This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File:                     xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier:          htwa/4D6TuuyPdOrhKOn8SXzDLgdXj6YC8Dj+FCVqyQ=
Subject key identifier:   68:CF:C2:5E:05:E3:2A:92:75:A0:0B:DE:C2:E5:7B:32:57:6F:86:14
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       197C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number:          16FF
Signing time:             Sat 24 Jan 2026 16:36:42 +0000
Manifest this update:     Sat 24 Jan 2026 16:36:42 +0000
Manifest next update:     Sat 31 Jan 2026 16:36:42 +0000
Files and hashes:         1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: qFsR938FJwcQ21xVV6ROoIdIO4DqtH8JaqJpjOtYRek=)
                          2: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=)
                          3: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=)
                          4: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=)
                          5: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=)
                          6: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=)
                          7: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=)
                          8: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=)
                          9: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=)
                          10: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=)
                          11: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=)
                          12: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=)
                          13: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=)
                          14: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=)
                          15: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=)
                          16: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=)
                          17: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=)
                          18: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=)
                          19: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: CMTbivAHiLt7IGuG9Zl/8u4+Wi8bG4wbS4CS9kYqibQ=)
                          20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=)
                          21: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: PhtIjk4F8qicxHCPa3M1pD7mYKM3aiiiB5qzhUq+7Z4=)
                          22: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=)
                          23: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=)
                          24: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: p3V1TkPkOKZZRgKf9ScjW2MsPaj6aSrEqMXWPTT5ufg=)
                          25: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=)
                          26: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=)
                          27: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6524 (0x197c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Jan 24 16:36:42 2026 GMT
            Not After : Jan 31 16:36:42 2026 GMT
        Subject: CN=6974f51a-1bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:e9:ce:1e:72:77:ca:fa:f9:81:18:9e:58:
                    73:9c:60:e9:5f:8d:2a:ac:40:05:ea:8e:35:a0:38:
                    88:4c:4f:92:dc:a2:5d:fb:2a:a5:11:31:65:b1:fe:
                    ef:78:70:21:00:28:b1:d0:db:d3:68:4a:92:6a:d9:
                    be:7b:bc:1f:ed:97:fd:c6:43:74:9f:d3:e1:6b:e9:
                    40:c6:05:f3:25:4e:0b:40:86:a0:b7:a2:5b:07:22:
                    d2:ba:1a:54:cc:70:a1:27:ac:98:c5:bf:c6:86:b3:
                    57:76:60:97:e1:74:cf:60:ea:2a:93:79:65:66:8e:
                    e8:6e:77:71:96:8f:d4:bc:33:7d:76:96:f2:0f:02:
                    c1:c8:ce:8a:ed:be:e2:9c:41:90:66:13:a3:6f:a0:
                    f3:08:bc:9a:e7:48:cf:c4:c1:cc:f4:1d:cf:0e:9e:
                    58:f0:2b:b4:7f:39:f0:1d:c2:8c:4a:83:8a:f3:76:
                    44:fc:08:bd:be:03:9c:71:24:ec:b6:5c:48:f7:fb:
                    1c:f6:21:ad:c7:d3:d3:4c:82:98:44:04:de:c5:b5:
                    f9:23:63:33:76:34:e0:0a:c0:7a:23:e9:49:25:b4:
                    69:61:ee:ac:dc:70:d7:b3:47:d7:70:38:8d:56:e2:
                    30:3d:b7:d4:f9:2b:5c:c6:f3:01:4b:6a:8b:d0:48:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CF:C2:5E:05:E3:2A:92:75:A0:0B:DE:C2:E5:7B:32:57:6F:86:14
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:67:05:08:fc:bc:4b:f8:c5:35:17:3b:c4:c2:fd:33:72:25:
         a6:9d:65:c7:fa:1a:63:a7:23:a9:30:0c:df:17:22:f1:ce:af:
         17:65:0f:47:7f:a6:4d:2a:d9:38:f7:01:44:e2:1b:8a:ec:64:
         3c:8c:7a:3e:fc:10:26:a4:23:a2:60:c5:dc:e3:c0:77:fb:30:
         9d:bd:93:4e:a2:60:aa:d6:c9:af:e4:c2:d2:a7:f8:66:1e:2f:
         e2:37:48:1f:09:24:b6:10:02:88:17:f0:95:da:0f:f2:7b:13:
         b0:f2:74:4c:c3:d8:94:42:30:c8:f4:50:b4:fc:23:cf:88:f5:
         d0:a1:bf:ec:0b:ae:e9:c5:52:4e:1f:49:d9:76:9a:e0:cf:d4:
         8a:7f:d9:48:a9:0b:72:9d:1f:aa:ad:03:43:ea:cf:4b:b3:22:
         4b:a5:7c:70:cc:a8:30:ad:e9:f3:81:1a:2d:52:13:3b:2e:1f:
         44:2d:ed:17:93:8b:9a:5d:1c:a5:f2:20:78:e2:8c:f5:0f:2f:
         6c:43:2c:8f:d9:f0:9c:ee:ac:42:85:eb:c8:b7:85:b0:db:24:
         9f:15:df:5b:df:96:cd:7e:5f:3c:d4:ea:50:3b:1f:31:21:7d:
         f7:16:03:52:6a:35:d5:d8:b0:81:7a:ba:7d:3e:f3:fa:62:fb:
         d1:df:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:49:42 2026 by rpki-client