This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
File:                     xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json)
Hash identifier:          BXFbdI3aFSBx9L9a+UW5h/ouk6Ja8QixknVXjpe1O+U=
Subject key identifier:   7E:4F:2C:4A:7B:3D:2A:C5:33:D0:1D:F6:88:5C:61:66:CB:66:F7:A0
Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
Certificate issuer:       /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
Manifest number:          83
Signing time:             Sun 25 Jan 2026 05:46:16 +0000
Manifest this update:     Sun 25 Jan 2026 05:46:16 +0000
Manifest next update:     Sun 01 Feb 2026 05:46:16 +0000
Files and hashes:         1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: qMV2wkgHxE2OuDgftnhsdc68Lc41fNuEv1kU3+Hc6NQ=)
                          2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
                          rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
        Validity
            Not Before: Jan 25 05:46:16 2026 GMT
            Not After : Feb  1 05:46:16 2026 GMT
        Subject: CN=6975ae28-c003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:c8:62:d9:b7:41:86:26:c4:7d:5a:51:e5:
                    d6:d1:db:de:0d:dd:34:e2:c7:f9:30:c3:31:50:e7:
                    dd:1c:ad:68:80:2e:a3:01:ac:03:8d:e7:7d:fe:a4:
                    9a:a3:ab:ae:03:4a:27:1f:a3:0f:a9:e6:40:07:f4:
                    4f:6e:c9:f6:2d:bc:ed:e4:05:5e:8b:d4:dc:31:bb:
                    6f:81:a3:fd:4d:84:c3:00:f9:39:5e:a9:45:0b:0f:
                    0c:01:ab:d9:30:04:25:c4:7a:4d:f3:62:cc:24:96:
                    1f:14:c2:9f:c6:a1:a3:d8:e9:d0:58:2c:d5:d3:c1:
                    d3:8e:af:ca:f7:76:24:24:fa:01:19:86:e7:09:a9:
                    ec:1a:34:4c:f5:96:96:93:2c:91:2b:55:7a:56:fd:
                    89:3a:bb:b4:39:70:fe:2b:87:16:9a:80:c1:3a:03:
                    84:cc:c5:9b:13:7a:f1:f4:e8:87:77:ef:d1:b2:72:
                    b2:0d:d2:95:3e:3b:78:a2:0d:ff:06:00:bf:bf:bc:
                    f4:2a:10:4f:11:98:ef:71:62:70:4c:63:97:ca:39:
                    e2:3c:d2:64:f9:67:49:13:c0:49:ad:e0:61:c7:4a:
                    12:d7:d2:93:eb:a3:ea:8e:87:c0:2f:0d:47:0f:9f:
                    cb:58:28:ba:ab:8a:58:82:6e:06:42:6a:3c:4a:a5:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4F:2C:4A:7B:3D:2A:C5:33:D0:1D:F6:88:5C:61:66:CB:66:F7:A0
            X509v3 Authority Key Identifier:
                keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:a1:36:e5:78:82:fa:99:20:3b:98:91:8e:c4:63:22:ad:9d:
         bd:a1:2a:00:7a:4e:23:98:18:a8:5f:57:2a:66:47:4a:76:88:
         1d:2f:5d:00:ec:bc:43:61:3f:6c:96:33:2d:43:e4:96:5d:8c:
         c3:4b:7c:51:01:a1:81:7c:5a:99:ef:c4:ea:cc:3d:85:0b:34:
         71:d9:9a:4e:69:3e:57:1d:5f:f5:ae:15:1d:34:d5:7f:ed:4d:
         59:e4:18:89:df:3a:76:26:69:a6:2d:10:4f:b8:95:f2:07:c5:
         75:47:7a:8f:38:d7:7f:b0:db:0a:6e:91:85:93:49:8c:6f:14:
         0c:68:27:6f:fd:4f:2b:53:2c:a1:d9:72:4c:a0:de:c6:ab:3d:
         7d:5e:17:b6:0b:a7:cc:34:d8:00:ce:25:4a:ec:d5:01:5c:cb:
         d1:ee:68:70:3f:8b:a4:35:5d:f5:f0:df:b1:dc:39:f2:64:4e:
         ed:47:aa:09:22:ab:e4:a8:ce:6a:72:7b:71:75:a3:77:f7:52:
         44:4e:c8:f8:3f:ea:a1:f6:03:c4:d7:ea:a2:ad:2e:28:43:02:
         d2:62:ea:cc:3d:f4:89:2d:18:a3:c4:93:93:c6:d0:86:c9:a2:
         33:67:0b:8e:b7:15:d4:d0:2f:6b:c1:f8:89:59:9f:e7:05:fe:
         06:eb:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:45:21 2026 by rpki-client