This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
File:                     XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json)
Hash identifier:          +3yl84xPJff+HsjdwhoWXno01DtlXjMzqSR8e2pl+vU=
Subject key identifier:   7A:58:A4:EA:28:FD:A2:29:86:F3:F6:B1:9B:0D:CD:49:7B:EE:3F:E8
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Certificate issuer:       /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
Manifest number:          8B
Signing time:             Sat 24 Jan 2026 17:19:02 +0000
Manifest this update:     Sat 24 Jan 2026 17:19:01 +0000
Manifest next update:     Sat 31 Jan 2026 17:19:01 +0000
Files and hashes:         1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: CBvDX1AdjiMljKO3hpeUXCttwgO4E5s5nSrWK6CEuxg=)
                          2: 87087F00267E11F09183092AC4F9AE02.roa (hash: vPD3MBlV+VYxtTk5npGCIsRmwvlSAFp0uTh8dXUbHV8=)
                          3: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
        Validity
            Not Before: Jan 24 17:19:01 2026 GMT
            Not After : Jan 31 17:19:01 2026 GMT
        Subject: CN=6974ff05-6499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:80:cf:19:07:b9:db:71:ae:92:61:14:7b:82:
                    2b:3c:c5:65:0f:99:c1:d0:d8:71:e7:02:e2:49:21:
                    b0:f4:f0:6b:4c:42:f6:03:61:61:fe:42:4a:91:34:
                    d9:2f:db:d8:90:37:b5:29:eb:3e:cd:fa:e3:50:88:
                    4a:02:ed:fe:28:32:39:aa:e9:d1:14:f7:f6:b2:e8:
                    91:b5:0d:b9:0b:98:04:61:91:d3:e4:b2:5a:92:10:
                    85:f7:6d:17:dc:da:75:ea:8b:68:45:ae:bd:8b:41:
                    db:59:58:6e:4d:39:e7:31:8f:58:e9:d8:9f:ec:d5:
                    4b:b0:52:87:9c:89:4b:da:f6:f3:a8:74:98:35:d8:
                    cf:6b:ce:05:a3:09:89:3d:43:94:71:81:d0:ef:4a:
                    b3:82:88:89:aa:88:67:ce:19:35:cb:2d:33:36:cf:
                    72:8e:67:b3:10:af:fc:81:0a:0d:96:c9:9c:3f:1f:
                    c9:d5:f1:18:cd:89:71:b8:91:5e:de:56:a0:c9:0c:
                    a3:36:9d:00:0b:49:a2:6c:ff:94:3a:f7:d4:50:81:
                    90:45:8e:9e:17:d1:8f:9e:bd:20:1d:20:99:e7:18:
                    5b:74:be:55:00:9d:30:c0:db:de:e7:47:86:1e:42:
                    98:e5:68:81:9a:11:7a:07:7a:0f:ac:48:25:0b:bf:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:58:A4:EA:28:FD:A2:29:86:F3:F6:B1:9B:0D:CD:49:7B:EE:3F:E8
            X509v3 Authority Key Identifier:
                keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:73:aa:9c:96:6b:6f:cb:75:d6:78:8a:fb:23:de:23:a2:8b:
         af:63:9f:83:f4:ee:8b:15:b0:38:e9:55:3b:3a:17:e9:cb:ae:
         a4:c0:45:cd:bb:b5:e1:e6:f9:49:cf:8d:d1:6e:c8:e5:d3:19:
         17:33:5b:02:db:17:b3:0a:e1:e7:80:a5:04:8f:b6:8f:07:da:
         7c:b6:3a:92:14:d2:c3:8e:e2:6b:0e:2b:5a:d5:db:c1:07:70:
         88:08:35:31:4a:be:c8:84:a9:e1:a4:e4:5e:9d:71:38:01:c3:
         21:ef:a0:c3:d0:f3:55:2c:74:75:db:f0:05:0d:a3:ef:04:73:
         90:13:45:12:0e:f2:dc:fa:15:bb:4a:95:a4:5b:8a:47:d1:b1:
         7a:07:2e:9a:4f:42:39:34:2a:dc:56:a1:05:b4:b5:0f:21:aa:
         0f:b7:43:45:20:9b:55:9a:1b:8f:bb:8d:e9:4d:b1:1e:0c:46:
         16:b6:1c:81:9c:6a:89:4f:2f:8d:87:a9:50:3d:a7:36:b0:f8:
         83:11:91:0f:8b:f3:f2:f5:03:22:2b:69:49:dc:7e:46:3d:91:
         0f:77:2e:83:a9:15:e9:d3:3b:b0:4c:a3:a3:fc:b6:36:1f:8c:
         d4:7d:e2:6d:98:f8:87:b7:4a:04:3c:91:d3:d2:4c:45:6d:2d:
         1d:1c:80:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKDVEQjc1QjJERjk0RDA0NDc0QTZFNUUyRDRCNzhDQzA4
NEJGQzJBNkMwHhcNMjYwMTI0MTcxOTAxWhcNMjYwMTMxMTcxOTAxWjAYMRYwFAYD
VQQDDA02OTc0ZmYwNS02NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA44DPGQe523GukmEUe4IrPMVlD5nB0Nhx5wLiSSGw9PBrTEL2A2Fh/kJKkTTZ
L9vYkDe1Kes+zfrjUIhKAu3+KDI5qunRFPf2suiRtQ25C5gEYZHT5LJakhCF920X
3Np16otoRa69i0HbWVhuTTnnMY9Y6dif7NVLsFKHnIlL2vbzqHSYNdjPa84FowmJ
PUOUcYHQ70qzgoiJqohnzhk1yy0zNs9yjmezEK/8gQoNlsmcPx/J1fEYzYlxuJFe
3lagyQyjNp0AC0mibP+UOvfUUIGQRY6eF9GPnr0gHSCZ5xhbdL5VAJ0wwNve50eG
HkKY5WiBmhF6B3oPrEglC7/81wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpYpOoo
/aIphvP2sZsNzUl77j/oMB8GA1UdIwQYMBaAFF23Wy35TQRHSm5eLUt4zAhL/Cps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS8wOTVGNkM4QzI2
N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJFZEtibDR0UzNqTUNFdjhL
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEttdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Njk4RS8wOTVGNkM4QzI2N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJF
ZEtibDR0UzNqTUNFdjhLbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9c6qclmtvy3XWeIr7I94joouvY5+D9O6LFbA46VU7Ohfpy66kwEXN
u7Xh5vlJz43Rbsjl0xkXM1sC2xezCuHngKUEj7aPB9p8tjqSFNLDjuJrDita1dvB
B3CICDUxSr7IhKnhpORenXE4AcMh76DD0PNVLHR12/AFDaPvBHOQE0USDvLc+hW7
SpWkW4pH0bF6By6aT0I5NCrcVqEFtLUPIaoPt0NFIJtVmhuPu43pTbEeDEYWthyB
nGqJTy+Nh6lQPac2sPiDEZEPi/Py9QMiK2lJ3H5GPZEPdy6DqRXp0zuwTKOj/LY2
H4zUfeJtmPiHt0oEPJHT0kxFbS0dHICV
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:51:52 2026 by rpki-client