This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File:                     Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier:          9FmWNiYT0tJp7MNE/fCKk1rGbeBWf8qgMkU2huauU8k=
Subject key identifier:   4D:CD:C2:EC:D8:1E:DE:F7:81:0E:D5:80:12:26:60:62:3A:6A:F3:C8
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer:       /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial:       2626
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number:          260C
Signing time:             Sat 24 Jan 2026 15:33:48 +0000
Manifest this update:     Sat 24 Jan 2026 15:33:47 +0000
Manifest next update:     Sat 31 Jan 2026 15:33:47 +0000
Files and hashes:         1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: 0+qe5WkQXI9hyDQQ88rhAjCdzXcn3MRnzV9wglIcEGg=)
                          2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 41BdfwHnGG7Imzeq7lbaqU4+u/YDHu3w/vuTNhAYy2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9766 (0x2626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
        Validity
            Not Before: Jan 24 15:33:47 2026 GMT
            Not After : Jan 31 15:33:47 2026 GMT
        Subject: CN=6974e65b-7316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:40:78:3f:4e:5e:7b:fd:0c:17:0e:11:76:ef:
                    72:85:1b:44:0d:f6:eb:4e:16:f2:ad:35:14:f2:e3:
                    9c:24:94:61:dd:07:52:76:fa:42:fa:49:8e:f2:91:
                    96:28:5b:56:c1:e0:0f:fa:43:98:57:3e:5c:56:33:
                    79:02:6d:07:46:9d:b7:aa:6c:9b:4c:70:68:79:68:
                    8e:a1:01:b9:e3:4b:71:43:3e:66:9b:7a:d5:a9:ed:
                    bb:2d:a4:fb:63:8c:61:3a:a1:54:8c:09:9e:c7:f3:
                    be:f0:58:19:93:f8:0f:00:ff:13:4f:16:31:37:ab:
                    ee:1c:a1:e0:41:2a:08:fd:e4:4f:b9:f7:89:11:a2:
                    69:c4:5c:74:1e:9a:9e:66:a3:15:89:fb:75:56:6b:
                    56:07:87:03:0d:ec:0c:ce:9e:f4:8c:1b:34:f6:78:
                    ca:62:02:34:23:f6:4f:a6:da:b0:d7:00:01:26:16:
                    71:51:c7:82:c0:58:d2:06:ee:47:b0:e7:96:76:d3:
                    a4:7b:37:d9:65:86:f5:5f:5c:99:6c:1a:cd:7c:39:
                    58:46:8e:3d:ce:1a:5b:4c:20:8a:be:01:f3:21:76:
                    70:b0:ec:76:05:8f:08:56:ec:ec:42:a4:f5:07:68:
                    38:db:a1:f3:ec:dc:12:e9:b6:18:c5:31:13:6e:8e:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CD:C2:EC:D8:1E:DE:F7:81:0E:D5:80:12:26:60:62:3A:6A:F3:C8
            X509v3 Authority Key Identifier:
                keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c2:3b:d8:7b:8a:5a:bd:ab:86:77:c5:0b:aa:0f:80:1c:8f:
         d0:8a:e3:07:45:79:54:f5:18:4e:e3:76:c5:54:c2:4c:01:2f:
         5b:62:09:77:09:e0:af:cf:d1:f1:22:17:61:7f:10:bd:aa:ee:
         72:29:08:5e:22:51:89:73:c1:23:19:f9:ee:2d:da:2c:2d:d7:
         7f:e4:89:a5:6d:16:76:fd:68:5f:70:52:64:5c:e1:8e:b9:ee:
         b2:42:93:5e:43:40:d3:23:33:e4:e3:9a:e0:6b:6a:3e:c6:25:
         57:0e:4a:08:ec:14:9b:30:85:e3:f3:df:8e:49:3a:bd:3c:3b:
         59:bd:ca:db:2b:96:3d:ef:ad:19:4d:5b:fa:85:11:53:06:3e:
         7f:8c:08:72:43:de:98:a8:24:76:02:19:91:d5:88:da:e7:ce:
         c0:71:cd:9e:15:a4:04:dc:e3:b4:1a:76:5b:ba:32:24:ca:12:
         7b:39:d2:37:0a:84:ec:ad:b1:b2:09:e6:d7:07:84:69:58:35:
         ac:0b:4f:d5:2d:b9:0e:9f:23:fc:27:9f:62:3e:a2:9f:dc:7b:
         1b:6a:04:bf:7c:46:0c:3a:82:a3:e9:1e:f1:97:fa:73:65:7b:
         97:3a:46:3a:58:43:cc:17:b9:9f:d4:13:67:6b:29:bd:e0:ed:
         47:58:10:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE
QzZGRjNFNjIwHhcNMjYwMTI0MTUzMzQ3WhcNMjYwMTMxMTUzMzQ3WjAYMRYwFAYD
VQQDDA02OTc0ZTY1Yi03MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5UB4P05ee/0MFw4Rdu9yhRtEDfbrThbyrTUU8uOcJJRh3QdSdvpC+kmO8pGW
KFtWweAP+kOYVz5cVjN5Am0HRp23qmybTHBoeWiOoQG540txQz5mm3rVqe27LaT7
Y4xhOqFUjAmex/O+8FgZk/gPAP8TTxYxN6vuHKHgQSoI/eRPufeJEaJpxFx0Hpqe
ZqMVift1VmtWB4cDDewMzp70jBs09njKYgI0I/ZPptqw1wABJhZxUceCwFjSBu5H
sOeWdtOkezfZZYb1X1yZbBrNfDlYRo49zhpbTCCKvgHzIXZwsOx2BY8IVuzsQqT1
B2g426Hz7NwS6bYYxTETbo7RJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3NwuzY
Ht73gQ7VgBImYGI6avPIMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz
MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly
Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6wjvYe4pavauGd8ULqg+AHI/QiuMHRXlU9RhO43bFVMJMAS9bYgl3
CeCvz9HxIhdhfxC9qu5yKQheIlGJc8EjGfnuLdosLdd/5ImlbRZ2/WhfcFJkXOGO
ue6yQpNeQ0DTIzPk45rga2o+xiVXDkoI7BSbMIXj89+OSTq9PDtZvcrbK5Y9760Z
TVv6hRFTBj5/jAhyQ96YqCR2AhmR1Yja587Acc2eFaQE3OO0GnZbujIkyhJ7OdI3
CoTsrbGyCebXB4RpWDWsC0/VLbkOnyP8J59iPqKf3HsbagS/fEYMOoKj6R7xl/pz
ZXuXOkY6WEPMF7mf1BNnaym94O1HWBAE
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:57 2026 by rpki-client