This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
File:                     XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json)
Hash identifier:          +6I9r1jVev6QKK9agK2k4fbrXYXkm3EDVt1zjlzKDas=
Subject key identifier:   6B:A5:E1:0F:45:40:8B:BB:3A:98:4B:CE:22:6E:57:68:18:24:5D:75
Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
Certificate issuer:       /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Certificate serial:       0A00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
Manifest number:          09E9
Signing time:             Wed 28 Jan 2026 19:25:35 +0000
Manifest this update:     Wed 28 Jan 2026 19:25:34 +0000
Manifest next update:     Wed 04 Feb 2026 19:25:34 +0000
Files and hashes:         1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: ZfD6j2QKGvdo3k0JZUyUe+c8S6IqhKjtr0mjQejkSrM=)
                          2: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: Qe2k4Rmt8cYvrQ25NjhCj6HgTDQ2LTBczeZdX5NMi1Q=)
                          3: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: 1xpqucRPj2sGGfUlw/hjqGcWw2RAvQEPEvj1/o7DLww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl
                          rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2560 (0xa00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
        Validity
            Not Before: Jan 28 19:25:34 2026 GMT
            Not After : Feb  4 19:25:34 2026 GMT
        Subject: CN=697a62af-2055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:98:ec:04:6b:a4:00:9b:04:28:4c:87:43:
                    8e:98:8a:77:8c:71:e6:1f:4e:a2:20:79:a2:f6:83:
                    19:81:ba:bd:d3:03:64:87:43:21:58:ec:57:f9:01:
                    00:58:08:60:9d:41:fa:65:e1:82:6b:5e:28:d0:bd:
                    94:b1:05:f4:fa:36:8b:93:32:b5:4c:71:85:c4:55:
                    b9:7d:4f:88:49:54:58:94:08:d4:29:0b:f6:56:ef:
                    9a:43:5d:01:65:24:84:30:69:74:99:57:61:20:77:
                    a4:d9:7d:d9:58:ba:43:80:80:f6:4a:58:7b:56:64:
                    6a:de:e0:e0:f5:22:00:e0:2d:5b:e7:11:2c:96:64:
                    3a:6e:c2:4e:93:98:16:ce:5c:7c:d7:00:5b:49:ec:
                    a3:4d:2f:b0:61:52:b0:c8:f4:2b:ad:44:3d:81:b2:
                    96:d2:3b:f4:5a:4d:a7:50:ad:d4:21:9c:a9:04:c2:
                    db:e7:75:7d:d5:82:77:23:e1:49:55:42:17:78:2a:
                    35:84:2b:26:b6:5a:0b:65:1b:5a:67:70:4d:cb:64:
                    58:43:1d:45:ec:b8:8b:7b:fe:5f:fd:6c:5a:f7:54:
                    7c:e4:fd:39:98:2a:54:2e:9f:76:eb:63:b5:45:ed:
                    25:f1:16:4a:bf:3d:fc:ec:1e:eb:0f:69:b4:f2:2f:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A5:E1:0F:45:40:8B:BB:3A:98:4B:CE:22:6E:57:68:18:24:5D:75
            X509v3 Authority Key Identifier:
                keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:8f:24:b7:f3:b9:2c:9f:84:76:11:68:c7:33:5e:c6:fc:
         ba:8c:9e:16:0b:ab:86:8a:b6:13:05:08:8e:d3:81:46:c3:25:
         98:73:e1:f1:a6:46:b7:80:76:26:99:05:de:ac:29:59:93:ee:
         59:c0:0c:ee:b7:0f:19:aa:63:ff:dd:03:4b:94:87:f3:4a:9d:
         c8:78:95:87:13:62:91:37:5d:38:81:82:38:65:1e:89:6d:be:
         5a:94:e8:db:19:8f:4b:71:7c:5c:35:16:29:a4:0d:65:13:c8:
         44:4e:b0:ef:71:03:eb:31:4b:86:87:00:93:b4:7a:26:e5:6a:
         c2:14:7f:5c:22:db:31:12:70:65:4e:09:4d:a7:a3:39:7a:7a:
         fc:3f:02:de:a3:68:ad:a7:e6:ba:f7:0d:da:e6:5e:5d:22:20:
         c4:1e:5b:36:c4:f5:ae:68:9b:64:db:f4:72:84:94:f0:3f:83:
         37:a2:e6:df:f5:1b:63:dc:b5:4e:79:7d:2f:93:cd:e2:9a:ad:
         b4:13:aa:3a:29:8b:11:07:db:32:e8:ef:b7:78:49:96:80:71:
         38:ec:2f:bb:ee:9f:90:eb:1f:9f:05:d5:b9:53:68:3e:21:03:
         8b:9a:22:7c:e1:4d:d9:bb:d6:63:83:8f:82:96:b2:ba:9a:37:
         28:04:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 00:57:54 2026 by rpki-client