This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          9lhntsJhVHNKw5zaREVm1Xlqaoq9NllkOh4TnYfbDiM=
Subject key identifier:   8F:87:2C:10:DB:84:18:89:3D:A2:32:51:E1:2C:F4:F6:5E:12:F5:B9
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       07C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          07C2
Signing time:             Sat 24 Jan 2026 20:41:36 +0000
Manifest this update:     Sat 24 Jan 2026 20:41:36 +0000
Manifest next update:     Sat 31 Jan 2026 20:41:36 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: 4+6EnNlPfyGKa5czR4+q7upKPYCnrmRBv2+0qMPmrI4=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: Jan 24 20:41:36 2026 GMT
            Not After : Jan 31 20:41:36 2026 GMT
        Subject: CN=69752e80-44ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:95:3c:13:b1:9e:1d:ac:11:03:ef:1f:b0:
                    84:f0:04:74:2d:6b:ee:9a:87:61:bd:c2:7d:30:23:
                    a3:5c:df:00:f8:1a:4d:bf:66:08:21:9c:7d:60:07:
                    3f:af:46:df:f4:b8:35:73:d7:fc:ef:b8:5e:f6:bd:
                    ea:96:f5:29:78:e0:e1:93:58:2c:48:d9:e6:72:72:
                    68:2d:55:7a:c2:4a:eb:b3:d6:2f:b0:69:d4:d9:39:
                    14:26:47:29:65:d2:b9:a2:c6:12:c5:b3:3c:46:aa:
                    6a:f4:f6:5c:75:4a:50:38:e7:b5:8c:49:98:35:09:
                    c3:42:dc:6f:48:6b:ce:56:79:82:c0:ce:db:0f:14:
                    cf:2c:ce:bb:67:70:f8:62:e4:0e:b3:5f:09:dc:6e:
                    17:53:91:1b:1d:4d:59:d5:a6:c7:46:bf:0e:dc:31:
                    c8:2a:eb:a3:a1:d7:97:48:ab:af:e2:4c:f9:41:78:
                    bc:03:aa:da:ec:57:19:1a:63:21:64:04:c3:a2:e7:
                    00:12:7b:f7:6c:e3:ac:89:3a:ae:99:d8:b5:f0:90:
                    e9:ac:7f:83:5d:a8:f0:ab:a0:20:33:30:71:a0:18:
                    d9:f5:78:76:d3:61:17:7a:29:0b:a1:48:ac:a2:18:
                    06:7f:11:2e:e7:f1:0c:b2:d0:ad:87:ae:9c:1d:0d:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:87:2C:10:DB:84:18:89:3D:A2:32:51:E1:2C:F4:F6:5E:12:F5:B9
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:c7:10:c3:92:42:ac:e0:e6:52:36:f6:18:6e:cc:b2:92:
         e1:f6:d7:34:4c:6d:54:a8:55:c5:34:ff:04:a9:9d:ad:74:94:
         ae:a4:df:59:7b:ce:8b:fe:9f:79:e6:ce:52:cb:1c:00:8c:19:
         13:5a:a2:65:4e:1f:86:cb:1c:4b:4d:3b:38:5a:3d:1d:d1:ed:
         c5:b8:95:d3:5a:dd:5d:c3:15:3f:1f:db:cc:dd:3f:4d:2b:91:
         84:df:fd:c9:c3:48:13:ad:d6:de:33:7a:87:25:bb:19:d8:5c:
         49:b4:dc:76:9a:b0:97:c7:8a:7e:73:cf:65:39:c4:4d:b4:a6:
         c8:ab:22:a0:de:88:2a:47:1d:ae:08:a7:f3:db:7a:95:24:c5:
         ae:aa:e2:c1:25:f0:14:90:55:63:27:57:1d:13:71:c6:60:6a:
         72:72:d0:0c:ac:5d:17:5b:80:e7:e4:ac:60:48:96:77:8d:7b:
         ff:f7:6d:ff:d1:3a:4d:b9:b4:5e:6b:f9:f3:73:b2:8b:e4:9d:
         18:e4:6c:bf:93:4e:42:38:59:c9:dc:1b:36:87:a7:8c:ef:be:
         d6:28:16:db:15:92:d7:e5:69:30:ed:6e:d4:53:36:06:34:a1:
         fe:cf:a8:c7:fe:ed:2c:4a:1d:7e:fb:cc:ff:dc:af:ff:d5:99:
         3b:65:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:11:14 2026 by rpki-client