This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
File:                     XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json)
Hash identifier:          CZVS9WX8WOUnNDN7AOVtUEiQDQEAn5j+f6vhKXz9pQg=
Subject key identifier:   AD:71:DE:9D:DC:F0:96:3A:87:5D:AB:2A:FD:84:27:DD:80:60:9A:8E
Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
Certificate issuer:       /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Certificate serial:       09FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
Manifest number:          09E7
Signing time:             Sat 24 Jan 2026 19:22:09 +0000
Manifest this update:     Sat 24 Jan 2026 19:22:08 +0000
Manifest next update:     Sat 31 Jan 2026 19:22:08 +0000
Files and hashes:         1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: E8irrrVGzb+Fdi7nwOM5zL2vX6M9ev8g7mE1CCfPhwk=)
                          2: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: 1xpqucRPj2sGGfUlw/hjqGcWw2RAvQEPEvj1/o7DLww=)
                          3: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: Qe2k4Rmt8cYvrQ25NjhCj6HgTDQ2LTBczeZdX5NMi1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl
                          rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558 (0x9fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
        Validity
            Not Before: Jan 24 19:22:08 2026 GMT
            Not After : Jan 31 19:22:08 2026 GMT
        Subject: CN=69751be1-50f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:f1:31:35:3f:11:c0:c3:b8:2a:b7:f4:c9:
                    be:2a:5e:35:f0:f4:64:b0:e1:af:74:c5:42:fd:ed:
                    ac:d9:23:9c:6c:fb:7f:9e:4c:6a:39:5d:12:7e:a0:
                    20:35:5c:74:b4:96:33:6d:68:08:6b:a7:60:b7:74:
                    e0:66:fc:1c:cd:67:8e:37:fc:51:da:cd:58:96:b3:
                    e9:d1:0c:d4:6b:ed:10:e6:aa:86:7d:87:b8:23:6d:
                    c5:56:a6:96:85:c8:40:f9:ae:bd:8b:04:d8:8e:14:
                    96:da:e6:4b:2b:76:b9:d3:c4:25:f9:a9:8f:01:11:
                    a0:d9:ee:0f:0d:21:5a:11:f2:ac:7e:ff:48:b5:c8:
                    18:67:7e:82:9c:2e:5b:95:c6:11:18:4e:2c:5e:33:
                    3e:93:b7:d6:a5:91:bc:2d:40:5a:f0:cc:ef:33:49:
                    92:74:eb:9e:0a:2a:21:d4:a5:c2:f5:4e:d1:97:24:
                    ab:1e:53:9b:35:20:5c:26:39:8c:96:55:42:24:f4:
                    71:e6:c9:ae:46:86:a5:4f:b2:9f:a7:ce:3e:11:cd:
                    44:1f:d3:c1:31:a5:c3:73:b1:be:bb:05:23:78:92:
                    b6:8d:34:96:bd:36:44:0c:80:6f:23:20:5f:fa:f2:
                    c2:cb:b2:65:5d:49:50:b1:9a:44:58:29:bd:b2:f5:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:71:DE:9D:DC:F0:96:3A:87:5D:AB:2A:FD:84:27:DD:80:60:9A:8E
            X509v3 Authority Key Identifier:
                keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:ca:c7:bc:99:27:7f:44:43:ad:7b:02:00:fc:66:d1:9e:
         bd:36:f9:d1:a4:33:af:4c:23:57:a5:aa:9b:c0:1f:aa:55:07:
         75:5a:44:84:2d:32:bf:25:4a:00:e4:ab:b0:05:d1:10:f2:e3:
         ba:73:84:75:e0:9c:2a:8e:6b:46:ba:ef:09:91:20:43:47:4c:
         67:76:97:fa:2d:ee:f2:8b:53:26:0d:dd:21:01:1b:03:d6:ef:
         d5:16:ef:3a:81:f1:5f:9f:db:7c:af:03:59:98:59:79:d9:db:
         cf:72:9d:e9:31:7b:3c:d1:5f:21:e2:85:51:58:38:7b:17:ce:
         31:2c:a4:ab:55:9b:f4:7b:de:13:3f:45:15:5e:e7:5e:92:af:
         db:28:2d:5a:bc:13:be:e1:84:df:a7:61:02:60:d9:33:32:cd:
         ce:f1:fb:27:f0:61:53:c4:07:4c:7b:c0:ea:f7:2b:98:1e:03:
         45:d1:2c:00:b8:10:c3:48:3d:52:6f:6f:fe:84:b7:68:de:17:
         44:fc:0e:25:98:09:99:ed:6c:cd:90:02:23:cc:e8:57:c1:68:
         28:5a:0b:8b:3d:09:87:5c:b1:cf:bb:4c:95:fe:0e:3e:b5:60:
         3b:d0:b3:70:2e:28:27:52:97:0b:72:e8:de:65:8c:a2:bb:91:
         d2:a5:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:12:04 2026 by rpki-client