This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File:                     xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier:          oFkhA3L5UVTji83zLalj6HUBEdWWEizeFSVEIdpTm44=
Subject key identifier:   D5:38:DA:09:2C:34:C6:02:AD:36:6D:51:9E:92:DF:0B:5F:7D:A1:66
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer:       /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number:          FA
Signing time:             Sun 25 Jan 2026 04:25:37 +0000
Manifest this update:     Sun 25 Jan 2026 04:25:37 +0000
Manifest next update:     Sun 01 Feb 2026 04:25:37 +0000
Files and hashes:         1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: SB/c8/uud3ZJaopKj8zCa5OT5kskr2tyM+YXUeAxlNc=)
                          2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
        Validity
            Not Before: Jan 25 04:25:37 2026 GMT
            Not After : Feb  1 04:25:37 2026 GMT
        Subject: CN=69759b41-0232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:53:96:38:5c:b8:8e:5e:ee:43:8d:2c:90:
                    2b:41:c6:65:4c:c3:07:65:98:b1:73:b8:ee:a2:dd:
                    2d:49:af:e6:58:24:e0:c9:ad:0e:7a:14:81:aa:72:
                    f6:2d:a2:55:99:31:85:97:78:df:2e:cc:80:ef:ad:
                    0a:4a:cd:67:00:ec:48:35:e7:45:d3:44:10:72:fc:
                    7d:e8:c3:c8:fb:91:dc:10:a0:26:9d:42:39:20:97:
                    a9:1c:83:76:e7:ab:f8:46:47:cd:40:5c:23:ec:33:
                    62:62:bb:e1:9b:41:84:4b:d3:01:5b:08:7c:d7:0b:
                    f5:12:07:07:f4:cc:75:f2:54:2d:76:ad:7f:98:4f:
                    8e:20:e8:3b:9e:0a:4d:85:c6:ba:86:d5:94:8d:d9:
                    d7:a8:f5:e8:45:73:60:14:6c:83:fa:71:06:72:04:
                    d8:f7:4c:de:e1:3c:12:58:7d:55:d0:36:5a:e0:57:
                    f6:6c:01:c4:ac:1f:9e:80:f0:ca:f2:96:58:b0:fd:
                    01:94:5f:a6:82:7b:1f:80:a8:5e:1f:5d:e6:17:f6:
                    5e:1e:33:96:c8:15:e2:85:c7:0c:49:9e:56:55:91:
                    d4:c1:79:c8:a9:15:b6:c4:fc:23:ec:72:56:de:5a:
                    2a:94:55:f5:4b:e3:27:66:53:3e:9c:fb:f0:44:df:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:38:DA:09:2C:34:C6:02:AD:36:6D:51:9E:92:DF:0B:5F:7D:A1:66
            X509v3 Authority Key Identifier:
                keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:e5:de:7b:73:c5:c6:3d:b2:61:76:19:e9:0b:f7:13:04:
         d7:db:7c:e0:47:3a:a7:3f:19:1f:53:cd:78:c2:e3:7f:a9:5d:
         ce:58:2e:80:f3:6d:f1:9c:9d:bf:9e:f2:9e:be:8e:69:9c:87:
         2f:8c:47:7b:37:b6:51:1c:a2:b8:3c:d0:5f:20:71:7b:72:af:
         c0:2b:f4:16:70:c9:b9:91:0e:13:16:0e:17:25:10:22:3e:4a:
         5b:f6:e6:46:2d:a6:c2:61:c4:b3:39:02:af:35:c3:f3:56:6c:
         67:8d:6f:e5:ca:57:67:af:46:80:c6:5a:3f:8d:d4:c5:61:2f:
         47:24:cd:23:90:b1:15:3f:3a:92:8d:23:21:32:33:2b:2e:cb:
         8e:61:65:a7:c2:6a:7d:06:db:b9:bf:6c:76:82:84:76:ae:b6:
         de:2d:a4:a8:91:11:ab:9c:78:0a:c0:69:b2:fb:d3:b3:5a:8c:
         cf:16:25:8e:75:a5:3e:96:6f:a2:f8:47:98:99:b4:c9:06:fb:
         7e:83:69:a6:b0:2a:f8:24:4b:2b:4a:55:ae:09:70:32:42:c9:
         55:d5:98:4c:eb:5e:a8:bb:31:34:ec:d1:14:cf:10:90:91:c2:
         d9:7f:0c:21:aa:7b:0e:cb:25:8f:04:94:c8:54:22:2d:c6:ab:
         e3:0a:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:38 2026 by rpki-client