This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File:                     xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier:          quhoBaWuBvh0nj2399CBtkUN2ri9IL9J6KOg4iwyhzM=
Subject key identifier:   22:39:24:EB:5A:42:7A:0D:B6:58:BF:26:2F:95:3F:E6:AF:70:B5:12
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer:       /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number:          0108
Signing time:             Sun 25 Jan 2026 00:50:10 +0000
Manifest this update:     Sun 25 Jan 2026 00:50:09 +0000
Manifest next update:     Sun 01 Feb 2026 00:50:09 +0000
Files and hashes:         1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: 5AccX9XpRVjtOp8x9LNM0vzRO/Am+Ylk+ln/C2IOnu4=)
                          2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: DgEucoR97Y9+a6MdEE8/uaZNnvtkSjr5/qYttwnSpcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
        Validity
            Not Before: Jan 25 00:50:09 2026 GMT
            Not After : Feb  1 00:50:09 2026 GMT
        Subject: CN=697568c2-eeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:67:a1:04:ba:25:c9:96:db:84:e2:90:8d:
                    b0:97:75:7d:1f:56:d5:b7:82:d4:76:8b:85:89:3f:
                    7a:1f:a6:4d:3f:a4:31:b9:33:2a:76:97:88:89:97:
                    52:c4:d1:d6:b1:83:1b:1a:5f:0a:74:2b:aa:c2:45:
                    df:0d:8c:91:34:5f:cc:00:ba:85:f9:e5:77:c2:b8:
                    8d:77:07:2f:29:ab:51:5b:e0:6e:93:de:f0:c1:dc:
                    45:a8:7f:c1:9b:52:90:fa:29:29:94:91:b3:db:2e:
                    01:fc:75:bd:24:a5:87:b2:aa:ac:63:1e:a5:af:fc:
                    a5:c6:49:e1:4e:3d:cd:ac:38:56:2f:ce:d9:6c:f5:
                    1d:19:50:97:9e:c2:0c:0c:1a:32:f3:ac:8a:04:e0:
                    c1:37:7e:85:56:bb:ed:45:e9:ca:3d:19:4f:5e:f7:
                    07:7d:9e:df:1d:e1:f8:1d:1b:03:ce:12:6e:8c:57:
                    ac:62:ee:4c:ad:60:ad:2d:50:a5:0d:5e:be:4d:c4:
                    b3:29:d4:61:2b:63:4a:30:e0:92:fb:7b:60:05:31:
                    f8:c7:f3:f4:00:79:c0:bd:3e:9f:52:42:9f:ec:3e:
                    ed:bf:b9:12:d4:24:62:54:94:71:3d:61:6a:27:a0:
                    b7:dd:45:cb:4a:48:0d:8a:9c:d9:24:ef:9d:d3:c5:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:39:24:EB:5A:42:7A:0D:B6:58:BF:26:2F:95:3F:E6:AF:70:B5:12
            X509v3 Authority Key Identifier:
                keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4e:a6:c3:68:b7:8d:12:1a:ef:ce:ca:a4:5c:25:22:43:a4:
         06:62:3d:4b:d5:ff:43:8c:15:94:e3:00:a6:dd:0a:4f:89:ad:
         c1:82:ed:a6:48:0c:41:82:f1:de:0d:8f:3d:83:0b:20:b2:c6:
         9a:69:ad:91:cd:5a:b4:d7:b3:2b:3e:b8:34:03:43:6d:d0:bc:
         d3:67:e4:f8:a6:12:40:51:88:4a:c8:de:08:90:a8:20:cb:b3:
         db:62:06:50:ab:0a:54:cd:79:6a:ac:fe:e6:17:ba:2b:ee:49:
         ce:6d:38:09:55:e5:8a:35:d3:bc:f0:bd:52:5a:2e:9a:13:48:
         e0:e6:b9:14:a5:26:a5:1b:92:a3:e4:db:2c:07:ce:50:11:e7:
         8c:1a:62:36:e2:4c:c7:7f:7a:7b:bb:f7:78:a4:08:57:48:7c:
         bb:d9:83:a2:94:9c:f8:38:4e:7b:8a:f3:05:3c:7d:70:86:c7:
         40:47:04:1c:ac:04:a8:6a:70:2a:12:69:25:87:f4:62:37:c3:
         d1:5c:6b:7f:42:65:5b:e4:28:2c:a1:af:33:2d:0b:91:5e:a6:
         33:e0:22:24:b1:03:63:44:9b:04:be:a8:16:be:89:0e:e9:75:
         e1:d3:cb:b7:ba:83:ca:20:6f:f2:37:0a:0a:67:f2:02:7c:fc:
         cc:12:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:51:47 2026 by rpki-client