This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
File:                     xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json)
Hash identifier:          OrfpyaILUjVtg8UrQkAIQ6UoJgatUs95mXwmir9+K18=
Subject key identifier:   68:BD:34:0A:1C:93:9D:21:25:FF:1A:F7:B9:5E:70:50:90:F7:20:30
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Certificate issuer:       /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
Manifest number:          017C
Signing time:             Fri 23 Jan 2026 02:58:07 +0000
Manifest this update:     Fri 23 Jan 2026 02:58:07 +0000
Manifest next update:     Fri 30 Jan 2026 02:58:07 +0000
Files and hashes:         1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: MHZD1Do0yBtwpE2bSHXEBbKeRpHofWnNDLNjrjHa6JQ=)
                          2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: rlUj0HWvLYRWR8L5dccxDGpfDl0LUtE4Msb9H1/d8Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
                          rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
        Validity
            Not Before: Jan 23 02:58:07 2026 GMT
            Not After : Jan 30 02:58:07 2026 GMT
        Subject: CN=6972e3bf-7b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:b3:6c:ae:f2:3c:8f:c4:1b:9b:72:f8:91:
                    40:4a:0e:7f:94:76:f0:f9:bb:e2:0e:ed:38:93:68:
                    7b:56:16:8b:28:7e:e2:9c:52:62:ea:36:3f:33:9d:
                    91:61:cb:b4:fe:84:59:bc:01:80:7b:8a:0a:3b:df:
                    2d:f2:6b:c8:41:c1:5e:31:9c:ba:a1:cd:0f:61:c2:
                    a2:48:67:b3:70:4b:9c:f2:ae:3b:b1:86:9e:65:90:
                    2a:22:b1:4e:f6:44:44:3d:b2:1f:c5:8e:ee:d7:07:
                    69:16:ed:10:d8:69:07:11:b7:83:ee:7d:dd:fd:b4:
                    f2:6b:2a:9f:8c:0a:b1:e7:82:63:b1:d3:57:57:5d:
                    0e:94:97:dd:e8:d2:d1:9f:c3:13:05:4e:f8:53:16:
                    26:f3:f8:56:0e:0a:b5:c2:33:6b:da:03:4e:4d:3b:
                    bd:26:52:23:cb:53:ba:93:ef:e6:16:7e:33:6c:bc:
                    3f:36:24:ce:0e:4e:5c:a2:4b:fc:23:08:44:1f:6e:
                    78:cf:f4:99:39:fe:96:49:aa:d0:2f:31:30:46:20:
                    81:f7:c7:fb:b7:4e:19:56:cc:e6:bf:15:03:cc:4e:
                    bf:07:ca:ac:ec:99:b3:94:bf:8d:6e:0e:08:89:b7:
                    5d:91:1b:83:30:cf:1d:3f:f8:e2:9b:97:58:cb:f9:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:34:0A:1C:93:9D:21:25:FF:1A:F7:B9:5E:70:50:90:F7:20:30
            X509v3 Authority Key Identifier:
                keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:65:74:c8:33:23:41:ae:15:56:b5:18:b5:ac:ae:9a:18:
         51:61:ef:47:a9:4c:fa:58:c9:84:4f:18:eb:69:0e:78:87:32:
         d5:86:54:ab:db:ac:b0:23:a5:0c:cf:c6:d6:8d:86:0b:05:04:
         29:5d:30:cf:d6:f3:92:ae:0d:32:51:11:33:21:4d:c5:9b:17:
         35:5c:98:a0:98:ad:0e:59:d6:e0:6e:c4:ee:09:96:0f:0c:27:
         b5:7b:97:02:67:ec:ff:62:ac:1e:df:64:61:0a:27:66:78:88:
         2e:cd:d6:75:57:13:34:c4:98:69:08:4c:09:02:20:19:ce:53:
         ce:8c:c0:78:42:19:38:e1:5f:1e:db:16:26:2e:60:f1:7a:c5:
         23:54:90:43:19:b7:41:e6:f2:29:96:40:98:21:4f:e3:46:83:
         a8:7e:c8:84:db:fc:43:dd:f0:d7:45:4d:17:03:d3:60:32:51:
         16:5b:12:f9:aa:71:f3:34:a4:b7:84:4a:83:fd:26:65:ad:c4:
         41:c7:68:18:ce:5d:c1:6c:48:b5:7a:3d:96:54:71:fa:57:4f:
         b1:02:ce:5f:69:7c:d1:cd:5a:24:62:e2:3e:5c:f7:fd:5a:0e:
         57:72:34:8b:08:e1:0f:a2:ba:ea:0b:e7:bc:92:e7:d5:3e:9e:
         5d:ff:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:48 2026 by rpki-client