This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
File:                     xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json)
Hash identifier:          bf5Ya7Txbc1SwBvVNTix0jH14fDiIQ3ePtkuLsr3V1w=
Subject key identifier:   2A:47:45:53:D2:49:B2:6F:85:05:DC:D7:5F:EC:F5:51:EA:02:DA:85
Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
Certificate issuer:       /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
Manifest number:          81
Signing time:             Sun 25 Jan 2026 05:52:51 +0000
Manifest this update:     Sun 25 Jan 2026 05:52:50 +0000
Manifest next update:     Sun 01 Feb 2026 05:52:50 +0000
Files and hashes:         1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: RGU/mWAuNmfdZZVtdmfV92jwAMAumVnhOE4OEJ9J3oM=)
                          2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: lmR9ugrjbQmDnUx1UBy+nG9XOBElNu6bjT8wakrFaOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl
                          rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
        Validity
            Not Before: Jan 25 05:52:50 2026 GMT
            Not After : Feb  1 05:52:50 2026 GMT
        Subject: CN=6975afb3-8240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:80:48:6b:ea:43:dc:a5:a0:36:62:41:c1:
                    b4:97:9a:2c:47:1a:16:5e:36:6b:db:24:53:1f:43:
                    8f:81:7b:20:63:2d:1b:fe:e6:45:e1:ed:f4:b0:d7:
                    a8:07:ef:27:a8:c8:63:53:01:a2:a7:b0:6e:f1:31:
                    56:4a:e9:8f:68:93:38:18:0a:82:b0:6a:42:7e:c2:
                    88:8d:24:64:7a:5d:4c:94:70:45:b7:e6:fe:82:17:
                    f3:dd:5d:54:71:dd:7b:3c:53:5a:ed:81:05:dc:18:
                    3f:61:94:df:db:f4:b0:74:ef:56:d2:14:ad:4c:0c:
                    f1:25:aa:8a:01:e6:86:ba:67:8a:01:cf:eb:4e:82:
                    3c:30:f8:1e:f3:a6:69:89:ed:81:55:af:e7:6e:ca:
                    83:e5:50:1a:63:48:21:3c:37:eb:d9:dc:8e:b2:d1:
                    8a:f6:ba:4d:7b:1b:eb:14:3f:de:73:86:be:58:9b:
                    a8:eb:c6:f6:f0:c3:f8:f0:4d:5f:eb:ed:c9:97:00:
                    b1:d5:d6:b1:9b:5e:41:38:ba:c3:c3:95:2a:f5:6b:
                    10:48:df:7d:14:a1:e6:af:1e:02:66:c6:78:ab:5d:
                    5e:e5:be:5a:44:dd:41:f9:3b:c9:82:25:88:37:12:
                    8b:71:a9:10:5b:2a:fb:98:cf:32:17:87:7f:5e:e5:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:47:45:53:D2:49:B2:6F:85:05:DC:D7:5F:EC:F5:51:EA:02:DA:85
            X509v3 Authority Key Identifier:
                keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:06:21:a5:a4:e0:9a:bf:f9:d0:b9:a9:d3:8c:3a:66:b2:a4:
         e2:1b:88:7b:89:bf:51:a9:9a:a7:c0:eb:5d:39:4f:cc:f0:b9:
         26:0c:00:69:be:0e:b9:06:88:bd:a2:85:ea:11:7e:5b:6d:64:
         fc:35:94:c0:f2:7b:2f:c9:38:1f:7a:e3:f5:07:7c:30:b4:4e:
         5b:6e:9b:65:b4:42:72:91:b7:c7:30:53:25:4b:29:9c:70:d7:
         00:d6:0c:34:c4:28:1a:0a:43:d1:17:f1:12:b9:b6:f1:e1:92:
         9b:16:78:0c:6b:68:e8:be:f0:39:9f:eb:10:2a:70:c4:5f:9b:
         f5:f6:2b:f5:08:3b:f7:cf:ee:a5:18:0f:7c:67:c9:f4:b4:9d:
         b3:fb:d3:fe:05:53:45:74:c0:ec:67:18:d1:a9:21:41:cd:e2:
         d2:2a:3b:21:e6:b2:46:86:f5:86:45:aa:ce:24:37:81:ae:d7:
         7f:cf:37:94:e7:06:45:70:8f:ce:69:a5:bd:91:eb:3c:4a:9b:
         cb:b7:b1:da:43:fa:90:d4:fb:ee:85:38:b4:17:66:d1:43:43:
         a3:c0:a1:02:ea:f8:51:e1:4b:03:7a:98:54:f7:80:e4:da:0f:
         8b:85:7e:77:4e:d6:81:3a:74:5d:6b:6c:07:4f:3b:01:72:a3:
         6f:57:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:48:51 2026 by rpki-client