This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
File:                     xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json)
Hash identifier:          OP0dgn0y1C/dpGxetiaFzyIYZicmkxtKfLEf76oSgQY=
Subject key identifier:   17:5B:D5:C1:37:D3:D1:50:D5:18:F9:6C:D0:D4:32:93:CE:EF:1F:BC
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Certificate issuer:       /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial:       3507
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
Manifest number:          3501
Signing time:             Sat 24 Jan 2026 15:04:59 +0000
Manifest this update:     Sat 24 Jan 2026 15:04:58 +0000
Manifest next update:     Sat 31 Jan 2026 15:04:58 +0000
Files and hashes:         1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: 0kQ3ATGhpr3B6EgEWQ+mXP8Sbu8fBeFbqM7701LXbWU=)
                          2: 504CB1588D3911F093856C71C4F9AE02.roa (hash: ifH/esp2rozL1ihWQfG0CzUZFPTxcLRuyP+/JZcu8YY=)
                          3: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: 9Y5yYrTvQYYtyak8703IegO2crTaXwhTRyd+8O5jVlI=)
                          4: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: F5+F1knUPdcPoNngYv7iiLdP0OUGWuUJHtNfOlwZNpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13575 (0x3507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
        Validity
            Not Before: Jan 24 15:04:58 2026 GMT
            Not After : Jan 31 15:04:58 2026 GMT
        Subject: CN=6974df9b-416e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:c2:5e:c2:17:43:f9:08:5d:bd:31:db:f9:
                    bf:c4:0e:84:5b:b0:2d:99:90:8a:5e:ae:16:8c:e1:
                    68:8d:c3:be:3b:82:80:4d:90:88:77:fd:d4:cc:ff:
                    f9:e5:1a:33:16:98:ad:00:88:be:46:27:f8:ee:12:
                    89:31:1e:04:d9:ba:89:d5:60:ee:64:56:23:48:80:
                    53:e5:00:1c:e2:fe:58:7d:7f:ef:74:f9:08:cf:59:
                    ae:69:96:42:71:b7:c5:2d:92:76:1e:df:04:5a:d8:
                    c5:d8:35:84:2a:9c:57:85:84:98:de:83:57:a0:ab:
                    54:ca:5f:ad:fb:42:e2:13:7e:fc:16:83:8c:7f:b5:
                    d5:65:89:5a:7d:cc:3e:eb:a1:c5:76:c6:34:88:c3:
                    f4:9f:be:ec:22:52:b4:88:db:2a:c3:ff:97:5d:dc:
                    57:fa:ab:ad:9c:f2:b8:d9:37:5b:5d:64:6e:43:be:
                    f7:09:f0:59:af:1b:df:18:75:f0:a1:4f:9a:3d:5f:
                    9f:da:c5:1f:89:8b:de:7a:6c:a5:ec:f4:53:c0:4a:
                    52:d1:a7:2d:53:c6:65:0b:4b:76:45:4f:b1:f1:48:
                    61:12:f3:42:78:89:58:fa:03:4d:49:70:b2:e5:f8:
                    5c:75:4e:89:db:0a:e2:59:e8:d5:72:fd:38:04:64:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5B:D5:C1:37:D3:D1:50:D5:18:F9:6C:D0:D4:32:93:CE:EF:1F:BC
            X509v3 Authority Key Identifier:
                keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f6:ca:26:5a:c8:1b:80:2e:0f:64:37:24:2a:f8:15:e6:dd:
         a5:0c:fd:ed:08:8c:03:e8:bf:8c:82:9e:f2:65:e7:53:ed:f2:
         63:16:45:20:96:5d:5e:17:f6:5c:e1:e7:b8:13:ba:f0:11:23:
         ad:f3:6d:22:7e:dd:4a:6c:f0:7d:53:39:08:e7:47:a9:ed:e3:
         03:f7:1c:52:d0:50:d1:e0:70:3f:d0:74:5e:2f:62:d3:9a:66:
         ab:f6:1c:76:ca:31:44:62:40:94:73:89:4c:42:d8:dc:f1:f2:
         b2:c8:92:54:60:47:8b:c1:4d:0d:2c:b2:bf:d5:c9:fa:e6:dd:
         7b:3a:ec:bd:3e:fc:dc:e7:ff:6e:a1:81:99:db:fa:aa:1a:a5:
         5f:17:34:ed:c1:51:23:d9:ee:02:ca:87:df:a1:c7:d8:e5:f1:
         f5:7e:aa:fa:75:ad:46:7b:b3:e2:19:e5:d5:6d:45:7b:fb:7b:
         b9:36:46:9b:13:a4:5a:1c:22:c8:ba:af:82:55:9f:53:c6:48:
         ff:8d:5b:a0:44:c7:db:e1:59:5d:b9:6b:d6:c1:8f:30:c5:dc:
         6a:a8:83:25:c9:12:63:70:ef:bd:5d:b7:95:47:bc:fa:54:33:
         7e:e0:30:8f:dc:79:01:94:90:e6:34:86:f6:ea:86:c4:93:75:
         17:c1:54:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2
MjUzMDE3ODMwHhcNMjYwMTI0MTUwNDU4WhcNMjYwMTMxMTUwNDU4WjAYMRYwFAYD
VQQDDA02OTc0ZGY5Yi00MTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmRnCXsIXQ/kIXb0x2/m/xA6EW7AtmZCKXq4WjOFojcO+O4KATZCId/3UzP/5
5RozFpitAIi+Rif47hKJMR4E2bqJ1WDuZFYjSIBT5QAc4v5YfX/vdPkIz1muaZZC
cbfFLZJ2Ht8EWtjF2DWEKpxXhYSY3oNXoKtUyl+t+0LiE378FoOMf7XVZYlafcw+
66HFdsY0iMP0n77sIlK0iNsqw/+XXdxX+qutnPK42TdbXWRuQ773CfBZrxvfGHXw
oU+aPV+f2sUfiYveemyl7PRTwEpS0actU8ZlC0t2RU+x8UhhEvNCeIlY+gNNSXCy
5fhcdU6J2wriWejVcv04BGQFGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdb1cE3
09FQ1Rj5bNDUMpPO7x+8MB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE
QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5
bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC79somWsgbgC4PZDckKvgV5t2lDP3tCIwD6L+Mgp7yZedT7fJjFkUg
ll1eF/Zc4ee4E7rwESOt820ift1KbPB9UzkI50ep7eMD9xxS0FDR4HA/0HReL2LT
mmar9hx2yjFEYkCUc4lMQtjc8fKyyJJUYEeLwU0NLLK/1cn65t17Ouy9Pvzc5/9u
oYGZ2/qqGqVfFzTtwVEj2e4CyoffocfY5fH1fqr6da1Ge7PiGeXVbUV7+3u5Nkab
E6RaHCLIuq+CVZ9Txkj/jVugRMfb4VlduWvWwY8wxdxqqIMlyRJjcO+9XbeVR7z6
VDN+4DCP3HkBlJDmNIb26obEk3UXwVTz
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:31 2026 by rpki-client