This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File:                     XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier:          gL6eOrZrC7ZquS+fw794JME/3ztZlb4zFgWAsry7xyc=
Subject key identifier:   7A:CC:F9:DF:6B:60:27:CC:16:8A:85:76:13:7B:76:56:B2:67:B0:DC
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0BC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number:          0BB2
Signing time:             Sat 24 Jan 2026 18:31:10 +0000
Manifest this update:     Sat 24 Jan 2026 18:31:09 +0000
Manifest next update:     Sat 31 Jan 2026 18:31:09 +0000
Files and hashes:         1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: aanD2xGI9kowhIiYcITOzKHqUjBtMl7d0znj21o9Xos=)
                          2: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: Jhq/OLItI0gDhEIBYho+XP9iO0Y/7Srvb27SpQGuffU=)
                          3: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: z+/TKQAcf6VE8NuqmnIeG+tuqaOl0QxpRj3ReMN+jL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3009 (0xbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Jan 24 18:31:09 2026 GMT
            Not After : Jan 31 18:31:09 2026 GMT
        Subject: CN=69750fee-785b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:62:5f:48:57:8b:84:85:6d:b5:21:ae:db:
                    8a:ad:0f:27:cc:c9:20:4a:62:92:c5:ce:7e:b2:22:
                    db:4a:66:e1:03:0b:9c:98:a5:53:bc:41:84:00:0a:
                    61:28:5b:6a:2e:ac:46:80:40:32:29:a3:ef:45:ee:
                    10:63:fd:3e:2e:4f:09:d1:29:15:c5:a0:7c:fa:c2:
                    b9:55:4a:c8:17:ff:f0:80:95:02:d8:2f:f2:30:21:
                    48:c0:62:4f:3f:62:29:84:b6:c0:5f:58:c9:bd:e8:
                    0f:63:f0:3f:7d:eb:0d:1c:ac:c1:4b:1e:74:b8:db:
                    14:03:28:54:1f:5b:a9:ea:c4:e7:8f:25:7c:a3:c0:
                    86:ac:1a:d0:51:8d:d7:ec:4c:64:55:76:a9:b2:84:
                    21:1a:d2:2f:fb:82:14:c2:5e:36:fd:82:7c:d4:05:
                    e4:d5:02:0e:d9:06:51:9f:1b:aa:62:a3:de:6b:12:
                    43:4c:6b:25:fb:28:32:ab:67:b0:a2:50:cd:b4:61:
                    c7:38:a2:5f:70:e1:ad:8d:5a:f7:93:d1:8e:f1:a7:
                    b5:e5:44:cf:26:34:81:fd:07:59:cf:73:d5:36:9a:
                    e0:9d:dd:14:e1:0c:ed:9f:1c:39:ff:50:af:3d:91:
                    ee:23:3c:c3:f0:25:7b:75:b5:1c:45:14:d5:3f:d0:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CC:F9:DF:6B:60:27:CC:16:8A:85:76:13:7B:76:56:B2:67:B0:DC
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:37:82:4a:5d:26:8d:87:69:4c:8f:1f:74:7a:1e:ab:d5:72:
         07:35:88:c2:03:8c:93:aa:0a:b6:25:ea:eb:f0:5e:de:c5:40:
         d1:5a:6e:ac:6e:50:69:7b:27:9d:ca:d0:91:29:0b:42:b4:dd:
         aa:64:94:cb:64:e2:e5:bc:15:31:35:ab:d1:d6:86:11:5b:c5:
         72:96:7f:3f:a9:89:74:47:d3:f4:95:24:2a:48:f5:72:2e:dc:
         6d:d5:f1:ff:51:77:eb:95:9e:33:4d:71:15:e5:e2:64:df:83:
         6a:b7:a1:c2:3f:6c:39:e8:fc:cf:46:43:4d:9e:4b:80:de:61:
         a6:0f:06:0c:39:7a:1e:8b:6f:6f:37:a1:bc:59:21:c4:38:00:
         fe:64:da:70:e7:26:51:0e:b6:a7:28:32:65:8a:c8:cd:95:fd:
         6e:7c:a9:20:e0:b9:7a:bf:12:18:87:95:f0:a4:e2:57:8d:e8:
         aa:74:1e:c5:b0:98:2a:0e:eb:fe:d1:98:a2:8d:9a:f0:8d:09:
         ff:54:02:b0:76:fe:7a:23:d8:3a:b4:d1:58:01:59:3f:84:b9:
         87:0e:3a:ac:66:3a:9f:e6:6a:f6:a1:b5:c4:5c:0c:10:c1:3b:
         a1:9f:dd:e4:24:b1:3d:1b:cf:71:70:d6:d2:62:a6:c8:70:2e:
         d6:dd:40:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2
QTA4MTRCQUMwHhcNMjYwMTI0MTgzMTA5WhcNMjYwMTMxMTgzMTA5WjAYMRYwFAYD
VQQDDA02OTc1MGZlZS03ODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyxiX0hXi4SFbbUhrtuKrQ8nzMkgSmKSxc5+siLbSmbhAwucmKVTvEGEAAph
KFtqLqxGgEAyKaPvRe4QY/0+Lk8J0SkVxaB8+sK5VUrIF//wgJUC2C/yMCFIwGJP
P2IphLbAX1jJvegPY/A/fesNHKzBSx50uNsUAyhUH1up6sTnjyV8o8CGrBrQUY3X
7ExkVXapsoQhGtIv+4IUwl42/YJ81AXk1QIO2QZRnxuqYqPeaxJDTGsl+ygyq2ew
olDNtGHHOKJfcOGtjVr3k9GO8ae15UTPJjSB/QdZz3PVNprgnd0U4Qztnxw5/1Cv
PZHuIzzD8CV7dbUcRRTVP9CfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrM+d9r
YCfMFoqFdhN7dlayZ7DcMB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5
NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT
NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI
c2pXUWxJVmRpZUZxQ0JTNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYN4JKXSaNh2lMjx90eh6r1XIHNYjCA4yTqgq2Jerr8F7exUDRWm6s
blBpeyedytCRKQtCtN2qZJTLZOLlvBUxNavR1oYRW8Vyln8/qYl0R9P0lSQqSPVy
Ltxt1fH/UXfrlZ4zTXEV5eJk34Nqt6HCP2w56PzPRkNNnkuA3mGmDwYMOXoei29v
N6G8WSHEOAD+ZNpw5yZRDranKDJlisjNlf1ufKkg4Ll6vxIYh5XwpOJXjeiqdB7F
sJgqDuv+0ZiijZrwjQn/VAKwdv56I9g6tNFYAVk/hLmHDjqsZjqf5mr2obXEXAwQ
wTuhn93kJLE9G89xcNbSYqbIcC7W3UDS
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:53 2026 by rpki-client