This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
File:                     xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json)
Hash identifier:          DgNL+rTgGeqIxzjx348ZymKe2uCZQ8aJbjwaxy8PM00=
Subject key identifier:   77:C9:3D:1F:FE:D7:9E:C5:ED:73:A9:96:A3:7D:03:73:4F:27:D0:AF
Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C
Certificate issuer:       /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
Certificate serial:       07A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
Manifest number:          079C
Signing time:             Sat 24 Jan 2026 20:52:04 +0000
Manifest this update:     Sat 24 Jan 2026 20:52:04 +0000
Manifest next update:     Sat 31 Jan 2026 20:52:04 +0000
Files and hashes:         1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: i8qCj4h9HqkwizaY3rRBs8syxfm7zgE6jvGv7UoBmJ0=)
                          2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: Xmj6Hu3XamtN1TfoLFF4zTOGMT8EY6KW6APUipxbG/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl
                          rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
        Validity
            Not Before: Jan 24 20:52:04 2026 GMT
            Not After : Jan 31 20:52:04 2026 GMT
        Subject: CN=697530f4-1594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:54:71:96:c1:1c:4f:9b:f5:02:91:2c:a9:
                    16:46:85:37:75:b1:e1:de:1b:5f:81:00:9d:d6:37:
                    91:e8:70:f2:c2:7e:a0:dd:e3:6b:93:99:c6:ad:ad:
                    bd:95:f6:07:b7:fe:e1:2f:8f:2b:11:a0:79:ee:3b:
                    fc:3a:97:b2:df:f8:d7:1f:6d:06:e9:47:55:48:b5:
                    6a:a2:10:92:db:fe:a7:b5:3a:e6:59:f5:20:cb:b5:
                    49:31:3c:b6:6f:6a:ab:f1:c0:21:d6:25:f3:61:86:
                    54:96:a0:0c:23:1a:83:27:56:16:cf:c4:36:67:95:
                    58:d7:6f:48:b6:d4:23:1a:68:1d:5e:0c:f0:2a:43:
                    a9:ed:be:9c:b9:c5:e2:8e:b5:f4:57:8c:24:52:50:
                    57:60:12:bd:4c:31:54:a0:8a:1c:d0:3e:30:ac:fa:
                    10:fa:99:3f:2f:09:69:e2:33:dc:f4:c0:e9:b8:a4:
                    78:88:8b:7d:c8:c1:d2:95:15:9b:18:97:ba:4b:9e:
                    b8:0f:40:ab:17:cf:4e:78:e1:10:fc:d4:24:4e:5a:
                    ef:fe:41:d2:e5:44:c6:c9:44:05:f0:66:7b:26:a7:
                    a8:33:f5:13:ad:7a:89:ec:c5:ad:37:1d:17:c8:58:
                    00:92:58:7c:6f:a2:52:0c:0c:d7:a7:6a:0f:39:38:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C9:3D:1F:FE:D7:9E:C5:ED:73:A9:96:A3:7D:03:73:4F:27:D0:AF
            X509v3 Authority Key Identifier:
                keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:25:0c:b7:a2:5c:74:39:68:e0:e5:74:e7:bb:2e:69:e6:2e:
         1c:0d:14:56:c7:0f:ab:e6:61:b4:ad:86:f9:e5:e5:7d:87:c8:
         7b:9e:79:0a:6a:9b:88:97:80:56:4c:33:a4:bc:dc:c5:48:eb:
         3c:a5:db:3f:e0:91:7c:7a:3a:26:13:56:41:3d:81:96:b4:4b:
         42:8d:c2:a5:6f:66:f7:bb:b6:7a:02:33:9d:7d:49:59:53:e1:
         11:d3:71:86:18:cc:9e:f1:6e:fe:b4:6a:f8:a4:e4:36:46:5b:
         a3:a2:96:ec:4a:47:d6:32:8f:15:ca:e9:5e:15:6e:d5:d4:2c:
         5b:cb:f1:b6:bc:fd:e2:36:9a:1c:5e:81:af:20:e4:45:54:e6:
         1f:00:71:5c:75:36:c0:80:2d:80:c4:21:d9:76:e1:d9:54:fb:
         75:78:66:b1:2f:c8:aa:bb:79:4a:ea:ef:3c:13:52:2a:06:19:
         98:38:f1:f9:cb:07:85:5c:50:76:79:e3:1b:16:79:fb:8c:30:
         27:93:32:d9:59:83:c3:b4:3d:b5:17:b6:bc:cb:ae:29:4c:32:
         c4:fd:a3:f0:bf:6e:a1:0d:f1:52:4b:8f:13:54:72:cb:4f:4e:
         61:45:4f:a3:d4:24:8d:fd:0b:27:20:b4:8c:73:f5:ea:e6:64:
         48:6d:42:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx
QTQ4NjE3M0MwHhcNMjYwMTI0MjA1MjA0WhcNMjYwMTMxMjA1MjA0WjAYMRYwFAYD
VQQDDA02OTc1MzBmNC0xNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiHtUcZbBHE+b9QKRLKkWRoU3dbHh3htfgQCd1jeR6HDywn6g3eNrk5nGra29
lfYHt/7hL48rEaB57jv8Opey3/jXH20G6UdVSLVqohCS2/6ntTrmWfUgy7VJMTy2
b2qr8cAh1iXzYYZUlqAMIxqDJ1YWz8Q2Z5VY129IttQjGmgdXgzwKkOp7b6cucXi
jrX0V4wkUlBXYBK9TDFUoIoc0D4wrPoQ+pk/Lwlp4jPc9MDpuKR4iIt9yMHSlRWb
GJe6S564D0CrF89OeOEQ/NQkTlrv/kHS5UTGyUQF8GZ7JqeoM/UTrXqJ7MWtNx0X
yFgAklh8b6JSDAzXp2oPOTiw2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfJPR/+
157F7XOplqN9A3NPJ9CvMB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB
Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG
encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEFERi9CODVGMEU4QzNBQ0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVa
cnBhN2Rob3BPN1VhU0dGencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJJQy3olx0OWjg5XTnuy5p5i4cDRRWxw+r5mG0rYb55eV9h8h7nnkK
apuIl4BWTDOkvNzFSOs8pds/4JF8ejomE1ZBPYGWtEtCjcKlb2b3u7Z6AjOdfUlZ
U+ER03GGGMye8W7+tGr4pOQ2RlujopbsSkfWMo8VyuleFW7V1Cxby/G2vP3iNpoc
XoGvIORFVOYfAHFcdTbAgC2AxCHZduHZVPt1eGaxL8iqu3lK6u88E1IqBhmYOPH5
yweFXFB2eeMbFnn7jDAnkzLZWYPDtD21F7a8y64pTDLE/aPwv26hDfFSS48TVHLL
T05hRU+j1CSN/QsnILSMc/Xq5mRIbUJe
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:27 2026 by rpki-client