This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
File:                     MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json)
Hash identifier:          vAjTCMXOSdGZFHRU/qureZFd9+wTq2fRlyniplINsZk=
Subject key identifier:   A0:4C:6F:3C:EA:2F:9B:12:60:CD:8E:50:8D:3E:0F:3E:F9:2E:C3:09
Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
Certificate issuer:       /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Certificate serial:       11CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
Manifest number:          11C3
Signing time:             Sat 24 Jan 2026 16:54:20 +0000
Manifest this update:     Sat 24 Jan 2026 16:54:19 +0000
Manifest next update:     Sat 31 Jan 2026 16:54:19 +0000
Files and hashes:         1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: WVkbx8gqdrhBbgzVzi3QJoa9AtM6nlyEL5Wj77Cgsyk=)
                          2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
                          rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4559 (0x11cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
        Validity
            Not Before: Jan 24 16:54:19 2026 GMT
            Not After : Jan 31 16:54:19 2026 GMT
        Subject: CN=6974f93c-3bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:d7:c1:dd:17:e6:15:a7:64:1e:64:d1:89:
                    81:c7:f3:18:7f:1f:85:ff:94:71:05:b1:76:bf:c5:
                    d8:d6:5c:06:f6:ec:e7:bb:ab:19:27:10:41:79:51:
                    a9:93:b8:94:f8:b9:39:f2:4e:1e:84:16:61:bb:49:
                    7a:b9:13:d5:66:24:26:ab:e9:ff:13:4d:d6:a7:26:
                    f8:ab:b0:5e:c2:70:b9:ef:ee:7f:77:f5:04:ec:a5:
                    86:b5:4e:02:84:4b:b4:3c:92:17:0a:dc:7c:91:5b:
                    43:28:2b:49:88:ce:12:ea:5f:a9:96:c8:35:9c:ee:
                    dd:a9:e1:4c:49:a6:ed:a6:ff:a9:5c:c3:9d:f3:18:
                    c6:ed:1f:e6:c6:71:d8:df:49:ae:3c:43:f9:70:e2:
                    87:2b:08:fc:97:0e:c6:f8:d0:13:36:41:4c:79:c0:
                    34:15:ff:a3:c4:fd:a2:f6:4b:57:40:6d:30:77:d3:
                    13:0d:d6:71:e7:39:4c:58:c3:41:d8:08:29:f0:c2:
                    d2:21:b4:72:6b:29:71:21:b0:cf:6e:0c:d0:7f:5a:
                    b4:a9:01:25:bf:46:cc:db:9b:cb:1b:8c:3e:39:e5:
                    a6:cd:6d:d9:61:ed:1f:5c:88:39:e2:3f:8c:24:1f:
                    aa:c3:a8:f8:f6:2a:97:de:f5:07:96:83:76:47:0e:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4C:6F:3C:EA:2F:9B:12:60:CD:8E:50:8D:3E:0F:3E:F9:2E:C3:09
            X509v3 Authority Key Identifier:
                keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:97:42:b2:f6:2d:e7:99:1d:cc:e8:f1:41:11:ce:5d:a4:74:
         71:69:48:3b:65:78:45:1f:0e:67:87:03:0a:8d:ef:cc:54:de:
         29:54:c7:35:b9:00:e3:a5:51:fe:9f:33:9e:eb:87:ac:35:98:
         a8:3d:5b:b3:70:63:29:0a:c6:31:d5:a3:36:1b:22:62:f6:53:
         dc:31:7a:54:bc:cb:e1:1e:d9:85:b9:06:ff:d2:cc:ab:86:05:
         72:3b:c0:a3:61:ce:26:ff:76:5f:e2:c7:c5:18:c0:d6:44:d7:
         7e:96:12:41:77:39:34:d2:20:ff:0d:a0:2c:01:c3:25:4e:e0:
         db:d1:39:17:5a:a8:cb:d9:a4:57:54:24:be:84:b5:53:2f:84:
         4e:05:0e:27:11:53:20:a9:f4:4e:db:6c:6a:0b:15:a9:c5:b1:
         a7:cf:78:76:7b:1e:c1:e5:8b:84:ba:de:d5:f3:f2:87:fb:de:
         f3:1f:5d:0a:19:5e:40:7e:37:07:a5:a6:c3:1c:b5:2e:dd:78:
         fb:30:7c:9b:e5:5e:47:79:bc:d5:c0:63:08:56:c8:14:59:7b:
         13:4d:6b:10:e4:39:1f:43:5a:47:a2:07:d2:48:fd:3b:c2:dc:
         0e:1c:74:ea:8e:3b:89:93:07:76:26:7b:ef:42:a0:d3:35:23:
         e3:e0:4d:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG
N0YyOTVGMzUwHhcNMjYwMTI0MTY1NDE5WhcNMjYwMTMxMTY1NDE5WjAYMRYwFAYD
VQQDDA02OTc0ZjkzYy0zYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApEjXwd0X5hWnZB5k0YmBx/MYfx+F/5RxBbF2v8XY1lwG9uznu6sZJxBBeVGp
k7iU+Lk58k4ehBZhu0l6uRPVZiQmq+n/E03Wpyb4q7BewnC57+5/d/UE7KWGtU4C
hEu0PJIXCtx8kVtDKCtJiM4S6l+plsg1nO7dqeFMSabtpv+pXMOd8xjG7R/mxnHY
30muPEP5cOKHKwj8lw7G+NATNkFMecA0Ff+jxP2i9ktXQG0wd9MTDdZx5zlMWMNB
2Agp8MLSIbRyaylxIbDPbgzQf1q0qQElv0bM25vLG4w+OeWmzW3ZYe0fXIg54j+M
JB+qw6j49iqX3vUHloN2Rw5n1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBMbzzq
L5sSYM2OUI0+Dz75LsMJMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4
RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt
cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZl0Ky9i3nmR3M6PFBEc5dpHRxaUg7ZXhFHw5nhwMKje/MVN4pVMc1
uQDjpVH+nzOe64esNZioPVuzcGMpCsYx1aM2GyJi9lPcMXpUvMvhHtmFuQb/0syr
hgVyO8CjYc4m/3Zf4sfFGMDWRNd+lhJBdzk00iD/DaAsAcMlTuDb0TkXWqjL2aRX
VCS+hLVTL4ROBQ4nEVMgqfRO22xqCxWpxbGnz3h2ex7B5YuEut7V8/KH+97zH10K
GV5AfjcHpabDHLUu3Xj7MHyb5V5HebzVwGMIVsgUWXsTTWsQ5DkfQ1pHogfSSP07
wtwOHHTqjjuJkwd2JnvvQqDTNSPj4E1+
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:54 2026 by rpki-client