This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File:                     4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier:          Zx+mA34v9XL96BR0ckLZLs9khK7pWz5vm+cLnT16k6E=
Subject key identifier:   62:89:9D:0D:3B:9C:DB:FF:EC:48:5C:97:F1:91:ED:83:6F:65:45:BB
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer:       /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number:          07E8
Signing time:             Sat 24 Jan 2026 20:40:24 +0000
Manifest this update:     Sat 24 Jan 2026 20:40:23 +0000
Manifest next update:     Sat 31 Jan 2026 20:40:23 +0000
Files and hashes:         1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: D4AaEvmJJT3tbF3eIabXhE98r/xJmsoEOHAvhlrs4lA=)
                          2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: hFRxkLpFxynkLA+bgk7ZWKTxrIef2z810IITJ3Z3KSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
                          rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
        Validity
            Not Before: Jan 24 20:40:23 2026 GMT
            Not After : Jan 31 20:40:23 2026 GMT
        Subject: CN=69752e38-3da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:de:68:3f:e3:f4:c1:aa:d8:02:ad:e9:11:
                    a6:bb:8c:7e:bd:0d:52:b2:5d:f9:e2:ed:cf:41:ce:
                    68:ce:d1:c7:1d:86:b7:18:0f:19:34:d8:1d:79:86:
                    59:85:a8:eb:ce:a3:bc:17:e2:7d:7f:52:91:b8:1e:
                    00:8c:92:0a:a7:98:54:1f:a9:43:16:4b:0e:18:41:
                    44:2d:c4:9f:f8:b1:fd:de:5b:46:51:ea:8c:76:f3:
                    77:2d:b2:b0:95:84:8e:3c:12:10:20:19:05:80:cc:
                    32:4f:4d:88:08:d5:9d:36:6b:1d:8f:f5:c3:3c:29:
                    0f:a0:dd:57:4d:e2:88:60:d5:1d:26:17:da:85:8b:
                    8e:a0:48:dd:2a:8f:d4:ed:11:c2:a2:f8:76:8a:e2:
                    b5:a7:d4:6e:91:41:75:12:52:f2:b8:28:bf:12:8e:
                    56:37:d4:fa:ab:87:4a:82:ad:90:51:06:59:07:c1:
                    d0:b2:39:e0:3e:32:74:af:0e:18:75:64:fe:fe:6e:
                    25:9b:c3:e7:91:71:9e:a9:94:b9:0c:80:2e:ef:82:
                    56:5b:f7:34:9d:46:99:8c:a5:29:a0:ac:90:4d:fb:
                    60:30:f3:5f:67:c9:22:4e:f5:89:f9:3b:c4:b2:fc:
                    da:74:5b:14:03:af:39:f2:42:66:30:4a:61:01:2e:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:9D:0D:3B:9C:DB:FF:EC:48:5C:97:F1:91:ED:83:6F:65:45:BB
            X509v3 Authority Key Identifier:
                keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ca:d8:05:2e:be:30:3f:54:f3:82:28:32:57:a3:9e:08:02:
         8e:3c:ef:bd:a8:6e:62:9f:b4:39:38:b2:e2:3a:df:f7:7e:79:
         01:bb:39:fe:fc:81:27:12:3b:2e:0a:27:cf:38:d6:f0:61:53:
         a5:d3:bf:55:12:89:74:de:50:f5:e4:66:fd:cd:7b:69:9b:15:
         c1:a7:80:b4:14:7a:22:04:96:43:11:dc:29:f4:bc:f4:25:8d:
         60:45:d3:cd:3a:75:38:15:db:88:1f:d6:12:94:8d:30:52:64:
         79:b9:5a:f4:ab:37:49:0a:22:ea:0b:9c:f3:c7:08:17:41:7e:
         54:cd:30:8d:1b:74:1b:f1:2e:28:80:02:f6:6d:38:28:b0:26:
         18:d5:42:50:89:91:60:41:2e:55:c9:2b:19:1f:59:0e:7e:59:
         41:98:bb:1d:b3:dd:40:01:9c:99:7d:a7:b0:b2:1f:50:88:5e:
         66:50:40:72:fb:29:20:f9:b3:63:1e:8b:d8:98:d0:6d:3b:ad:
         ec:71:ba:ba:bf:3e:09:6e:f0:fd:93:b1:61:19:2a:fd:ae:f0:
         ad:0a:11:12:bc:0a:46:6a:b6:42:3c:e6:fa:c5:d0:70:53:31:
         4f:cc:99:2a:ea:dd:0d:42:c9:92:ac:ce:e0:2a:e8:50:ef:bd:
         e7:98:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:06:29 2026 by rpki-client