This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
File:                     XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json)
Hash identifier:          S4HUUu6+swWEKhx6k6RiW/2Xb4ZHNKn9EozKAeYzj/o=
Subject key identifier:   E1:C5:7B:69:EF:6B:B4:42:57:DC:B8:D3:29:D2:B4:1F:CC:32:4E:E7
Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
Certificate issuer:       /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Certificate serial:       0512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
Manifest number:          04F7
Signing time:             Sat 24 Jan 2026 22:57:33 +0000
Manifest this update:     Sat 24 Jan 2026 22:57:33 +0000
Manifest next update:     Sat 31 Jan 2026 22:57:33 +0000
Files and hashes:         1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: Di82rwB4rRyefeO2ilWOkaDKqQoLZpNSE7vBGyZaKZk=)
                          2: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: rDIISPx2Jw6kCtly/sr/saYDXZ1Vwq2i5nDputMMqM0=)
                          3: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: 8xg5MTXXpBnfX0/pQTijWkIRf1MFFgkaGBEoo218ZXc=)
                          4: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: aTXEi1LzXTl0g2LyujQDHdlXFvir0+qlzsPxrUIKoNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
                          rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298 (0x512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
        Validity
            Not Before: Jan 24 22:57:33 2026 GMT
            Not After : Jan 31 22:57:33 2026 GMT
        Subject: CN=69754e5d-6e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:64:67:5f:2d:44:2d:24:bb:10:10:d7:c1:
                    50:3a:2a:a8:98:e6:ad:8d:04:16:59:cf:2d:e1:cb:
                    01:dc:70:27:02:ea:14:f8:1c:b1:86:05:29:4e:9a:
                    a8:4a:50:ec:5d:85:3c:c6:a1:b8:27:25:18:f3:2e:
                    10:3d:19:46:ce:b1:3e:cb:31:d8:37:ed:8f:12:46:
                    8d:50:0d:ef:e0:81:21:6b:12:b7:9f:2e:9b:72:a9:
                    8f:ae:c8:1c:45:4f:a4:d3:cc:6a:2a:9b:2b:ce:19:
                    ab:27:ea:8f:fa:f0:cd:81:34:c2:1e:d4:ce:a0:2c:
                    e5:2b:22:78:f2:d9:da:91:16:4c:a0:9d:c9:b4:04:
                    c8:ce:9f:c9:e0:7c:78:06:0b:c5:d4:04:d1:09:7d:
                    5c:c8:15:41:6e:c8:f7:78:b2:d2:65:71:26:1b:4d:
                    d1:0a:c6:16:53:b2:0f:ec:7d:36:7c:a6:e0:51:fb:
                    26:5a:c0:4d:a1:73:90:44:96:60:22:2d:ac:82:5e:
                    a8:06:a4:9a:8a:14:c0:b4:ea:ea:87:85:63:88:eb:
                    30:b7:1a:7a:37:d0:22:79:f2:ac:da:12:0f:be:29:
                    dd:0b:45:24:68:98:ae:1e:a1:4d:8b:3d:e4:61:0b:
                    ea:23:4b:be:14:03:fb:f4:6d:10:2b:a3:6d:3f:71:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C5:7B:69:EF:6B:B4:42:57:DC:B8:D3:29:D2:B4:1F:CC:32:4E:E7
            X509v3 Authority Key Identifier:
                keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:03:e2:81:f2:d6:47:c8:13:01:51:07:f6:f1:78:80:96:77:
         17:d2:0b:09:a7:78:98:c1:5a:8c:b5:40:08:a8:ad:2e:36:31:
         cb:0d:39:e6:e6:c1:ea:3f:dc:d2:e3:1f:91:7a:f3:c7:da:64:
         4a:76:95:ad:46:d2:ed:94:32:6f:bb:fe:5e:33:aa:2d:f3:00:
         e8:ef:54:ed:e6:91:35:cc:ed:6e:10:a8:00:d6:5f:83:f1:31:
         f5:ed:c3:8e:a2:13:71:e3:c6:14:ed:24:98:48:7c:f2:70:d8:
         c6:85:b3:c8:2c:53:c8:d7:76:41:8b:af:38:37:14:36:e2:53:
         2c:91:16:4d:96:56:55:3e:5f:e7:20:13:3d:82:44:6e:da:57:
         54:a0:d2:d9:94:c2:78:e3:d7:20:e5:7c:21:cf:f3:a8:ed:65:
         1b:1b:3d:54:45:24:a3:10:cb:6a:8f:54:33:94:f9:96:f2:1b:
         6c:d0:42:05:be:5f:0d:80:c4:c7:9b:8b:6e:02:76:d5:05:1e:
         4d:a3:52:e8:89:ae:8f:a5:27:f2:57:c2:4e:78:e9:f6:4e:ff:
         d0:56:2f:07:23:cb:a9:be:26:12:10:63:7b:18:f0:f2:76:99:
         da:c1:a2:39:f1:f2:25:60:3d:0f:bb:78:b7:a9:f6:7a:d0:a0:
         5b:9b:9b:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC
NzQ1NkI3MTMwHhcNMjYwMTI0MjI1NzMzWhcNMjYwMTMxMjI1NzMzWjAYMRYwFAYD
VQQDDA02OTc1NGU1ZC02ZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdlkZ18tRC0kuxAQ18FQOiqomOatjQQWWc8t4csB3HAnAuoU+ByxhgUpTpqo
SlDsXYU8xqG4JyUY8y4QPRlGzrE+yzHYN+2PEkaNUA3v4IEhaxK3ny6bcqmPrsgc
RU+k08xqKpsrzhmrJ+qP+vDNgTTCHtTOoCzlKyJ48tnakRZMoJ3JtATIzp/J4Hx4
BgvF1ATRCX1cyBVBbsj3eLLSZXEmG03RCsYWU7IP7H02fKbgUfsmWsBNoXOQRJZg
Ii2sgl6oBqSaihTAtOrqh4VjiOswtxp6N9AiefKs2hIPvindC0UkaJiuHqFNiz3k
YQvqI0u+FAP79G0QK6NtP3GZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHFe2nv
a7RCV9y40ynStB/MMk7nMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2
QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0
eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0
QWVwVUdMejZOUEczUld0eE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXA+KB8tZHyBMBUQf28XiAlncX0gsJp3iYwVqMtUAIqK0uNjHLDTnm
5sHqP9zS4x+RevPH2mRKdpWtRtLtlDJvu/5eM6ot8wDo71Tt5pE1zO1uEKgA1l+D
8TH17cOOohNx48YU7SSYSHzycNjGhbPILFPI13ZBi684NxQ24lMskRZNllZVPl/n
IBM9gkRu2ldUoNLZlMJ449cg5Xwhz/Oo7WUbGz1URSSjEMtqj1QzlPmW8hts0EIF
vl8NgMTHm4tuAnbVBR5No1Loia6PpSfyV8JOeOn2Tv/QVi8HI8upviYSEGN7GPDy
dpnawaI58fIlYD0Pu3i3qfZ60KBbm5uX
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:24 2026 by rpki-client