This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
File:                     sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json)
Hash identifier:          +8zup3EqCPKI8Ii4u9ocDqd0LVS/37DAR6K72R2kNag=
Subject key identifier:   2F:49:C1:D2:49:FF:86:93:DB:A1:BD:67:36:93:5D:18:A5:77:29:35
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Certificate issuer:       /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial:       0474
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
Manifest number:          0467
Signing time:             Sat 24 Jan 2026 23:20:53 +0000
Manifest this update:     Sat 24 Jan 2026 23:20:53 +0000
Manifest next update:     Sat 31 Jan 2026 23:20:53 +0000
Files and hashes:         1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: Q7TiPzhNRUzDwheeEUJzrzIX0RYbDFMkkZlOtNWPPYs=)
                          2: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=)
                          3: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
                          rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
        Validity
            Not Before: Jan 24 23:20:53 2026 GMT
            Not After : Jan 31 23:20:53 2026 GMT
        Subject: CN=697553d5-110c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:86:d9:f0:a6:20:06:0d:67:94:64:27:17:
                    74:51:91:28:e6:3a:69:54:94:99:0a:00:d2:12:f4:
                    91:a7:ca:04:da:72:a2:ff:c0:cf:32:49:02:3f:1f:
                    57:1e:6e:58:e4:c7:69:c5:0d:93:fb:3f:96:33:09:
                    c4:ca:2b:96:82:48:7a:1b:8d:e8:3a:82:15:78:6b:
                    0e:54:ad:98:57:2b:38:aa:cb:6b:d9:4c:64:af:6f:
                    72:28:71:f4:ac:5b:2a:db:1b:64:60:a6:b3:de:cd:
                    34:52:fc:f4:c2:39:88:c2:cc:27:06:e7:d2:47:c2:
                    94:db:a1:2a:98:1f:26:27:76:4d:bd:1a:a1:8a:d6:
                    fc:f0:ef:27:5a:13:87:6d:37:70:f9:89:b4:b7:9c:
                    d7:27:b8:55:9a:70:b2:66:11:52:c0:0a:25:84:bf:
                    ff:32:f7:04:c3:02:2d:68:ec:fc:37:61:c0:69:36:
                    26:d0:29:0e:37:fc:53:5c:4f:76:35:cb:44:4b:19:
                    97:5c:0b:4f:21:47:2d:78:4a:60:bf:3f:3d:0b:a8:
                    0d:c1:32:56:ef:a8:e7:39:c5:6b:20:36:39:cb:52:
                    06:ff:85:3b:7d:bc:05:98:48:0a:de:ea:28:6c:2b:
                    54:f3:b2:94:79:27:8d:20:8c:9b:5d:65:cb:dd:11:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:C1:D2:49:FF:86:93:DB:A1:BD:67:36:93:5D:18:A5:77:29:35
            X509v3 Authority Key Identifier:
                keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:57:64:eb:0f:10:4d:21:ed:2e:17:c3:eb:87:bc:0d:bc:
         6d:17:3a:a7:88:fc:f1:b4:33:85:33:13:da:1b:d7:cc:52:8d:
         c3:ef:75:77:81:54:51:8b:00:66:92:9e:87:4f:6a:d0:2f:bd:
         fc:5b:4a:6e:22:4b:a8:e5:16:50:2c:23:f5:4f:40:b6:ec:7d:
         4a:04:75:6e:0e:83:4d:7d:c0:e6:3b:83:2c:57:5c:c2:98:8b:
         59:9d:dc:58:cb:d6:82:1e:7e:a3:43:e3:ca:63:f5:01:59:29:
         2e:b4:39:8c:b2:5c:11:44:65:29:c5:cf:fb:8a:3b:c3:f4:20:
         52:cc:15:9f:7f:2d:fa:69:46:1e:63:7b:f3:c6:3f:cb:90:e5:
         8e:46:00:10:ca:14:05:5b:d7:c3:33:4c:25:7d:1e:48:41:1e:
         d1:aa:db:0d:69:c4:72:92:23:55:12:18:18:50:74:f2:32:df:
         29:2b:d8:31:31:20:5b:98:01:70:4c:b3:1f:22:08:e8:e3:d6:
         f6:4e:34:c7:af:ee:22:dc:e7:11:e4:6c:47:b6:ee:ed:0a:1e:
         ca:a9:ed:61:80:d2:16:b3:37:56:71:b3:40:bb:53:ca:12:44:
         ce:94:a3:e5:d8:62:1a:77:6f:38:92:12:a0:b2:2e:ef:1a:f7:
         b3:b0:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:02 2026 by rpki-client