This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
File:                     XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json)
Hash identifier:          japKkVJyQG9of6HQ6ieGU2jrMjqSM/Mt2er+7Ck1q0Q=
Subject key identifier:   D5:09:34:94:76:38:10:BE:01:8B:B4:34:4A:78:A7:7D:5F:BE:58:83
Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
Certificate issuer:       /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Certificate serial:       02FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
Manifest number:          02F8
Signing time:             Sun 25 Jan 2026 00:24:47 +0000
Manifest this update:     Sun 25 Jan 2026 00:24:46 +0000
Manifest next update:     Sun 01 Feb 2026 00:24:46 +0000
Files and hashes:         1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: gv1i9ncZolx3FZ6fOT1QgvLbOkQp/xUEIxxES69GaqQ=)
                          2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: llGHaeZeNwyGtBSSkhkdbPBkxPf6MV+xeeQondsSA8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
                          rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
        Validity
            Not Before: Jan 25 00:24:46 2026 GMT
            Not After : Feb  1 00:24:46 2026 GMT
        Subject: CN=697562ce-00b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:13:c6:d0:77:47:89:ce:56:bc:22:f7:33:
                    2f:43:cb:66:67:06:ff:9a:44:93:cd:d5:ce:64:7d:
                    ff:31:f3:2f:b5:eb:77:e3:8b:b8:ae:b2:ff:03:df:
                    1f:45:59:2e:12:1d:4f:2a:80:57:9f:10:4f:25:ab:
                    8c:f1:02:fd:25:ec:3a:76:7d:b6:27:f4:35:ff:67:
                    b4:6e:ec:7c:1a:5b:87:32:76:af:37:ae:a3:e4:30:
                    0e:ff:89:d8:fd:0b:7e:17:86:0e:ea:86:b1:bb:cf:
                    a8:21:0e:cb:9a:86:74:5c:ef:69:c6:fc:ad:92:d6:
                    7c:46:62:98:9c:b9:ed:39:5a:c7:c7:2b:0e:3d:7b:
                    af:0c:39:06:e8:41:18:a8:e9:57:af:86:7e:d9:ce:
                    79:65:27:82:43:03:33:65:cd:4d:33:3a:ec:8b:da:
                    14:5d:02:6d:66:cd:ce:dc:c5:84:86:ed:f5:6e:83:
                    2d:62:40:23:4c:98:30:87:d7:99:ab:21:ca:bf:62:
                    15:7d:ca:ae:3b:ac:35:f6:75:0b:ef:d6:b8:24:e1:
                    ac:8a:b0:d6:b7:05:bb:67:96:46:74:5c:0f:82:51:
                    e5:c4:e2:69:37:5e:01:cb:56:47:b3:e9:77:f7:2d:
                    0c:31:76:de:83:0d:80:f1:ce:23:27:3a:2a:1a:f0:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:09:34:94:76:38:10:BE:01:8B:B4:34:4A:78:A7:7D:5F:BE:58:83
            X509v3 Authority Key Identifier:
                keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:3e:ab:c7:ab:79:41:2b:b0:b2:c5:92:02:0f:82:8c:6b:
         a8:30:fa:bb:8b:95:2b:02:c2:52:50:d2:5e:d8:02:c2:1e:9b:
         e2:9d:a7:ee:72:83:b9:4c:df:07:6c:47:0a:3b:a7:f3:32:16:
         cd:d7:9f:e1:06:44:10:a6:1c:2a:58:48:51:e2:ad:1e:09:90:
         a3:0f:6b:86:a0:82:b3:f0:6d:3b:7f:fe:8a:4f:f7:57:00:c0:
         1b:38:bf:26:a7:72:87:ca:05:94:91:73:5d:de:b3:24:57:c5:
         4b:8c:6e:0c:fb:17:fc:5e:46:7c:1d:37:01:48:e3:cc:93:b0:
         d9:66:71:ce:8e:9f:b5:89:87:f5:f7:cf:8f:b1:6d:a5:6f:16:
         fa:a4:88:d0:40:04:43:87:1a:37:d8:19:0a:b0:f0:7b:85:b0:
         fd:d5:0f:35:3d:27:7b:be:12:ba:1d:4a:d5:db:79:d2:c8:79:
         51:e1:1d:e4:37:a6:d9:12:d9:5e:4e:26:2b:a3:dd:fa:20:05:
         9f:1f:18:1e:fd:53:a6:57:56:86:fb:23:2b:2e:a3:41:81:89:
         ad:7c:38:cd:6a:bd:a9:92:09:dd:e3:74:10:f1:c7:50:9a:ff:
         42:b3:d2:d9:5b:d3:4e:db:10:45:09:c8:ac:61:36:f0:75:69:
         ad:98:c7:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0
RDhGMkRGRjEwHhcNMjYwMTI1MDAyNDQ2WhcNMjYwMjAxMDAyNDQ2WjAYMRYwFAYD
VQQDDA02OTc1NjJjZS0wMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0JwTxtB3R4nOVrwi9zMvQ8tmZwb/mkSTzdXOZH3/MfMvtet344u4rrL/A98f
RVkuEh1PKoBXnxBPJauM8QL9Jew6dn22J/Q1/2e0bux8GluHMnavN66j5DAO/4nY
/Qt+F4YO6oaxu8+oIQ7LmoZ0XO9pxvytktZ8RmKYnLntOVrHxysOPXuvDDkG6EEY
qOlXr4Z+2c55ZSeCQwMzZc1NMzrsi9oUXQJtZs3O3MWEhu31boMtYkAjTJgwh9eZ
qyHKv2IVfcquO6w19nUL79a4JOGsirDWtwW7Z5ZGdFwPglHlxOJpN14By1ZHs+l3
9y0MMXbegw2A8c4jJzoqGvCLOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUJNJR2
OBC+AYu0NEp4p31fvliDMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC
QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU
eU9vV09LOEd5Tk5OankzX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCF2D6rx6t5QSuwssWSAg+CjGuoMPq7i5UrAsJSUNJe2ALCHpvinafu
coO5TN8HbEcKO6fzMhbN15/hBkQQphwqWEhR4q0eCZCjD2uGoIKz8G07f/6KT/dX
AMAbOL8mp3KHygWUkXNd3rMkV8VLjG4M+xf8XkZ8HTcBSOPMk7DZZnHOjp+1iYf1
98+PsW2lbxb6pIjQQARDhxo32BkKsPB7hbD91Q81PSd7vhK6HUrV23nSyHlR4R3k
N6bZEtleTiYro936IAWfHxge/VOmV1aG+yMrLqNBgYmtfDjNar2pkgnd43QQ8cdQ
mv9Cs9LZW9NO2xBFCcisYTbwdWmtmMdD
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:57 2026 by rpki-client