This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File:                     FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier:          fLAy3+MoP7aV6JJALk1YydiLXlSojCGzOaXZjeMkfsg=
Subject key identifier:   14:EC:22:5B:8F:31:22:57:BB:D6:73:51:08:F1:8B:6A:85:8C:E1:0B
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0B4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number:          0B33
Signing time:             Sat 24 Jan 2026 18:48:01 +0000
Manifest this update:     Sat 24 Jan 2026 18:48:00 +0000
Manifest next update:     Sat 31 Jan 2026 18:48:00 +0000
Files and hashes:         1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: 1d2+Fwc9ElKSmepezKD12n0Rei6CM3Q0g0eRGgNWByA=)
                          2: 13321D24572211EA88CE445FC4F9AE02.roa (hash: O5ljMaLXjT5F5QYrN31gp31zcfvR+zM4AIkQWAKZEY4=)
                          3: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: /6Err68K4WtTvTK2vN0EmkYV4fAmF1HeKbI8wzMjgSU=)
                          4: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: dKwlV0sWG4z1v1VE3IcZIKnEPq5EIzoE6Vqo7I/hzas=)
                          5: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: UOh7++5vEfWh4Ro/LeqzWIUlR0tMNgzC3QTRX96GET8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2891 (0xb4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Jan 24 18:48:00 2026 GMT
            Not After : Jan 31 18:48:00 2026 GMT
        Subject: CN=697513e1-7f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:83:f0:bd:0d:c2:e1:56:93:db:5d:1e:df:
                    d9:5a:57:cd:1a:c3:9c:3d:96:74:e3:aa:74:c8:44:
                    2d:83:31:fe:60:8b:56:80:36:fe:c2:4c:eb:84:18:
                    3d:7c:98:2d:da:79:23:f1:b6:e2:f8:d3:19:9c:6f:
                    0e:70:e1:5c:f1:02:79:a2:e2:da:06:71:0f:80:e0:
                    17:3c:d3:70:98:e3:6b:bb:8b:63:06:49:11:d9:8e:
                    8d:d7:3d:b8:09:15:d3:c3:56:e5:e0:f3:08:be:24:
                    7e:4c:fa:3d:96:f3:af:aa:48:72:38:f4:f6:42:9d:
                    c3:61:3f:76:42:4e:a7:e7:0a:84:09:14:d9:05:1b:
                    36:ae:18:aa:f3:c8:b1:af:2b:7c:c5:cb:8c:8d:b6:
                    7f:49:33:60:93:f8:1a:e5:43:70:5b:b8:d2:5a:5d:
                    d1:b0:c9:d8:4d:fb:af:67:7e:91:70:de:c0:15:ac:
                    40:ca:d3:d4:b8:8b:24:52:b7:cb:ca:63:2a:62:4f:
                    63:1e:7f:1c:8d:46:cb:a3:2f:41:39:80:88:55:cf:
                    21:8f:08:6d:41:c1:6c:d7:75:ce:a0:e3:c5:ff:d3:
                    fc:e2:7d:2d:16:70:3e:f5:d3:9d:97:f5:e9:df:74:
                    7a:24:3a:f9:fe:b7:a3:0a:39:ae:e2:b4:dc:f9:82:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:22:5B:8F:31:22:57:BB:D6:73:51:08:F1:8B:6A:85:8C:E1:0B
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:00:ae:a7:15:dc:7c:29:05:9c:a5:ff:de:ec:a8:93:a9:04:
         cb:33:d3:7b:5b:01:c5:a2:49:8c:b9:03:30:49:76:c6:bc:d4:
         59:a4:61:2a:d6:ea:4e:26:01:51:5e:13:77:7c:97:83:53:cc:
         bc:53:00:93:e2:94:7a:04:1a:38:da:93:74:98:c4:42:6c:d0:
         5c:50:6e:ae:86:c4:91:f4:e3:55:2d:c2:13:f1:2b:65:dc:af:
         98:1c:20:55:89:18:5f:e2:1f:88:57:d4:2e:11:5f:54:90:8a:
         06:c6:a5:c1:c5:12:98:75:f6:56:39:a7:d0:6d:a4:3c:76:a5:
         5a:08:93:35:3e:c1:5c:96:87:b5:4d:48:24:f5:d2:0e:44:b7:
         d7:b8:9c:93:f6:3d:88:96:80:58:c0:9c:30:37:b6:b4:bb:ae:
         ac:79:aa:ed:53:6d:fe:9b:d0:e3:11:7e:28:59:b0:f5:24:55:
         28:78:f6:c8:0b:68:5b:bd:af:f1:37:8e:ea:2f:7d:94:26:b4:
         3e:3e:eb:8b:77:f9:b2:74:fd:82:32:e6:ad:30:8c:20:e0:95:
         67:7f:48:14:18:b6:17:4f:1a:93:4c:03:1b:ff:88:15:52:b8:
         81:71:58:90:3f:65:8d:93:c6:b4:60:87:4f:f9:93:fe:a2:db:
         f0:72:4c:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF
OEY2MjZDREIwHhcNMjYwMTI0MTg0ODAwWhcNMjYwMTMxMTg0ODAwWjAYMRYwFAYD
VQQDDA02OTc1MTNlMS03ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IKD8L0NwuFWk9tdHt/ZWlfNGsOcPZZ046p0yEQtgzH+YItWgDb+wkzrhBg9
fJgt2nkj8bbi+NMZnG8OcOFc8QJ5ouLaBnEPgOAXPNNwmONru4tjBkkR2Y6N1z24
CRXTw1bl4PMIviR+TPo9lvOvqkhyOPT2Qp3DYT92Qk6n5wqECRTZBRs2rhiq88ix
ryt8xcuMjbZ/STNgk/ga5UNwW7jSWl3RsMnYTfuvZ36RcN7AFaxAytPUuIskUrfL
ymMqYk9jHn8cjUbLoy9BOYCIVc8hjwhtQcFs13XOoOPF/9P84n0tFnA+9dOdl/Xp
33R6JDr5/rejCjmu4rTc+YIOgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTsIluP
MSJXu9ZzUQjxi2qFjOELMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz
M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4
NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYAK6nFdx8KQWcpf/e7KiTqQTLM9N7WwHFokmMuQMwSXbGvNRZpGEq
1upOJgFRXhN3fJeDU8y8UwCT4pR6BBo42pN0mMRCbNBcUG6uhsSR9ONVLcIT8Stl
3K+YHCBViRhf4h+IV9QuEV9UkIoGxqXBxRKYdfZWOafQbaQ8dqVaCJM1PsFcloe1
TUgk9dIORLfXuJyT9j2IloBYwJwwN7a0u66seartU23+m9DjEX4oWbD1JFUoePbI
C2hbva/xN47qL32UJrQ+PuuLd/mydP2CMuatMIwg4JVnf0gUGLYXTxqTTAMb/4gV
UriBcViQP2WNk8a0YIdP+ZP+otvwckxA
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:42 2026 by rpki-client