This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
File:                     xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json)
Hash identifier:          0rRpi6yBe5Oa80A6anPAVtBsgapk/DD5lVujmM7gITU=
Subject key identifier:   5E:F5:4C:1E:BB:6E:EE:59:D7:3E:C5:F3:CB:A3:4F:C9:6D:C7:BB:6A
Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
Certificate issuer:       /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Certificate serial:       06F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
Manifest number:          06EF
Signing time:             Sat 24 Jan 2026 21:17:38 +0000
Manifest this update:     Sat 24 Jan 2026 21:17:38 +0000
Manifest next update:     Sat 31 Jan 2026 21:17:38 +0000
Files and hashes:         1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: plBsMLOhslb8NfRNfbeL91tfFAFvVFd865Zu6wE/6Tc=)
                          2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: ayNr4tR/Sfu0YrCAQZrJZu7BfQ9IzQFCs/VABD0dmLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
                          rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
        Validity
            Not Before: Jan 24 21:17:38 2026 GMT
            Not After : Jan 31 21:17:38 2026 GMT
        Subject: CN=697536f2-15aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:33:c2:2c:0a:22:0d:ae:86:53:bd:29:cb:
                    c1:b7:47:64:6f:60:37:f1:1b:08:99:fe:28:71:81:
                    a0:9a:ad:af:43:2e:7c:7d:e6:80:83:fa:e6:05:90:
                    d2:77:9c:2b:5f:ff:dc:4c:ae:eb:dd:1a:d2:1e:11:
                    7e:13:92:8b:8a:83:4c:f2:cd:4f:5a:35:e7:dc:f3:
                    fa:04:0d:ec:84:6a:4c:38:4d:2b:e5:ca:bc:59:9a:
                    72:7d:4a:37:a4:ba:db:b4:30:b2:1b:40:af:37:c1:
                    d8:ea:6b:4b:ca:e8:d4:88:8d:d3:98:10:50:66:2b:
                    8c:6a:3d:84:cd:b6:e8:29:10:9f:72:f8:08:c9:f4:
                    21:64:aa:4a:44:22:d9:1c:31:25:82:67:50:ab:71:
                    ec:a5:a6:fb:96:4f:b3:ea:90:a0:4d:42:a2:0a:a3:
                    48:de:a9:29:73:b9:97:bd:ff:5a:80:6a:f8:ac:e7:
                    de:8e:a8:5f:91:64:a2:91:54:d3:85:5b:7b:3f:49:
                    38:7f:ed:28:3e:7a:ac:74:06:43:d3:20:a1:a0:d5:
                    8a:0c:b5:d2:f7:0f:49:fd:b3:c6:10:d9:f0:55:d2:
                    3b:fa:8d:cb:f4:45:7e:a3:92:11:04:7f:5e:d6:5d:
                    0f:f0:11:bf:43:37:46:02:3a:5e:35:fc:bf:53:fc:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F5:4C:1E:BB:6E:EE:59:D7:3E:C5:F3:CB:A3:4F:C9:6D:C7:BB:6A
            X509v3 Authority Key Identifier:
                keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:2b:e0:ca:70:f3:ea:18:a3:b2:b7:f1:0d:8d:5b:9b:91:
         12:51:70:a2:e9:dd:e9:e3:01:83:98:f7:82:8f:79:d4:ca:95:
         f1:24:9d:4d:14:60:37:e7:bc:c0:f4:b4:8b:9c:64:c9:57:1b:
         0e:b8:e4:36:b8:79:3b:83:ab:37:c1:8f:6d:64:10:75:3b:1c:
         42:6b:dd:31:44:39:59:e8:3e:90:0a:a2:fa:19:36:02:b1:8c:
         f2:eb:a5:ed:1b:ca:88:cc:70:5e:7f:f3:83:bd:e5:bd:48:ed:
         25:42:cc:92:42:60:7f:39:10:0e:bd:f9:03:ea:5e:33:92:ff:
         e7:22:ff:11:bb:98:57:20:5b:65:23:5c:3a:ab:4c:f4:17:18:
         7d:ac:e6:09:3e:b0:3a:6c:b1:5c:d8:d9:a8:91:e1:9a:d4:cc:
         ae:57:18:f0:ad:98:20:31:9e:07:57:a7:b2:4e:04:26:08:28:
         be:fb:98:17:58:f0:e0:3d:19:2c:a5:ff:52:26:4a:78:3e:94:
         9b:b2:a2:ae:75:e7:64:42:64:1e:db:58:c1:ce:7f:bb:bf:d9:
         c8:74:9b:00:28:85:ea:3d:a2:bc:01:78:d3:77:48:f7:5c:21:
         e4:04:15:96:f7:26:b1:cf:6d:97:aa:f4:3f:6d:02:75:0e:70:
         f9:64:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:58 2026 by rpki-client