This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
File:                     xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json)
Hash identifier:          mOJ+wQDKXXd9azowGysjhg2RVVOG10bJ0EDdMQeUdiU=
Subject key identifier:   D6:2C:6C:F4:7A:E5:6D:F4:5A:FD:BE:CF:1D:B8:F3:42:FE:52:16:3E
Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9
Certificate issuer:       /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9
Certificate serial:       06F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
Manifest number:          06EC
Signing time:             Sat 24 Jan 2026 21:18:19 +0000
Manifest this update:     Sat 24 Jan 2026 21:18:18 +0000
Manifest next update:     Sat 31 Jan 2026 21:18:18 +0000
Files and hashes:         1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: MzLv6V9xYCozBTmMI4xRn/FmwyrKTSxR0iWAm5ukyaI=)
                          2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: MEPubklC2LaQpM30pb4WqIRAyRUkiXsf1K1+S5H/Spc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl
                          rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9
        Validity
            Not Before: Jan 24 21:18:18 2026 GMT
            Not After : Jan 31 21:18:18 2026 GMT
        Subject: CN=6975371b-b565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:e2:7c:d2:6b:b2:f6:9a:eb:cc:29:f9:d4:
                    cd:7f:f4:fb:40:ba:43:d9:a7:b9:82:14:a5:dc:84:
                    fa:de:26:33:ec:05:dd:20:4e:e0:1d:04:23:4d:0a:
                    9a:0a:b5:23:20:56:a2:4a:a0:6c:17:c4:22:cd:ad:
                    84:5a:f8:c0:3b:1f:4c:b4:b7:8d:7b:a5:63:c5:74:
                    e5:50:1d:cc:86:97:75:22:45:69:1b:54:9b:ec:f3:
                    5d:64:8c:3b:f6:a4:3f:7a:ee:3f:7a:02:64:4a:27:
                    81:7f:e7:af:80:c4:f0:0d:1d:a2:28:48:9d:66:7f:
                    d6:e0:c3:9a:55:9c:3e:c8:ce:a5:06:10:49:cc:55:
                    39:56:0c:27:8d:b2:52:00:e6:92:dc:13:0f:30:7b:
                    99:a2:29:9a:ba:db:ca:26:84:40:cb:42:68:8b:de:
                    29:ef:32:e6:f3:74:7a:72:e3:3a:38:30:1a:52:de:
                    8a:38:78:40:67:f1:08:17:d7:75:ca:d9:88:48:53:
                    fe:5c:b6:df:d0:ec:fe:30:3d:40:01:49:cc:d4:9f:
                    21:3c:84:30:b0:ae:4c:75:d0:00:2d:64:c7:e8:40:
                    3c:44:06:b5:77:78:ad:c5:93:fc:d5:ee:a9:93:17:
                    19:96:e7:35:25:a6:ac:d7:5d:84:18:ac:27:2f:66:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:6C:F4:7A:E5:6D:F4:5A:FD:BE:CF:1D:B8:F3:42:FE:52:16:3E
            X509v3 Authority Key Identifier:
                keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:79:8f:04:cf:c7:68:b7:1f:8b:aa:9e:a0:be:9c:5d:a0:8b:
         06:26:0a:a6:64:b5:15:78:0c:cc:25:3f:b9:dc:94:7e:7d:58:
         4e:2e:85:dd:4e:d7:10:44:b8:2e:24:6e:3e:a1:a1:6f:a6:4a:
         1c:8c:8c:e4:44:6a:52:c4:f4:e0:33:f3:29:cd:18:3b:31:ca:
         45:63:9a:92:bd:a0:b4:6c:4a:5d:d8:93:b7:86:a8:f2:07:43:
         14:07:5e:ba:9d:80:d5:af:90:2f:d5:79:fe:5d:b5:d3:18:64:
         dc:8d:e6:60:59:86:15:6e:af:1a:b0:69:56:00:b8:f0:36:46:
         1e:db:3c:77:33:01:62:d6:3c:95:9e:cf:d7:36:35:c9:cd:6a:
         47:c1:85:29:73:ca:44:e5:31:ab:7f:08:52:3f:0a:82:67:63:
         55:7c:33:f4:4c:f9:64:d6:ae:cc:58:cd:50:a7:92:b9:89:95:
         a4:da:be:3a:24:52:cc:c2:9f:1b:06:41:4c:89:b0:14:d8:cf:
         84:a5:31:9e:66:8e:56:60:3d:a8:3f:61:bb:f4:58:0f:d9:85:
         2b:e1:7f:f2:2a:2e:4e:a2:3a:a1:a8:ef:97:c9:ec:5a:0e:e0:
         67:2b:91:e0:10:9a:69:36:bd:78:42:72:e3:59:8f:a2:5b:c5:
         22:f0:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:27 2026 by rpki-client