This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
File:                     XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json)
Hash identifier:          NnaM5fnSAiWJOlCnTHobp6YwwrqfQ+H4oIckQ99e94c=
Subject key identifier:   1A:37:C4:6A:A9:98:68:F2:70:82:98:61:5E:6D:39:34:B9:C7:C8:35
Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
Certificate issuer:       /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
Manifest number:          23
Signing time:             Fri 23 Jan 2026 06:46:14 +0000
Manifest this update:     Fri 23 Jan 2026 06:46:14 +0000
Manifest next update:     Fri 30 Jan 2026 06:46:14 +0000
Files and hashes:         1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: Ti2FgSs7bZ3GHgtDTR8khdEw2PY6nAd1dnaDJBjGPSo=)
                          2: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: MtBnAhHAehfnWMn1/brAT1P+0TueglRR7dDcPrFP/rM=)
                          3: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wMqYO/syFhjjcPqzHa3Opa+vH6GNKBGwyDPDJuTBvqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
                          rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
        Validity
            Not Before: Jan 23 06:46:14 2026 GMT
            Not After : Jan 30 06:46:14 2026 GMT
        Subject: CN=69731936-0114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:05:10:4e:3b:83:bc:4c:9b:02:e8:1f:06:
                    a3:56:fb:74:8b:a8:f8:d2:41:51:89:35:3d:d5:b2:
                    b3:36:4a:0d:26:54:f1:c9:ef:b8:5b:3a:db:99:3f:
                    81:bf:4d:9d:a6:f0:a5:09:d8:75:12:e0:a4:a8:a7:
                    a8:a7:53:01:ca:12:fd:6e:de:61:6f:44:76:eb:19:
                    a8:f0:e1:93:31:ec:fb:f5:e5:a8:40:19:2d:63:9d:
                    6d:a1:04:a3:14:6c:8d:4d:14:f0:03:07:0f:48:51:
                    84:a0:1a:d6:b4:40:8d:2f:ea:88:20:3b:17:1b:7c:
                    b5:7f:e3:32:30:bf:dc:fa:b2:a3:b9:cd:fe:26:0d:
                    fe:56:e2:79:b1:92:be:70:70:90:1a:05:09:16:69:
                    d7:e2:b7:c8:c5:35:34:50:c7:58:ff:1c:1d:e5:e9:
                    23:40:c0:01:6d:cf:d1:ef:6b:dd:7b:5f:47:4a:d4:
                    8e:96:00:07:5d:9e:d1:df:56:5a:ef:ac:3f:76:53:
                    2f:90:1a:b3:32:15:94:9d:0f:fa:f9:fc:86:dc:9e:
                    5e:08:69:83:db:0f:4c:a5:39:1d:a6:6a:7e:2c:52:
                    e2:ea:9c:ed:60:be:21:e1:0d:85:a4:14:f4:6e:24:
                    6f:de:e7:7a:45:b1:de:df:3f:19:3a:e0:26:cf:01:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:37:C4:6A:A9:98:68:F2:70:82:98:61:5E:6D:39:34:B9:C7:C8:35
            X509v3 Authority Key Identifier:
                keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:21:b7:fd:a0:36:9d:c1:c6:c7:81:2e:aa:a7:9a:cb:84:
         2f:dd:a2:fb:1e:29:51:a9:8b:f2:42:66:41:21:18:aa:12:14:
         09:bd:c8:06:7d:2c:04:ee:d7:d1:53:2d:0c:6a:55:e8:82:6c:
         e2:aa:4b:e3:d6:6b:22:1a:73:07:ca:ba:cf:37:e8:51:22:82:
         90:f8:ec:86:d3:57:5f:c5:b1:02:f2:e2:27:da:84:c2:07:46:
         2a:70:ea:ba:20:69:5d:16:6d:09:91:59:79:61:5a:1c:f5:49:
         15:1b:48:fb:9a:a2:9c:09:a2:f3:da:b0:95:86:ed:46:17:37:
         45:b4:3c:5e:ea:23:d0:a7:8f:b5:14:c9:41:06:f1:3b:5e:92:
         56:a9:34:8b:c1:b3:06:3e:6c:ad:e2:59:40:59:30:c8:41:a1:
         e8:90:64:4b:2a:fa:a2:53:89:7e:7f:30:26:54:8b:42:28:69:
         6f:f7:aa:54:45:99:20:aa:bf:5b:ab:1b:33:92:81:60:07:22:
         c8:4c:57:27:58:ec:19:59:db:98:d0:76:7c:e3:fc:5b:da:53:
         11:8c:07:15:17:6d:21:f5:f8:d1:a7:68:36:fe:c5:f3:cc:ff:
         b0:dc:6d:bd:03:2c:ff:ec:bd:9e:34:3d:b2:b6:25:1c:58:37:
         af:61:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:59 2026 by rpki-client