This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
File:                     8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json)
Hash identifier:          3Vqs26TPEQBLAF5RMQBCUL37IsNA+e9XHGdgrrqCp1o=
Subject key identifier:   8E:68:83:75:EF:9C:B5:37:CF:D1:86:94:B7:79:D7:74:C6:6D:2D:35
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Certificate issuer:       /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial:       0552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
Manifest number:          054C
Signing time:             Sat 24 Jan 2026 22:40:16 +0000
Manifest this update:     Sat 24 Jan 2026 22:40:15 +0000
Manifest next update:     Sat 31 Jan 2026 22:40:15 +0000
Files and hashes:         1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: XwH71HyPRVTgl4atHnINlcF407Lc4JSWzk9DCirWGE0=)
                          2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: RdBtknBPNwvXkD2UTwIXLTTCijG72Y4zCJ0N8YgUu8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
        Validity
            Not Before: Jan 24 22:40:15 2026 GMT
            Not After : Jan 31 22:40:15 2026 GMT
        Subject: CN=69754a50-adf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:01:b7:6d:33:26:cb:e3:7e:40:f0:ee:1a:
                    a4:94:59:03:ff:a2:2c:2f:f7:88:e6:f2:17:98:06:
                    ff:f5:5c:c9:1b:b2:06:5f:39:c6:45:36:4e:aa:ef:
                    6b:ef:c7:a7:ce:a0:c8:b9:ec:3d:57:4b:ff:9c:63:
                    eb:8d:70:f8:ce:04:9b:db:c9:21:f7:00:2a:21:b8:
                    99:a3:7f:60:f2:eb:da:37:07:3a:39:38:0b:c3:c1:
                    5e:57:ed:6b:bd:3c:1e:ff:9d:66:3e:8d:5b:e6:34:
                    51:2b:40:4d:ab:de:dc:48:ab:82:c6:b3:9e:c5:c9:
                    36:fd:a2:61:f8:c5:66:db:92:ae:c3:56:17:ce:c7:
                    06:74:39:cc:50:e2:25:37:82:4e:70:55:fc:56:24:
                    7b:90:20:00:5d:22:1b:12:fd:6f:ba:5b:b9:8f:60:
                    0a:38:78:28:5b:d2:36:23:77:e8:30:45:27:d5:80:
                    08:ec:e2:42:fe:fb:07:3c:81:80:46:84:58:d1:34:
                    97:a6:71:f1:27:54:ec:0e:02:d3:ee:fd:e3:ce:69:
                    08:14:e2:28:12:62:d0:e3:c7:bf:22:5c:e2:17:d7:
                    bd:dd:f5:b9:2d:50:63:10:64:bf:5b:2a:de:ae:17:
                    ae:36:6b:c4:44:90:34:16:b8:2d:19:0e:f2:54:13:
                    77:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:68:83:75:EF:9C:B5:37:CF:D1:86:94:B7:79:D7:74:C6:6D:2D:35
            X509v3 Authority Key Identifier:
                keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:c9:1e:f0:77:23:04:36:40:b9:c7:4f:cb:d1:90:49:20:
         ba:e0:3c:72:25:27:7d:52:57:13:6d:80:2f:f0:dc:ef:a6:8a:
         3e:40:05:dd:9e:53:6b:85:f6:01:56:23:2a:b8:ad:28:17:dd:
         c0:11:1b:f0:2f:29:6f:06:9d:ad:95:48:01:f6:45:05:14:c7:
         b9:e8:21:20:e3:fe:e0:74:57:df:9b:d5:e8:08:68:31:66:26:
         a8:8c:92:98:44:fa:3b:ed:6a:34:41:59:50:0f:7b:34:41:c8:
         bd:dd:7c:2b:fa:89:18:cd:c5:77:bf:45:58:99:a6:df:91:61:
         f4:9b:26:1a:33:f9:ab:d7:32:08:66:94:f7:a8:60:d6:60:af:
         83:d1:ee:38:01:75:e3:ce:34:39:ca:0c:d9:af:60:1f:16:d2:
         c1:9a:eb:20:1b:5a:cd:1e:8c:d8:96:c9:6f:6b:fe:aa:a1:5e:
         78:86:ca:14:24:b9:8e:20:4a:f3:59:43:1c:6c:a2:32:07:7c:
         8c:6d:5e:d2:7b:3c:8b:db:3d:f3:b0:0a:42:a1:07:45:a5:68:
         a0:23:7c:18:f7:24:c6:c7:b2:e2:e7:48:03:f4:15:92:76:df:
         4a:21:cd:1e:69:b9:16:85:aa:1f:4f:92:0a:b7:12:73:2a:7b:
         78:1d:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:29 2026 by rpki-client