This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File:                     -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier:          oywcdAm2OIlt/e+exR312rmGxDI8aZxrxgSVFSjHXto=
Subject key identifier:   37:EC:35:5A:3E:FC:5D:65:6D:DA:68:71:A7:36:05:22:D8:82:A4:9B
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer:       /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number:          01F2
Signing time:             Sun 25 Jan 2026 01:50:08 +0000
Manifest this update:     Sun 25 Jan 2026 01:50:08 +0000
Manifest next update:     Sun 01 Feb 2026 01:50:08 +0000
Files and hashes:         1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: WKXJkSwTYpueplsbhcC2xuVnAXZWjaXMaI3HomjoSOA=)
                          2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
                          rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
        Validity
            Not Before: Jan 25 01:50:08 2026 GMT
            Not After : Feb  1 01:50:08 2026 GMT
        Subject: CN=697576d0-c821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:0c:b4:23:73:3a:94:36:4d:1e:52:78:af:
                    6b:50:7e:3e:2c:18:53:fd:60:26:b0:11:dd:99:0b:
                    cd:84:16:8c:81:5a:f6:26:0b:c8:e6:0a:10:94:98:
                    03:e7:92:c2:6d:bc:5f:97:77:a7:39:2c:be:6d:64:
                    4d:f0:96:7f:ee:6b:ef:2c:4a:ce:89:1c:2c:b7:1d:
                    8d:4b:15:69:22:f8:35:79:41:87:c6:48:72:d3:a9:
                    d2:e1:4d:ef:c8:c5:27:22:d2:e5:8a:01:43:8a:c3:
                    ab:74:3c:95:bc:72:8e:c0:ef:81:4c:1f:41:af:8f:
                    c5:cf:f5:09:7e:38:9d:6f:d1:07:d5:19:50:7c:1d:
                    46:69:13:0f:d2:5b:b1:37:05:5f:3f:de:90:77:e5:
                    5c:06:7e:9d:03:81:d9:51:bc:25:6c:8d:d6:8f:ff:
                    34:a1:19:2a:ee:1a:06:62:9c:9e:b4:02:01:07:2f:
                    52:1c:b4:89:a9:ba:4e:76:c4:bd:9a:1c:53:7d:78:
                    18:d9:36:74:bb:58:1f:6d:73:f3:2a:fa:a6:c7:33:
                    d1:fd:aa:4e:eb:0e:ae:29:15:b8:5b:d0:43:04:3c:
                    9e:a2:cb:2f:75:2c:43:69:18:11:67:70:b6:5e:01:
                    2b:f5:2e:3e:90:03:66:e4:1e:f8:c6:d4:e9:49:44:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EC:35:5A:3E:FC:5D:65:6D:DA:68:71:A7:36:05:22:D8:82:A4:9B
            X509v3 Authority Key Identifier:
                keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:25:1c:bb:d5:ed:17:8e:6d:5d:29:c8:cf:a7:a0:5a:fa:5c:
         3a:b7:c5:19:b9:75:f0:87:d5:04:b7:27:fb:ef:42:ff:5b:b6:
         5b:64:d6:91:e3:84:2f:9b:2e:d8:22:9d:d1:fd:8c:2d:f2:69:
         e1:ac:1c:f5:25:73:12:d5:da:7f:15:ee:7d:3c:90:70:47:ab:
         08:30:0a:17:72:4b:e6:fe:68:8b:d7:97:db:4a:e7:1d:0b:e0:
         72:00:82:a0:cc:54:d2:ae:41:96:9f:e7:ff:92:57:8b:4d:fd:
         d8:69:94:10:a2:b5:93:61:1f:a4:57:12:63:a4:eb:fa:14:01:
         77:89:53:81:d9:8b:c4:7d:8a:a2:2a:bc:ea:1e:d3:85:0c:ee:
         7e:dc:0b:39:f6:df:0a:62:b7:ae:5b:14:6e:59:7d:ba:c0:62:
         6e:6c:7e:d6:43:f2:ca:34:a1:48:16:e3:a0:77:aa:00:57:b4:
         10:0f:70:69:36:d1:2e:f8:58:43:88:4c:89:5c:56:23:4c:64:
         5e:da:ae:26:11:09:76:b5:f1:ae:17:2b:74:4b:58:0a:a8:de:
         50:02:dc:66:14:ba:bc:d3:dc:b9:df:e3:37:97:db:81:52:29:
         af:88:e5:a2:26:f2:6e:f3:af:65:5f:fd:36:8b:40:c2:c1:37:
         af:da:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:48 2026 by rpki-client