This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
File:                     PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json)
Hash identifier:          2DjaZTYLcSUgy6WePxuTxsuqD0Mp5M7hlmpE2d+xK2M=
Subject key identifier:   E3:1B:75:0F:00:65:1C:EC:53:B7:4C:D8:E3:45:47:3F:3D:76:72:A2
Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
Certificate issuer:       /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Certificate serial:       0910
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
Manifest number:          0904
Signing time:             Sat 24 Jan 2026 19:44:24 +0000
Manifest this update:     Sat 24 Jan 2026 19:44:23 +0000
Manifest next update:     Sat 31 Jan 2026 19:44:23 +0000
Files and hashes:         1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: wNnkn9ZXoAhjO0H2zpbO2+ullJ0/nCmxHExr6GA8LcI=)
                          2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: +enQgUid53gMaFPCBDOzsd0TE3j6ha7MQxAZKWnZpAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
                          rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
        Validity
            Not Before: Jan 24 19:44:23 2026 GMT
            Not After : Jan 31 19:44:23 2026 GMT
        Subject: CN=69752118-dd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:4c:21:34:90:9e:49:66:5b:1e:d3:68:9f:
                    17:3d:db:5e:c0:c7:1d:96:d6:8c:4d:19:32:af:1a:
                    cb:90:44:bc:7a:e1:36:24:6a:7b:25:c0:90:bb:19:
                    53:39:6d:80:22:3b:8e:7b:83:5e:42:9a:5f:65:d3:
                    4f:93:1f:02:fd:27:f6:ca:d4:fa:5f:b3:6d:77:37:
                    42:18:46:30:fd:4d:db:c2:24:0f:45:02:49:2d:ac:
                    17:f2:d5:3a:74:01:7d:7a:ca:80:96:c2:54:90:f2:
                    24:09:10:de:a6:3f:d0:83:59:95:ef:4d:5f:db:d4:
                    c9:1b:e8:59:24:44:3b:23:c3:06:d5:02:9a:c4:fd:
                    49:ed:81:f7:d5:80:6e:0e:ed:bd:d3:f8:3f:2b:57:
                    e1:8b:34:09:7b:c5:87:9e:5a:e3:ae:e5:42:32:15:
                    30:64:93:5d:43:0d:7e:98:9a:56:d5:ea:24:3a:75:
                    0b:11:d3:d7:06:45:d2:34:c8:1f:41:4b:0f:dc:ed:
                    e2:fc:b2:37:be:48:b9:41:d9:37:98:79:0b:12:f6:
                    4d:61:1b:ba:73:ab:89:f4:28:a3:91:e7:87:5f:e7:
                    b3:42:2c:6c:80:31:47:12:02:6d:37:be:21:48:e1:
                    96:d3:c4:30:ea:c7:23:8e:29:45:50:53:b8:54:5f:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1B:75:0F:00:65:1C:EC:53:B7:4C:D8:E3:45:47:3F:3D:76:72:A2
            X509v3 Authority Key Identifier:
                keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:97:cc:7f:7a:e6:70:95:84:e6:69:7f:b2:5f:a3:2e:f3:c3:
         18:a6:3a:5f:34:65:d4:ce:de:93:93:a1:33:f6:45:98:7e:fb:
         f1:e7:b8:b0:67:bf:5c:94:46:86:ea:15:be:8d:68:6c:da:18:
         1c:18:81:ad:c3:92:67:af:e9:dd:00:d6:22:25:97:75:a5:45:
         6e:52:67:b4:31:d0:ad:67:22:b0:3e:7c:61:55:98:d8:b5:f8:
         61:d2:50:3c:07:c4:9e:84:af:8d:a6:32:8f:eb:71:c4:63:36:
         e8:24:99:7b:f5:04:24:ec:da:2d:f9:8b:63:2d:95:01:c7:c7:
         0c:9c:17:8c:70:bb:aa:6a:92:27:24:22:3d:08:da:5f:c5:ba:
         cf:2e:ea:70:20:ce:6e:8b:cc:43:a8:b8:69:50:fa:3d:fd:7d:
         49:bf:38:6a:a9:e0:fd:7c:f9:90:e4:3e:a4:0c:9b:d0:e0:db:
         8a:9b:3e:0a:ad:27:06:b7:b1:fd:2a:cb:82:e6:67:4a:34:b9:
         3e:1a:09:65:fb:a2:5a:ab:63:e6:8b:a0:4c:ed:2c:17:ec:bc:
         6e:04:5f:4a:05:d5:6d:45:2c:dc:86:83:5a:65:54:1e:3d:9b:
         0f:b9:21:41:39:99:6c:58:0f:74:1f:33:f0:d9:8d:b2:42:cc:
         f0:c2:fd:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2
NTVFOTI0QTAwHhcNMjYwMTI0MTk0NDIzWhcNMjYwMTMxMTk0NDIzWjAYMRYwFAYD
VQQDDA02OTc1MjExOC1kZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/hMITSQnklmWx7TaJ8XPdtewMcdltaMTRkyrxrLkES8euE2JGp7JcCQuxlT
OW2AIjuOe4NeQppfZdNPkx8C/Sf2ytT6X7NtdzdCGEYw/U3bwiQPRQJJLawX8tU6
dAF9esqAlsJUkPIkCRDepj/Qg1mV701f29TJG+hZJEQ7I8MG1QKaxP1J7YH31YBu
Du290/g/K1fhizQJe8WHnlrjruVCMhUwZJNdQw1+mJpW1eokOnULEdPXBkXSNMgf
QUsP3O3i/LI3vki5Qdk3mHkLEvZNYRu6c6uJ9CijkeeHX+ezQixsgDFHEgJtN74h
SOGW08Qw6scjjilFUFO4VF/GJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMbdQ8A
ZRzsU7dM2ONFRz89dnKiMB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG
N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3
azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGl8x/euZwlYTmaX+yX6Mu88MYpjpfNGXUzt6Tk6Ez9kWYfvvx57iw
Z79clEaG6hW+jWhs2hgcGIGtw5Jnr+ndANYiJZd1pUVuUme0MdCtZyKwPnxhVZjY
tfhh0lA8B8SehK+NpjKP63HEYzboJJl79QQk7Not+YtjLZUBx8cMnBeMcLuqapIn
JCI9CNpfxbrPLupwIM5ui8xDqLhpUPo9/X1JvzhqqeD9fPmQ5D6kDJvQ4NuKmz4K
rScGt7H9KsuC5mdKNLk+Ggll+6Jaq2Pmi6BM7SwX7LxuBF9KBdVtRSzchoNaZVQe
PZsPuSFBOZlsWA90HzPw2Y2yQszwwv1u
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:08:36 2026 by rpki-client