This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
File:                     xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json)
Hash identifier:          H3Y90OQcavOcctKD0p5Qb+TauK8tDTGtnOPjWLcmkHw=
Subject key identifier:   D1:0F:2F:E1:2E:D1:28:C0:F0:FB:5D:AA:D4:B3:29:AC:78:F4:B5:B0
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Certificate issuer:       /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial:       030C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
Manifest number:          0300
Signing time:             Sun 25 Jan 2026 00:25:38 +0000
Manifest this update:     Sun 25 Jan 2026 00:25:38 +0000
Manifest next update:     Sun 01 Feb 2026 00:25:38 +0000
Files and hashes:         1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: Saa7oBjpkSZf6LcH2hSdaABjWeTNBj/SF7aJh1+29fw=)
                          2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: le7JEqoYvZIMl+uq0wwq/akdNhi0QtrKh8LNnkVREXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
                          rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
        Validity
            Not Before: Jan 25 00:25:38 2026 GMT
            Not After : Feb  1 00:25:38 2026 GMT
        Subject: CN=69756302-88e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:c5:94:d1:e5:4b:af:69:0a:26:94:77:91:
                    76:89:d8:f1:e0:ca:00:70:e0:f3:50:17:a9:8d:96:
                    f2:9b:49:0d:b0:76:fc:4d:d0:8a:2a:47:91:df:e3:
                    85:7d:93:cd:24:dc:85:b1:89:b4:d2:41:29:e2:aa:
                    7d:bd:17:6c:d5:0f:8f:b0:b0:b9:9d:c9:ec:c1:51:
                    b5:6d:b2:7c:ee:5a:ab:0a:c1:65:5e:c6:d1:70:67:
                    d0:ec:96:a7:d7:dc:d0:9a:2f:26:24:20:25:1c:57:
                    a0:8d:46:fe:58:cb:4e:64:d5:41:de:4a:77:06:5f:
                    33:b1:a9:74:3b:b0:e5:4e:0a:4c:5d:c9:5d:b5:67:
                    08:fe:96:75:7d:00:0d:9a:d2:50:73:9e:bb:18:f8:
                    db:af:59:02:6d:ae:58:18:0b:bc:c9:bb:5f:db:50:
                    68:c4:c9:b2:b3:42:42:4a:b4:df:80:a8:e6:5f:f5:
                    9d:3d:ed:86:01:8b:ad:9b:02:ef:c7:48:2f:e4:f7:
                    fe:fa:6b:94:e8:9f:15:fc:6e:87:d2:70:76:f2:cd:
                    20:f9:f3:46:83:7d:92:ef:c6:13:b6:9b:21:02:21:
                    61:3c:5e:81:87:f3:fe:02:66:76:61:1f:d2:41:ec:
                    0c:c8:d5:40:4e:3a:35:e8:04:15:96:a1:81:05:39:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:2F:E1:2E:D1:28:C0:F0:FB:5D:AA:D4:B3:29:AC:78:F4:B5:B0
            X509v3 Authority Key Identifier:
                keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:08:56:f9:93:77:2e:0d:9f:e4:78:9b:12:61:f2:4a:91:ce:
         90:fc:bc:b3:5f:df:fc:2f:de:ce:4d:d9:bd:35:4a:d5:f1:34:
         11:47:53:8f:07:58:d8:71:9d:5c:35:5e:41:6e:0b:d1:43:fb:
         3f:2b:6d:18:42:28:38:c0:32:c4:1a:8c:b7:43:09:66:f2:25:
         cc:ee:49:ea:53:f8:00:ad:94:3f:20:74:f8:0c:dd:40:f7:1f:
         16:49:f8:0c:9d:8c:5f:4d:49:6d:d9:fe:9b:47:b6:c4:ce:15:
         d5:a6:65:c7:c9:c8:37:5f:34:6e:9e:8f:dd:b2:27:7b:d3:e0:
         29:a9:60:85:14:af:bb:bf:f1:82:ef:29:f4:1b:7a:d5:1c:af:
         23:d8:41:c0:3b:a3:01:fd:a7:2a:af:90:a2:0c:57:31:ef:ad:
         36:2c:07:2a:7e:e6:c9:38:ca:3e:bc:2f:b0:05:6c:d9:cc:d5:
         42:12:26:a6:b5:01:95:e4:0a:58:a1:a7:47:5e:c3:1b:ce:55:
         5c:ce:08:b3:02:42:a2:af:22:26:50:0f:4a:1a:c8:97:19:22:
         d7:07:29:a6:51:fc:54:24:7d:94:f5:5f:8b:87:4f:17:ba:62:
         82:9a:fd:e5:2d:0c:1f:86:c8:74:19:54:27:e1:ad:41:12:c2:
         3d:7a:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:55:05 2026 by rpki-client