This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File:                     xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier:          JaQqY5cJIJCu7wPkmtu+/3mC4gwExnfqA+qCdEhfobU=
Subject key identifier:   48:EF:59:12:3A:D0:A9:77:A4:EC:30:96:02:FB:A0:9B:53:8D:CB:C6
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer:       /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial:       0820
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number:          0813
Signing time:             Tue 20 Jan 2026 20:23:56 +0000
Manifest this update:     Tue 20 Jan 2026 20:23:55 +0000
Manifest next update:     Tue 27 Jan 2026 20:23:55 +0000
Files and hashes:         1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: SXcrhf8JDV0j1mF/Jbw74KKs9olwlI0rbvmJglU1+5I=)
                          2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: odhqLjFi/gNl1kTD0Ic54V4mME2y8CTdKUAbvxdHwi4=)
                          3: 21EE9510083211EB81509633C4F9AE02.roa (hash: ZfvnXdczblwrDF4Ejj/73M+zlN7DQoj1HAdYgFet7TY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
                          rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 20:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
        Validity
            Not Before: Jan 20 20:23:55 2026 GMT
            Not After : Jan 27 20:23:55 2026 GMT
        Subject: CN=696fe45c-34cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:a5:7d:b8:1b:09:26:5f:4f:ce:de:97:1d:
                    70:f0:49:67:03:2a:82:25:b4:4b:24:55:10:b2:23:
                    28:69:a8:0c:01:9f:66:f6:2c:e2:8b:cc:b8:88:7a:
                    94:fa:d9:00:dc:c3:8a:ff:c3:0e:6d:ec:aa:22:4e:
                    c0:93:3e:28:01:32:18:1b:67:f9:10:2b:da:06:cb:
                    60:8b:24:c5:14:ed:2a:e5:9d:1c:27:d7:38:01:fb:
                    c4:67:d8:f4:15:30:b4:72:4f:93:e0:cc:1b:96:6a:
                    7a:c0:75:0d:f9:d9:83:3e:e4:c2:8e:6d:18:b7:1a:
                    c2:62:32:22:0e:3f:dd:0d:16:9b:b1:48:bf:f3:2a:
                    98:d9:b1:97:da:17:d5:f9:8e:e0:5e:cd:ed:9b:13:
                    d3:8e:3e:93:7a:aa:56:09:f0:d2:3b:a9:1c:f7:a6:
                    86:c3:c7:1a:62:bf:01:fd:aa:4f:1d:93:d8:0a:0e:
                    6c:43:0a:c7:25:41:ee:d5:8e:39:ae:ff:11:ff:c2:
                    e5:89:f8:09:0e:d0:94:bd:c6:b1:84:f2:d4:c2:99:
                    a5:18:72:c0:56:f7:83:d9:b5:29:7e:12:e3:ac:19:
                    30:62:f7:46:98:d9:ec:c1:2a:05:b3:4e:09:a4:9d:
                    b5:b4:3d:2a:82:56:37:e0:c6:54:f1:da:01:ea:c0:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EF:59:12:3A:D0:A9:77:A4:EC:30:96:02:FB:A0:9B:53:8D:CB:C6
            X509v3 Authority Key Identifier:
                keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0a:10:9f:99:f4:82:d1:6b:77:2b:52:39:26:13:51:1e:e9:
         87:33:06:69:c3:cb:9d:ca:85:97:e6:99:ca:ce:36:e1:26:76:
         90:c9:0b:1b:a9:ac:3b:78:c1:74:f6:a6:d4:2c:0c:47:f0:c2:
         1e:81:1a:77:81:3b:a3:6a:03:ef:83:69:05:56:ba:af:3b:b7:
         da:c3:54:d6:e7:0b:f4:b4:23:6f:94:3c:a2:5b:14:85:3d:71:
         1a:d3:18:39:eb:81:d5:fe:46:fa:91:f2:5e:ed:b9:b6:4a:33:
         6b:4e:06:40:65:dc:2e:5c:b4:21:b6:f1:d6:15:d3:a4:ae:85:
         21:e8:b1:91:76:e4:81:4a:a4:bd:06:d1:9e:de:ec:2b:aa:28:
         5a:f6:56:2a:de:82:30:94:5e:da:a6:42:49:04:03:9b:1e:6e:
         56:dc:ea:e8:64:63:a7:86:97:e4:87:87:6e:bd:c9:cc:97:17:
         82:20:6e:a2:3c:19:04:fb:7b:1c:78:1a:2b:3f:37:34:11:7a:
         27:f3:00:6c:48:c1:94:7f:03:3f:c7:45:e2:23:92:51:3c:1f:
         61:49:6b:44:bb:cf:43:6a:f4:00:33:44:05:58:c8:cb:b2:46:
         da:b9:94:96:05:84:7c:d0:51:39:5b:1a:fb:21:dc:3b:7a:4c:
         39:0c:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:55 2026 by rpki-client