This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File:                     XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier:          M0MW0oVbLK4pH4oBTPqrxldU404kF61xiqIpBtk3BFo=
Subject key identifier:   CE:68:9F:AC:3A:71:CF:2C:86:8F:76:A4:9D:B8:C4:84:69:8C:78:2C
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number:          0122
Signing time:             Sat 17 Jan 2026 03:29:43 +0000
Manifest this update:     Sat 17 Jan 2026 03:29:43 +0000
Manifest next update:     Sat 24 Jan 2026 03:29:43 +0000
Files and hashes:         1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: bsYbwFABx5q8pSlk2a4On9RXQlw6K8amxfGQ315SqEQ=)
                          2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: m0j5NYjPTDIJfmWKHuHfMjMZ9FBAfzwy/hGv/R4OYCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 03:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Jan 17 03:29:43 2026 GMT
            Not After : Jan 24 03:29:43 2026 GMT
        Subject: CN=696b0227-9c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:4b:cc:41:9d:00:f5:99:b6:41:8e:ab:9c:
                    55:d8:a2:bf:cc:01:5f:5c:5d:4b:de:f3:26:af:24:
                    c3:d3:7e:c4:0c:1d:e8:cd:63:82:9e:cf:b0:af:6f:
                    bd:83:3d:35:0b:b3:d2:0c:f1:d7:95:b9:64:48:6b:
                    02:01:b9:6a:41:da:32:22:1b:2c:2a:d8:dd:d5:a7:
                    7c:82:18:61:07:2b:e2:fa:c2:22:41:68:a1:7f:35:
                    38:84:f5:c8:61:17:ba:2c:33:4a:48:eb:f4:b1:e3:
                    3f:1c:de:73:50:6f:a8:5e:08:c0:9f:0a:e6:87:19:
                    4d:eb:44:a4:40:43:7a:99:1d:a5:c3:20:6f:5a:17:
                    c4:a9:88:f6:8f:26:67:f4:65:8a:57:06:56:0f:5b:
                    15:c5:84:f3:79:5c:7a:44:84:ad:6d:c2:91:51:4e:
                    f5:0f:4b:36:3b:2a:49:df:f8:29:df:7e:d9:e3:c4:
                    f6:d4:28:ac:16:a7:12:04:eb:37:88:ab:95:ff:a5:
                    66:4e:47:db:e6:b0:59:01:b5:71:ff:9e:d5:98:af:
                    eb:73:36:c2:cd:03:76:38:b1:59:fa:c3:3f:0e:7d:
                    1d:85:d3:c3:3b:e4:6e:43:e4:a4:ab:3d:32:56:cc:
                    a7:94:93:1d:10:b5:d6:66:1f:6e:02:a1:c7:e8:cb:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:68:9F:AC:3A:71:CF:2C:86:8F:76:A4:9D:B8:C4:84:69:8C:78:2C
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:43:58:cf:49:51:44:e4:0f:64:ed:88:52:67:45:e9:eb:9f:
         8b:5f:c8:90:b9:32:94:0b:81:7d:b4:6c:2a:49:ab:70:2c:2e:
         ec:32:a7:b5:dc:da:07:65:e2:61:88:8f:4c:6e:32:b2:31:0c:
         14:d5:f2:5a:a7:ff:5a:32:eb:64:cf:06:ca:8d:23:77:90:a1:
         6f:cc:27:f6:f4:a8:60:4a:b7:a1:1b:57:34:60:ee:6e:24:d5:
         a9:99:49:7a:33:6e:e5:85:50:52:42:78:a6:17:c8:a6:0d:a2:
         84:67:2a:bf:68:79:f2:12:b6:b2:47:7c:68:8d:a2:dc:57:64:
         0c:43:c6:10:94:ee:10:ef:14:80:b7:92:98:71:47:52:11:9f:
         64:da:3e:9b:1c:83:78:98:98:89:45:49:4f:fe:69:70:97:e3:
         55:15:b3:1a:ba:32:64:1c:09:62:9f:9f:5b:02:a4:62:b9:72:
         54:f1:79:be:75:80:16:09:da:93:f2:d4:01:81:69:5a:d7:2a:
         f6:d4:46:b9:a5:35:fa:6f:72:f3:e2:48:a7:85:5b:d8:08:3c:
         4c:f3:4c:0f:ae:03:2f:62:77:b9:2c:b8:c7:94:75:92:b3:9d:
         74:7c:8f:9d:61:5e:70:2b:fb:16:6e:fe:3b:eb:17:65:41:f3:
         e8:26:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:55 2026 by rpki-client