This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
File:                     SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json)
Hash identifier:          popT+8EYAyE6pSGq2nxWaoXmw/WY2RsEbETsNsnk1S8=
Subject key identifier:   7F:B5:45:04:A0:AE:E2:10:6B:CA:34:D5:3C:47:A8:A8:1E:FD:CF:DD
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Certificate issuer:       /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
Manifest number:          0242
Signing time:             Sun 25 Jan 2026 01:24:30 +0000
Manifest this update:     Sun 25 Jan 2026 01:24:29 +0000
Manifest next update:     Sun 01 Feb 2026 01:24:29 +0000
Files and hashes:         1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: WqMNnFTqE54X/V+AtY78XKwemuSDckfIYwFpmqbO0/A=)
                          2: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: TCN1AZgzVPw/0NzN3SuEMukcZY6yAiASu/ppodIE8PQ=)
                          3: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
                          rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
        Validity
            Not Before: Jan 25 01:24:29 2026 GMT
            Not After : Feb  1 01:24:29 2026 GMT
        Subject: CN=697570ce-9fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:f9:e1:4e:32:76:39:f2:6a:92:59:4d:ef:
                    c4:7e:9b:33:b0:65:01:a7:4c:df:f9:ae:ed:4b:ae:
                    db:d0:c2:f4:cd:62:c2:38:ed:cd:47:d2:c8:89:d5:
                    10:22:c0:26:7d:74:ee:81:10:d1:4d:e3:86:5b:9e:
                    55:3a:fd:36:c7:e3:0a:5c:a0:90:44:54:ef:3b:b4:
                    aa:99:a9:a5:97:e5:0c:0b:45:b0:35:d8:6b:65:6d:
                    c5:be:6e:87:6f:29:63:4f:23:20:56:2d:4c:7e:2b:
                    29:f3:c7:fe:35:72:92:95:9e:bc:9b:fc:17:9c:02:
                    d8:4c:64:af:7b:fb:90:56:6f:07:ec:cd:5a:6b:16:
                    98:aa:c1:0a:64:56:b7:7a:a5:28:d2:27:7c:19:a1:
                    92:c3:e2:5a:7a:89:ea:80:da:51:70:7d:47:c0:f0:
                    e3:38:e3:ae:16:98:8e:e8:68:f3:79:b3:28:f7:e4:
                    4f:76:8b:14:9b:3d:86:e3:9f:a0:fe:7b:c1:45:93:
                    85:27:81:8b:cd:53:28:c7:45:77:7e:c9:14:5d:93:
                    ad:4a:85:64:e7:0b:4a:cb:65:b4:f1:cd:87:06:c9:
                    d7:6d:e4:90:d9:6a:7a:77:63:ff:cf:65:e7:a6:7c:
                    ab:e4:5f:7d:48:6a:5b:dc:92:f4:ad:a4:66:3d:8c:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B5:45:04:A0:AE:E2:10:6B:CA:34:D5:3C:47:A8:A8:1E:FD:CF:DD
            X509v3 Authority Key Identifier:
                keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:78:e5:57:5c:f9:61:17:cf:18:99:bb:2b:f4:5e:5a:72:78:
         25:30:d0:90:0d:77:2a:65:83:53:19:ef:86:11:ee:2b:a6:b8:
         20:fa:0d:e7:90:96:86:2f:a3:27:63:67:44:b8:50:9b:64:e6:
         89:46:14:6a:b3:9d:84:b2:a7:bc:8b:91:79:ec:14:31:60:72:
         34:71:b5:58:09:89:f7:bf:76:d1:58:3d:5c:e4:d8:c8:ed:53:
         38:5f:ad:93:9b:c1:6d:be:0c:46:ff:06:67:87:a7:3b:82:1b:
         0e:a4:03:37:f0:52:35:03:28:e0:cf:ef:8d:cc:b9:9b:ea:a9:
         bf:09:7c:cd:d5:23:60:65:fb:fb:39:5f:c9:dd:f1:cb:8b:76:
         f7:37:bf:df:04:2a:24:7f:95:27:c9:23:61:ec:44:96:26:b8:
         83:25:dc:c4:21:40:d4:09:02:8c:53:98:66:cb:b6:24:15:ed:
         41:b2:74:07:42:05:27:19:a0:89:26:44:a8:ad:15:62:f5:b5:
         15:a6:06:08:57:04:b1:76:58:3f:39:bb:05:57:52:e1:7b:8d:
         4d:1f:79:44:b6:96:aa:8e:76:bf:ba:36:83:e2:9e:53:35:66:
         b1:f3:70:6c:53:3e:77:22:0b:70:07:ff:80:28:a0:ea:4a:bf:
         32:e0:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:07 2026 by rpki-client