This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File:                     XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier:          MP242EYp7YfPcIdqxGgc5hlcV0kN7+aC3q0updg/EZU=
Subject key identifier:   1A:49:6A:93:A7:7D:43:DF:22:6B:21:FF:7A:EC:D5:F9:23:95:8E:59
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number:          0126
Signing time:             Sun 25 Jan 2026 03:32:41 +0000
Manifest this update:     Sun 25 Jan 2026 03:32:40 +0000
Manifest next update:     Sun 01 Feb 2026 03:32:40 +0000
Files and hashes:         1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: a8MxvcShylHNes0yiCVT6+7LxGlH+uJDp8g0Kmut1fc=)
                          2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: m0j5NYjPTDIJfmWKHuHfMjMZ9FBAfzwy/hGv/R4OYCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Jan 25 03:32:40 2026 GMT
            Not After : Feb  1 03:32:40 2026 GMT
        Subject: CN=69758ed9-65cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:c8:dd:e4:d0:34:72:16:2c:a2:01:e0:d9:
                    bc:f6:74:09:85:63:47:d8:c6:33:fd:d1:c9:c4:57:
                    08:b6:3c:e1:ca:0a:69:ed:39:c6:c7:b3:0f:7d:75:
                    3c:92:b9:b0:55:72:9e:07:ab:fe:30:de:a8:4a:33:
                    ac:cb:00:d3:6e:79:84:8f:c4:16:09:a5:3e:6e:b7:
                    ce:f6:bb:62:93:33:49:55:14:7f:d1:63:2e:96:80:
                    16:d9:a7:e5:ef:61:e3:6c:0e:f4:a1:fa:66:26:dd:
                    97:6b:67:8b:34:36:54:f1:4a:b2:60:95:bb:f5:b4:
                    27:32:65:88:15:8d:7d:58:68:1e:cc:8d:1a:33:66:
                    0a:44:c3:a5:f8:19:f2:da:93:47:a8:93:3a:08:40:
                    f2:b5:4f:e9:d6:8b:96:3a:1d:f3:44:23:1e:cb:30:
                    fc:76:57:e4:71:18:81:b5:56:7b:b4:a1:a6:1d:0e:
                    bf:a8:80:5a:c5:2c:c1:9f:e5:cd:71:f6:d6:26:8a:
                    b3:46:ee:eb:2b:3c:d7:5b:84:08:8e:0a:af:0d:32:
                    7f:7c:11:12:ec:4d:7d:b3:1a:38:9f:fd:89:17:19:
                    1e:1a:3a:61:ba:b2:8b:fa:a7:ae:92:e5:d1:e8:7a:
                    56:67:cd:e0:9c:88:50:2b:33:f8:e7:a4:fa:1b:4f:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:49:6A:93:A7:7D:43:DF:22:6B:21:FF:7A:EC:D5:F9:23:95:8E:59
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:24:63:97:9c:f0:ae:fd:e1:ce:8b:01:e0:c6:91:e7:98:0d:
         f6:94:5b:8c:60:3d:5c:a5:88:62:c6:4a:26:6e:fa:58:b6:00:
         bb:34:e6:9f:90:39:11:31:f0:d2:ba:6d:f1:91:ee:93:c2:14:
         de:15:94:7e:eb:0e:75:7c:0d:fb:a5:b6:94:5a:88:9b:a2:59:
         42:8c:19:8f:9a:05:ce:4e:bf:91:23:85:7e:dc:63:04:60:5f:
         82:b2:e3:c3:ea:2c:3b:36:b1:1f:b0:38:8d:ab:13:a3:43:81:
         f1:75:95:37:ce:bd:c2:a0:b4:72:37:60:75:8c:2a:36:93:2d:
         35:97:60:0d:85:5d:e7:c4:a0:ef:74:7f:d8:44:41:28:53:ca:
         96:e5:80:8e:e4:8c:d0:76:c7:33:1e:46:55:57:09:d0:f1:f5:
         71:6a:59:d5:ad:3b:a9:c2:3a:7e:33:d1:18:3e:2c:c5:17:5d:
         54:f1:39:89:3b:76:7c:d7:a5:8b:ec:f8:1e:cf:58:3a:e9:41:
         99:02:d5:07:ef:35:05:07:de:b4:11:41:b0:ea:67:e6:89:47:
         7f:25:dc:b0:1c:c9:00:1a:af:20:ac:37:3c:b5:74:8f:c0:43:
         cb:1d:df:47:09:17:fe:58:73:db:0e:29:da:51:75:c1:20:e9:
         db:f5:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:50 2026 by rpki-client