:7c:d4:b2:bf:a4:c3:ea:23:a9:39:ff:41:43:
                    f6:5f:fd:92:5d:10:6c:e2:b7:d3:44:71:3e:54:26:
                    67:f9:96:8c:42:c7:25:aa:35:14:b0:76:26:a7:cb:
                    08:cd:67:33:cd:21:c6:b3:eb:30:5b:b5:ed:15:77:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:80:9F:FA:28:AE:84:BF:08:59:2B:6A:09:4E:D4:C4:D9:70:AD:00
            X509v3 Authority Key Identifier:
                keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:ca:03:7d:e3:1a:ff:62:62:93:a1:5d:f7:20:0a:8d:67:
         00:a0:a2:1f:f5:39:c6:17:4e:2e:90:45:b0:bf:a0:49:b2:8c:
         65:a6:ad:0c:00:d7:c9:ab:d8:63:9f:43:82:e9:03:d4:8f:c5:
         fc:fb:7f:2e:cb:81:95:b1:b8:f6:70:ee:f4:04:1f:4d:3e:f1:
         64:7e:dc:ad:d7:66:f3:19:9c:76:57:71:3b:f4:d7:8e:70:b8:
         be:04:83:0c:1d:c4:13:62:f6:e5:71:92:b5:29:d9:15:a1:cc:
         d9:63:85:16:cd:e2:ac:72:73:18:a2:00:0d:61:9e:57:9d:17:
         2e:a1:b7:11:d3:95:3c:78:b5:d0:d7:5a:f6:86:59:3f:0a:fe:
         9a:90:72:62:26:46:03:97:67:fe:f4:3f:74:42:5c:c3:19:4a:
         15:ce:c5:b8:d3:ed:52:6a:66:43:3a:3e:52:e1:d3:44:73:7d:
         f9:d9:89:c1:ab:12:0f:4e:c0:5c:ad:d7:c5:17:cb:a4:f6:a7:
         ba:2c:ac:fc:e6:5f:0c:2f:c3:6b:fb:6c:72:b0:09:bd:88:58:
         04:eb:3e:f5:f2:7b:70:2a:d6:19:f8:29:a4:b9:ab:25:da:f0:
         28:4e:d2:8a:38:4e:b4:6b:9f:48:bd:5e:e8:2e:4d:ce:d0:4f:
         9e:c2:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:19 2026 by rpki-client