This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
File:                     2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json)
Hash identifier:          uXoCWnbmCK15gW6mYMkgwC2OaODS99N0iNp1gftdRKI=
Subject key identifier:   61:70:F0:AC:53:0E:29:52:25:82:BB:BA:A7:5A:9B:4C:D8:4C:3F:19
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Certificate issuer:       /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
Manifest number:          0113
Signing time:             Sun 25 Jan 2026 04:06:18 +0000
Manifest this update:     Sun 25 Jan 2026 04:06:18 +0000
Manifest next update:     Sun 01 Feb 2026 04:06:18 +0000
Files and hashes:         1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: nZLBDPeZIpNVoIh85k8t1tfydrw5LNnpQvt4nlvV4BU=)
                          2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: yG8pJzZvCKmicDw0dwhTP12v3DvDJugGeiv6wIDOe9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
        Validity
            Not Before: Jan 25 04:06:18 2026 GMT
            Not After : Feb  1 04:06:18 2026 GMT
        Subject: CN=697596ba-5dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:d0:3a:bd:dd:ce:bb:fb:fd:c5:fe:6c:8e:
                    5c:74:3d:a6:a5:96:32:4e:3e:8a:e4:60:66:36:61:
                    e8:68:6c:dc:bc:4c:cb:6b:10:e7:30:2c:47:12:10:
                    2b:64:a4:65:46:08:5e:3b:55:43:bc:10:71:ca:87:
                    1d:8f:7f:50:fd:66:c8:31:92:13:09:9c:86:64:70:
                    8c:81:7b:3e:4f:ac:43:6b:63:c3:3a:9e:f3:e4:ae:
                    0a:53:ae:03:20:98:b3:98:26:cf:b3:06:ca:6d:1d:
                    6c:f9:af:c3:a2:e7:05:41:c8:b2:fe:68:17:af:a0:
                    2c:14:9d:b9:f0:cf:b6:4e:05:c7:42:70:a6:56:52:
                    d6:80:d3:72:54:9d:3c:08:9e:fd:c0:f3:65:ff:e9:
                    a4:ea:3f:68:01:cb:ca:51:26:3f:b4:72:43:ae:7a:
                    2f:83:c3:12:de:8d:97:a3:61:f5:08:ac:a3:38:83:
                    13:b2:e2:36:7b:5b:66:ba:27:bf:19:2d:f3:ed:18:
                    23:37:24:61:c5:2e:0b:2a:fd:12:38:e1:a9:c7:24:
                    60:10:d2:89:a6:11:a5:99:91:2d:59:6c:b9:f4:da:
                    19:f2:fd:42:8a:24:f6:e8:27:10:14:ab:2a:d6:30:
                    88:76:37:44:7b:4f:3e:1c:37:58:ba:88:19:ad:47:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:70:F0:AC:53:0E:29:52:25:82:BB:BA:A7:5A:9B:4C:D8:4C:3F:19
            X509v3 Authority Key Identifier:
                keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:6a:ef:24:6c:48:94:d3:cf:4c:65:04:a3:09:99:b8:0d:
         9d:0e:80:09:1a:4b:77:92:be:fc:b6:9c:1d:29:ac:f7:a0:e5:
         c0:82:3f:0e:ca:0c:7d:a5:53:12:d0:52:e3:18:70:0b:93:be:
         99:5d:2a:3c:b2:56:b9:5c:f0:30:87:f2:a0:96:d3:ff:aa:c5:
         5e:0d:5c:df:cc:de:66:92:34:77:b1:8a:09:b4:42:2c:56:2e:
         60:54:6f:42:90:ed:37:70:af:3a:1e:67:fa:90:a5:f4:11:1c:
         0e:ff:01:e3:1c:bb:cc:71:ac:a6:c7:c7:46:5a:41:4e:88:9f:
         dc:9b:76:59:7b:d8:64:32:fb:83:94:67:99:3d:c8:a7:af:2e:
         6b:f1:7c:ae:91:e9:e5:3a:34:e6:49:7c:c3:14:1a:96:b0:25:
         e9:fe:40:c8:4c:04:07:e2:ff:b7:d6:6d:76:26:39:58:ba:4d:
         8f:13:13:42:77:cd:48:78:0a:15:0f:3a:5b:2d:94:a4:9d:0d:
         0a:50:ff:45:01:05:fd:91:17:a8:21:61:4c:f5:b7:40:b9:32:
         d6:56:92:6a:22:8f:22:58:98:4d:a7:55:fd:95:d9:4a:d3:07:
         7f:ae:fd:ae:ed:63:20:11:95:e7:f9:44:25:97:4c:76:ab:c7:
         40:97:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:53:07 2026 by rpki-client