This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
File:                     XKzlv2VarPfLxicsXGl_N3oGzow.mft (raw, json)
Hash identifier:          6Fj1WIPjHcH0hPlEUQqUM+CBpfs9yOnpL+pQOmPhy4E=
Subject key identifier:   BD:B8:F3:B3:DF:B8:03:0E:6D:87:55:56:49:3B:BD:5A:D4:A8:9B:9D
Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C
Certificate issuer:       /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
Manifest number:          0100
Signing time:             Fri 23 Jan 2026 04:21:33 +0000
Manifest this update:     Fri 23 Jan 2026 04:21:33 +0000
Manifest next update:     Fri 30 Jan 2026 04:21:33 +0000
Files and hashes:         1: XKzlv2VarPfLxicsXGl_N3oGzow.crl (hash: CMgjwbepRxv8LhL3yWPPxHp/boBp5MyhH3Gl0g9JdA4=)
                          2: 15875DC27B5E11EFAB71253BC4F9AE02.roa (hash: 0W2/njWu/4NeHHOITSUzSzI4ic/vgB1fnauNrzPM4sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl
                          rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
        Validity
            Not Before: Jan 23 04:21:33 2026 GMT
            Not After : Jan 30 04:21:33 2026 GMT
        Subject: CN=6972f74d-d27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:1f:12:2f:c1:51:11:e3:42:61:e4:66:b2:
                    3c:40:9d:44:36:86:37:ec:32:a6:e8:43:4c:88:53:
                    6d:75:fb:a3:88:16:29:fa:3e:a8:d8:7a:bb:e6:1a:
                    1a:20:6a:a9:b1:9c:8b:bd:58:3a:30:c1:7d:a9:26:
                    3a:6d:e6:a0:17:03:1b:d1:ac:9e:99:17:25:29:a6:
                    76:eb:bb:dc:48:9c:38:58:8a:a8:e8:f0:b4:9e:bd:
                    3d:c1:87:be:38:35:52:35:10:c3:3d:cf:c4:7e:da:
                    92:25:c2:55:69:4e:e8:43:60:d0:4f:bb:88:6d:e6:
                    c9:4d:f7:62:2a:5e:2a:fa:c2:ba:75:a6:a5:81:a8:
                    50:b0:a5:95:59:c4:54:03:0a:c7:96:f8:e9:31:07:
                    e2:7e:89:19:db:56:ab:19:6c:cb:be:87:11:a3:c3:
                    e0:db:bd:a4:09:15:81:ce:e5:a0:ae:11:71:cc:c0:
                    81:b0:aa:2c:31:11:e2:0c:9b:50:f0:25:cf:d3:bd:
                    50:a9:56:7c:0c:dc:c7:2c:d5:60:7e:ef:c9:bb:0c:
                    4a:d2:01:07:aa:ac:38:ff:56:4d:60:d4:1f:77:97:
                    25:54:d2:4e:59:5b:ac:b6:56:ab:b1:78:9f:a6:cb:
                    93:5c:f1:46:61:04:3d:ea:c1:7b:d0:02:2e:1d:c9:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B8:F3:B3:DF:B8:03:0E:6D:87:55:56:49:3B:BD:5A:D4:A8:9B:9D
            X509v3 Authority Key Identifier:
                keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f7:5a:1e:ec:06:10:4c:52:58:64:92:c4:6b:47:f0:dc:08:
         8f:c0:6c:47:87:6a:e7:8a:fc:98:80:eb:71:d4:01:70:52:ac:
         d5:ff:8c:d9:52:2a:94:f4:23:b8:69:19:9d:e6:99:98:85:31:
         92:ef:80:bc:9d:fe:69:5e:a6:d7:50:a4:6b:cf:7e:25:88:18:
         a8:e0:a4:87:99:82:a5:60:dd:e2:cd:ed:ea:55:ac:11:ec:7a:
         73:a6:07:11:90:ed:6b:4a:49:4c:09:c5:bb:be:a6:89:e4:1d:
         09:77:49:d1:27:b9:b4:00:b5:c9:2c:0e:39:8c:78:85:3a:59:
         9d:e8:a3:82:6b:af:3d:19:f1:8e:08:58:f8:1a:53:a7:5e:4c:
         8d:c6:fa:75:7a:81:c0:6b:73:c5:32:a3:89:f5:4b:f9:66:26:
         29:b0:c6:cf:01:00:92:cb:a6:7d:3f:4c:79:3f:87:d4:59:2d:
         85:7b:a9:b0:f2:a4:fc:2d:4a:0f:e3:0b:d4:96:29:81:39:14:
         fe:9b:fb:88:51:b4:30:0b:1b:2e:c1:09:21:d0:0c:36:a7:e0:
         82:53:fe:a7:cc:cb:dc:f6:39:d0:54:ac:26:fa:c9:30:e3:6f:
         74:f5:15:e4:0a:be:7f:5b:cc:9a:80:0a:5b:6d:29:c5:75:45:
         20:71:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:03 2026 by rpki-client