This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
File:                     Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json)
Hash identifier:          ut5AATUZMXCuB2WEu1yInuK5hdTMZFCOkBylbkhuiKo=
Subject key identifier:   70:38:9E:5F:A4:F0:20:25:F7:65:64:A7:0E:3D:D7:13:5F:25:5C:94
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       0425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
Manifest number:          041C
Signing time:             Sat 24 Jan 2026 23:34:30 +0000
Manifest this update:     Sat 24 Jan 2026 23:34:29 +0000
Manifest next update:     Sat 31 Jan 2026 23:34:29 +0000
Files and hashes:         1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: /Owy9Ut0rSqsZ3wcMoD+StMXQWWVnTcLrVNMRg0ivjw=)
                          2: 728139D62FA311F0A9129814C4F9AE02.roa (hash: guIJtqQN+EFa/f6cWPw4iUlLONR7odnIq46PWDEQXBE=)
                          3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: Um+5nEX9UGWaeunNGOXHeeYETiEJM95laBvW70lUPDE=)
                          4: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: EglzY5P8gEG+IosP670+janTnu12u5QYgDoCSiDyeR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: Jan 24 23:34:29 2026 GMT
            Not After : Jan 31 23:34:29 2026 GMT
        Subject: CN=69755706-c88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:98:09:03:68:09:18:51:e1:b0:dc:94:85:
                    c0:01:6e:3d:da:e5:ce:e2:b5:e6:d3:61:28:25:b5:
                    06:3d:bc:ce:1c:6c:aa:db:df:f2:e3:59:64:0b:3c:
                    c6:43:0d:00:a2:08:32:60:2a:ee:d7:79:01:a9:0d:
                    80:e0:c9:8f:0a:57:2f:28:d5:bd:4e:0d:a8:28:66:
                    31:2c:4f:5f:de:7e:17:0b:72:1e:50:b1:1d:18:f4:
                    ab:53:f2:35:44:7a:87:05:2f:f2:1e:b1:7c:4a:8b:
                    c8:72:97:ac:0e:79:46:1f:4f:fd:6b:72:0a:6d:88:
                    85:74:d0:29:c4:6d:54:6d:88:5a:6e:20:cb:71:18:
                    7f:aa:9c:10:34:54:c5:54:cb:eb:c2:4a:a5:f0:bb:
                    49:ea:4a:14:45:e9:36:31:db:c7:6d:d6:97:03:9f:
                    72:a1:2b:a6:e5:25:c5:3e:6e:4f:4b:12:29:36:ed:
                    a4:c3:59:1e:ab:8f:28:a4:99:28:b8:b8:ca:ea:33:
                    c4:cb:33:cb:a9:16:b3:95:ff:c0:2e:1e:f2:69:fa:
                    4c:e7:72:6e:62:ff:38:45:7a:e2:5c:c0:7f:66:97:
                    24:3a:bc:b0:4c:0c:83:78:2c:75:99:3f:c4:aa:16:
                    f8:68:83:49:ec:a1:6b:84:1b:7f:bc:ec:9d:f8:cb:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:9E:5F:A4:F0:20:25:F7:65:64:A7:0E:3D:D7:13:5F:25:5C:94
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2a:a7:e0:c5:ff:99:1d:c4:95:e6:6f:72:69:83:ba:aa:69:
         92:3c:9e:cc:41:2c:0b:80:4b:2d:de:16:4b:7c:51:f3:cf:30:
         fa:86:6d:f0:26:d6:69:36:99:c5:80:ee:63:d2:86:5b:44:08:
         67:d8:d1:06:af:ed:fc:3c:58:1c:6c:e2:80:aa:cd:2d:90:72:
         2f:1b:f3:9d:ef:1c:4b:f4:6b:d1:fb:65:99:9d:5c:c9:5f:4f:
         7e:0b:1c:97:0e:c9:e5:28:13:f9:c5:18:8b:d7:04:a0:59:b2:
         80:f9:a8:35:d5:69:5a:de:46:11:d6:5e:3b:d3:f9:33:4e:96:
         68:a7:39:1c:a9:c1:09:8d:41:79:a0:1b:ba:0e:61:d3:ce:38:
         44:3b:f9:8d:74:66:5e:72:fa:71:a4:c4:a3:e2:c0:6e:a5:a1:
         2a:55:5c:e0:8c:24:4c:e5:af:28:75:b2:2c:c0:94:33:a9:53:
         86:15:0b:5c:93:7a:de:fe:d7:02:7f:27:8d:35:5d:93:40:17:
         85:12:50:56:10:b4:41:fa:dc:16:c4:d5:7f:35:34:76:a2:c5:
         54:d9:12:aa:25:b4:44:85:64:29:8e:ea:4d:37:f0:bc:4c:bd:
         cc:a2:f8:f0:1d:93:eb:f1:7e:f1:3e:10:93:6a:2b:ed:ca:6d:
         a0:d1:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:02 2026 by rpki-client