This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
File:                     XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json)
Hash identifier:          1C97Kt7q6uLMis1KxoWailCgoP4wmnedBQNpn/krfwM=
Subject key identifier:   3C:F0:4E:60:86:DA:B4:28:A4:5A:1E:3A:04:A5:E6:F9:0D:B1:C0:C2
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0C58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
Manifest number:          0B19
Signing time:             Sat 24 Jan 2026 19:20:04 +0000
Manifest this update:     Sat 24 Jan 2026 19:20:04 +0000
Manifest next update:     Sat 31 Jan 2026 19:20:04 +0000
Files and hashes:         1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: hReN2VcpgENHmaBqs+wY/Em7hJsbMYKX6UwuasvyKg8=)
                          2: CED9053CE35211EDB7F6B44EC4F9AE02.roa (hash: xTtZn9aZIB/fSzr6F1pFXv9qqXV1JjTBS40WClRRCIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3160 (0xc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Jan 24 19:20:04 2026 GMT
            Not After : Jan 31 19:20:04 2026 GMT
        Subject: CN=69751b64-68ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:33:a4:a6:13:69:33:ff:f8:d0:7d:da:27:
                    5b:35:71:06:12:8d:7c:78:dc:3f:ec:7a:da:91:09:
                    05:50:ce:a7:74:6a:ea:44:e0:7c:27:c3:95:69:b3:
                    85:16:d5:cf:b3:bc:29:03:ff:36:d4:da:d7:dd:67:
                    4c:54:bf:77:53:91:b3:4b:11:48:dd:b5:dd:80:63:
                    25:fa:4e:a3:9c:82:8d:93:4d:c5:d3:83:fa:ba:4e:
                    95:ee:d7:2f:1a:e9:3c:d1:dc:e9:02:42:8f:29:b7:
                    28:66:92:55:6b:10:31:c6:2e:8c:85:ac:41:93:62:
                    9a:30:3c:b2:4d:e7:ef:b1:22:b5:1c:5a:a2:ee:03:
                    8b:71:42:55:ce:d7:e4:3b:8e:1a:bf:78:d7:01:ce:
                    d6:5c:f2:ac:bf:87:b7:8c:02:dd:d4:d8:87:10:50:
                    29:c9:3d:e0:44:5e:27:fa:5e:62:1f:e5:93:a7:3b:
                    14:d6:53:92:02:ba:14:d7:3e:37:3d:e5:18:07:f0:
                    a9:3e:6e:87:52:bb:1a:46:6b:3b:4e:57:53:4d:ee:
                    1a:35:a2:a4:9c:8e:57:b2:73:d6:eb:1e:4b:98:eb:
                    e1:72:45:8b:97:53:9e:4c:34:85:d0:e2:8d:53:88:
                    75:44:98:40:ae:e5:50:3f:4b:94:7d:d7:c5:31:62:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F0:4E:60:86:DA:B4:28:A4:5A:1E:3A:04:A5:E6:F9:0D:B1:C0:C2
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2f:c3:91:2e:e5:2a:19:ca:e4:66:1b:aa:83:75:0f:a5:42:
         c9:c5:b2:17:8a:7b:0a:13:87:6c:6d:38:e2:76:0d:ba:50:c1:
         ee:a4:67:f1:23:d1:4b:5a:59:23:76:eb:86:2a:0d:6c:a2:c8:
         eb:06:c4:77:e3:3f:5c:1a:f9:f3:10:ac:f8:ef:69:c1:dd:e1:
         8d:38:04:7f:80:94:8c:1c:0f:23:bd:bb:81:fb:9f:89:e8:a3:
         34:1b:65:ea:fa:ed:fd:a2:d5:4e:05:b4:02:ff:c0:ba:df:72:
         ee:d1:7c:60:a2:db:6a:0e:2a:db:b0:a8:25:4a:e7:ea:3c:47:
         d8:9f:86:c8:38:fb:1e:6c:b0:e7:d3:f0:81:76:2e:00:8c:a9:
         5a:9c:b2:dc:d7:22:5f:f3:d1:c9:6c:5e:c2:69:29:05:ed:74:
         d8:60:ff:ec:c7:d1:77:73:e2:5d:b7:0e:6b:d5:e3:8a:cd:33:
         12:36:d4:c9:41:32:b4:bc:06:5b:f2:56:58:55:3f:43:3a:57:
         8c:5e:cb:dd:b8:9c:98:66:9a:b9:b2:0f:b5:9c:27:4d:6d:d8:
         08:e5:1b:b2:3b:4f:0d:5b:44:31:1c:40:4e:dd:13:10:a4:b1:
         59:14:2f:51:02:24:f0:79:e8:dc:8f:be:51:b9:1c:49:2d:40:
         6a:97:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:14 2026 by rpki-client