This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File:                     xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier:          DF0B2acevkpZi5j9EYoltiUaGrbytVgxn7DoyA9y0yI=
Subject key identifier:   9F:2B:52:D3:57:4F:BD:4E:13:5B:68:4B:68:E3:C2:C8:99:0A:C1:24
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer:       /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number:          BE
Signing time:             Sat 17 Jan 2026 05:05:07 +0000
Manifest this update:     Sat 17 Jan 2026 05:05:07 +0000
Manifest next update:     Sat 24 Jan 2026 05:05:07 +0000
Files and hashes:         1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: 4LT23uQY00ZvH3LPpB5Gw8O93MkSQKOx9shF9NiJ9us=)
                          2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: yxYbVT0G3FIFNHaQq21RRd4odOx6/tGbrON4MVMOYMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
        Validity
            Not Before: Jan 17 05:05:07 2026 GMT
            Not After : Jan 24 05:05:07 2026 GMT
        Subject: CN=696b1883-2e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:d7:de:d7:2c:5d:58:1e:25:80:db:06:9c:
                    37:9e:a9:de:e6:f0:43:10:a1:6a:32:e2:ce:57:30:
                    a1:ce:5c:23:53:74:e5:88:44:7a:68:76:20:eb:7f:
                    3e:ad:76:bc:1a:0b:07:53:14:3c:ff:93:5d:bf:93:
                    62:b3:aa:c0:9b:bf:bb:f9:7a:84:a6:90:35:14:33:
                    db:f2:62:fb:00:b0:20:df:9b:7d:45:a4:ea:dd:17:
                    1a:0e:b7:89:2f:2e:6e:66:6c:3f:ea:89:d6:1c:c5:
                    a0:bb:f8:f8:8e:50:31:fa:e8:3b:d8:e7:79:9d:18:
                    7b:51:4f:a8:7e:9e:de:3c:d0:f9:98:c2:86:27:98:
                    67:67:21:7a:d5:ec:6b:7d:97:9d:33:08:d2:11:57:
                    4f:15:0f:f3:e2:86:00:6e:b0:e1:3f:0b:6b:54:f3:
                    ad:58:91:25:c2:f6:71:d1:6e:95:30:8e:c7:79:e6:
                    2b:98:a3:7c:98:12:73:c6:7f:82:8b:ad:9d:57:8d:
                    fe:41:2d:f0:0d:80:e7:07:eb:57:97:3a:9d:7c:80:
                    c6:2d:89:15:3b:a1:59:8f:5e:37:d0:60:ad:af:a8:
                    45:5a:bd:0a:c8:4c:1a:9a:d8:a4:ea:72:4b:6c:14:
                    5a:8a:0a:dd:de:f5:aa:f7:7d:4a:14:38:77:bc:dc:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2B:52:D3:57:4F:BD:4E:13:5B:68:4B:68:E3:C2:C8:99:0A:C1:24
            X509v3 Authority Key Identifier:
                keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:1f:f5:f2:21:68:73:da:e4:11:d3:d1:86:8a:42:f0:37:c7:
         77:bf:a9:5c:cd:86:53:94:9d:d6:ac:84:3f:75:c8:e9:39:b1:
         63:f6:64:b0:27:e6:05:f3:5c:74:91:bc:06:50:ab:b0:3b:db:
         d6:fb:49:77:24:00:c9:57:2c:8e:be:ee:07:54:68:af:90:9a:
         4a:a7:04:b0:1a:46:7a:fa:b1:d1:6f:b2:24:b2:53:10:71:d9:
         c8:05:92:7f:4b:b3:01:49:60:25:15:b4:cc:27:77:77:e0:c0:
         74:4b:ab:c3:75:8d:80:a9:4f:1a:be:88:66:f0:80:00:85:22:
         65:28:1d:d7:1c:e9:d0:04:ff:db:3d:30:b9:46:f2:f9:21:45:
         99:6f:76:bb:19:93:7f:34:08:cb:07:7f:29:ae:16:0c:d7:19:
         a2:90:9c:aa:57:55:f8:0d:98:d3:50:a0:53:1f:7d:48:38:b2:
         e8:82:3c:c0:2d:2d:85:64:44:c3:95:80:73:c6:78:47:1d:ea:
         3c:f1:4f:f3:83:a3:3c:c5:bf:c2:9d:27:d3:e6:e4:79:6f:06:
         2c:c5:98:f2:5d:f6:68:84:f8:50:07:36:e7:96:38:9b:24:2f:
         78:06:a1:51:db:0f:8e:76:d4:f6:4e:76:0c:0d:7d:19:8d:8e:
         45:06:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:13 2026 by rpki-client