This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
File:                     XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json)
Hash identifier:          JNy9kMvV31NfitoAICj0Mhlq3sRoCsqwwldpy2JlREM=
Subject key identifier:   2B:98:8D:90:92:12:D1:97:31:4D:2B:25:AD:CA:34:A3:26:63:79:16
Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32
Certificate issuer:       /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
Manifest number:          1B
Signing time:             Sun 25 Jan 2026 06:56:20 +0000
Manifest this update:     Sun 25 Jan 2026 06:56:19 +0000
Manifest next update:     Sun 01 Feb 2026 06:56:19 +0000
Files and hashes:         1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: e86Rg1hoeLeNQNgAQVc/1QQ/OyJPPLaFG8flTBnciQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl
                          rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
        Validity
            Not Before: Jan 25 06:56:19 2026 GMT
            Not After : Feb  1 06:56:19 2026 GMT
        Subject: CN=6975be94-cac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:38:16:6b:93:2e:9b:5a:27:8d:b3:32:44:
                    58:75:fb:14:ea:f2:12:22:70:da:4d:26:25:27:a6:
                    ea:21:0c:40:f3:b4:c7:9d:64:de:60:35:df:d1:7b:
                    67:fc:3d:2b:82:fe:62:6d:5e:8a:7d:c7:b7:8d:09:
                    52:8c:45:d0:fb:7a:7e:0b:bb:65:a1:41:1a:15:9e:
                    59:95:12:a1:f2:97:3d:06:36:0e:85:ff:c9:1d:34:
                    34:87:49:dd:fa:63:b7:69:65:8a:99:50:b8:a7:e7:
                    40:43:13:52:12:f4:b9:d7:84:ea:c0:93:c7:db:6c:
                    5c:0d:aa:3e:47:d7:1c:56:6d:ad:de:25:2b:ca:60:
                    fe:61:0a:d3:ca:64:97:96:47:e5:59:48:77:6b:7d:
                    86:5e:2e:33:e0:bc:02:66:28:a8:f3:29:13:a7:9e:
                    84:ef:f1:93:8d:6e:14:07:74:97:6f:b8:0a:dd:41:
                    79:a1:58:da:4e:e3:55:b0:6d:8a:42:6e:91:23:bc:
                    70:ba:19:4b:2b:d9:8a:a7:59:1e:06:85:52:cd:aa:
                    4a:c4:3f:9d:18:30:ba:3b:e6:22:0e:e9:d9:45:f3:
                    9a:a3:a9:9a:c2:34:44:57:cd:f3:68:db:f8:72:82:
                    84:d4:4c:08:c8:75:ee:af:7f:a5:a7:3b:ae:72:0b:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:98:8D:90:92:12:D1:97:31:4D:2B:25:AD:CA:34:A3:26:63:79:16
            X509v3 Authority Key Identifier:
                keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:98:17:47:f9:a0:33:05:76:69:d0:ed:8f:da:17:d9:f2:31:
         b8:f7:5e:d8:03:f2:68:0f:f7:f4:f2:a8:b7:1d:50:64:18:e8:
         b8:e5:b3:86:da:a8:27:7f:1f:57:65:65:16:05:aa:94:bc:69:
         d3:b9:5e:02:3b:7f:fd:bd:76:c6:64:5b:a7:4e:0e:8c:2f:36:
         d5:53:3a:a7:b1:08:d3:9e:eb:51:17:2f:75:b1:6d:6f:a1:7f:
         6c:7e:7c:b1:1f:90:4f:13:0d:fd:1f:aa:56:9b:da:6f:61:c8:
         45:89:ca:c5:fd:44:f2:94:da:fa:6b:97:ce:25:90:3e:54:dc:
         fe:48:15:ce:b8:37:cf:56:b9:2b:66:fe:b4:22:8f:19:0f:7e:
         6e:58:83:d9:e1:c3:19:4a:67:fb:48:0d:b8:45:b9:e1:76:10:
         58:7f:b6:53:15:32:16:93:8a:e5:f0:2b:b5:44:47:e1:d8:26:
         bf:7c:d7:92:20:ae:e9:92:4b:ad:0a:47:6e:72:fe:d5:50:b5:
         01:f1:ec:92:6c:b6:0a:66:14:8c:f7:05:1c:d6:38:de:a8:cc:
         37:20:dd:cf:62:b9:f6:5e:0d:e1:4b:b8:d9:54:4e:ba:c8:0a:
         14:e8:d0:69:56:d4:45:b2:df:7e:8e:32:10:b0:b2:fc:79:d9:
         3d:0d:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:21:15 2026 by rpki-client