This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File:                     97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier:          k9401jfU9osSa8L8Ce05sHb18o1e1XJN+D+nGndyocM=
Subject key identifier:   85:C0:8C:37:F1:39:F9:A3:65:95:61:93:D9:D8:3C:D1:91:B2:A7:E2
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer:       /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number:          0253
Signing time:             Sun 25 Jan 2026 01:02:29 +0000
Manifest this update:     Sun 25 Jan 2026 01:02:28 +0000
Manifest next update:     Sun 01 Feb 2026 01:02:28 +0000
Files and hashes:         1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: M9KcDQsTfLDVRxWTmj0TNeRSCrEjDXnK3ruocVwhMZY=)
                          2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: lGnrQ3842agDvnpgF+nJ7WvDfJ9Hvbpu2XOPWGO29f0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
                          rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
        Validity
            Not Before: Jan 25 01:02:28 2026 GMT
            Not After : Feb  1 01:02:28 2026 GMT
        Subject: CN=69756ba5-f4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:aa:72:5d:68:a9:98:3f:09:af:2c:25:14:
                    8e:8f:a4:67:6e:75:cf:ca:90:a9:e4:ee:ee:0c:a1:
                    62:13:cd:85:c3:34:6a:79:52:ea:40:ee:21:ab:52:
                    9b:da:1d:82:57:f3:fb:af:ba:46:b9:1e:77:31:2b:
                    1f:07:79:4c:13:46:14:45:69:84:84:b5:03:ef:96:
                    c3:37:dd:33:14:e6:1f:fd:47:9f:bd:67:91:f7:b9:
                    af:ef:f7:8a:62:c8:3e:09:f4:d2:38:ec:62:9f:ed:
                    f6:50:fe:70:8b:e2:8b:f6:5c:8d:20:fa:95:56:82:
                    ab:60:26:df:a2:3c:82:82:07:e0:2c:65:3b:8e:4d:
                    b0:80:85:e2:ee:8f:48:da:e1:6c:75:98:6a:74:0a:
                    92:7f:47:d6:74:79:26:cf:d6:64:6b:43:b1:94:bb:
                    07:9b:5d:44:3e:73:76:e0:12:8b:a7:46:a4:30:8f:
                    23:10:bf:53:83:51:dd:09:72:43:c0:39:2f:d7:5c:
                    d9:f2:b1:69:c7:e8:b6:a1:8c:52:e0:9d:4d:28:a6:
                    90:f0:d9:7a:2e:91:d3:a0:2a:ec:3b:15:87:ab:35:
                    6a:cb:b2:e2:d5:e2:e9:a1:c5:4d:2a:ed:a6:2b:8e:
                    b8:d0:8d:3f:fc:d2:c0:a4:39:96:7a:2d:48:70:51:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C0:8C:37:F1:39:F9:A3:65:95:61:93:D9:D8:3C:D1:91:B2:A7:E2
            X509v3 Authority Key Identifier:
                keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:b1:91:e0:27:8d:93:31:69:56:22:2f:ac:9f:c4:dd:f2:
         b9:58:96:47:96:f0:1f:5a:38:ee:1f:61:39:27:1c:21:1f:1d:
         b6:76:2f:ac:eb:9c:d9:d2:23:e9:27:15:ea:60:98:1f:0d:82:
         4f:65:50:08:dc:d8:5b:96:29:99:88:47:c6:2a:24:85:88:7b:
         72:5b:dd:27:22:f8:f1:ca:e8:21:f7:2a:cf:8c:0b:be:77:61:
         9d:5b:25:c2:a4:d1:e8:ac:2c:30:75:af:c5:25:00:2e:d6:08:
         56:d1:b0:fa:e3:ef:06:b7:36:c7:28:45:89:28:d2:54:a0:5e:
         0d:74:94:75:ee:58:c4:33:d2:99:f9:c5:21:53:dd:88:b8:b7:
         16:4d:3e:69:66:0f:16:99:1a:bc:4c:b1:40:80:f4:47:73:71:
         2b:e5:6b:b9:e3:11:b5:a5:e0:e4:18:04:aa:f2:3a:af:6f:9e:
         ba:1c:6d:9d:2b:a2:88:7c:6b:b9:1f:78:6e:9d:50:36:39:73:
         e2:e0:e6:14:60:3c:bd:12:b8:81:fc:5d:13:28:af:cd:e4:5f:
         10:81:5a:5a:a2:36:43:30:69:cd:49:3b:10:35:be:3d:e4:5e:
         32:91:3b:c5:fe:4c:ab:80:f0:9d:58:5c:1b:19:54:11:11:ae:
         a4:e0:0d:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Q0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1MDhBMTU0MjY0
MzNBRUM5REUwHhcNMjYwMTI1MDEwMjI4WhcNMjYwMjAxMDEwMjI4WjAYMRYwFAYD
VQQDDA02OTc1NmJhNS1mNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0diqcl1oqZg/Ca8sJRSOj6RnbnXPypCp5O7uDKFiE82FwzRqeVLqQO4hq1Kb
2h2CV/P7r7pGuR53MSsfB3lME0YURWmEhLUD75bDN90zFOYf/UefvWeR97mv7/eK
Ysg+CfTSOOxin+32UP5wi+KL9lyNIPqVVoKrYCbfojyCggfgLGU7jk2wgIXi7o9I
2uFsdZhqdAqSf0fWdHkmz9Zka0OxlLsHm11EPnN24BKLp0akMI8jEL9Tg1HdCXJD
wDkv11zZ8rFpx+i2oYxS4J1NKKaQ8Nl6LpHToCrsOxWHqzVqy7Li1eLpocVNKu2m
K4640I0//NLApDmWei1IcFG9qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXAjDfx
OfmjZZVhk9nYPNGRsqfiMB8GA1UdIwQYMBaAFPe7Fy/K7K+/nr7yUIoVQmQzrsne
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUREMy9EMDY2MzMyODcw
NUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3LWV2dkpRaWhWQ1pET3V5
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk3c1hMOHJzcjctZXZ2SlFpaFZDWkRPdXlkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUREMy9EMDY2MzMyODcwNUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3
LWV2dkpRaWhWQ1pET3V5ZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAp5LGR4CeNkzFpViIvrJ/E3fK5WJZHlvAfWjjuH2E5JxwhHx22di+s
65zZ0iPpJxXqYJgfDYJPZVAI3NhblimZiEfGKiSFiHtyW90nIvjxyugh9yrPjAu+
d2GdWyXCpNHorCwwda/FJQAu1ghW0bD64+8GtzbHKEWJKNJUoF4NdJR17ljEM9KZ
+cUhU92IuLcWTT5pZg8WmRq8TLFAgPRHc3Er5Wu54xG1peDkGASq8jqvb566HG2d
K6KIfGu5H3hunVA2OXPi4OYUYDy9EriB/F0TKK/N5F8QgVpaojZDMGnNSTsQNb49
5F4ykTvF/kyrgPCdWFwbGVQREa6k4A3J
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:32 2026 by rpki-client