This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File:                     xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier:          ZMNN2gcKB0SJGx27X59DnEixfOEEZvWevqEsKVL3nV4=
Subject key identifier:   70:CC:F4:31:19:19:B3:D8:96:F9:89:87:4C:CA:B1:AD:A6:16:E1:8F
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number:          01E3
Signing time:             Wed 21 Jan 2026 02:02:41 +0000
Manifest this update:     Wed 21 Jan 2026 02:02:40 +0000
Manifest next update:     Wed 28 Jan 2026 02:02:40 +0000
Files and hashes:         1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: 6+8So3rG7HEIxEoNLpnnwXfvsRCRoRTe0GgRZDCRwgE=)
                          2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=)
                          3: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: l/6jwLwhHlaq4DjFtJkbAl5/YqlAnf4TjESkfZ2vJwg=)
                          4: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: XI2MRT3apixej+c7Uuh5Oy/DdOkTdTWC2j0oX0vYoiA=)
                          5: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: VniQg/Q8eQO09WHTg5jdvrFHg394rGunw1V45oxGtZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: Jan 21 02:02:40 2026 GMT
            Not After : Jan 28 02:02:40 2026 GMT
        Subject: CN=697033c1-2af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a2:4a:68:c2:a2:4d:67:9d:a6:d7:20:4c:44:
                    5a:7c:35:ce:e6:82:c0:2d:f9:17:13:26:7f:6d:be:
                    72:d6:ed:6d:f2:d5:25:82:eb:c9:59:65:fa:8b:b3:
                    b6:21:84:21:ad:8f:4f:7d:0c:a3:e7:f0:c8:5a:a0:
                    a0:b1:b8:c3:cd:06:9c:4f:fe:54:a0:49:44:59:0e:
                    8d:fd:b2:69:67:c5:95:e3:9f:e8:5c:ef:a8:1e:07:
                    51:89:78:f1:43:36:fa:14:f3:8f:69:8d:7f:ab:27:
                    a2:32:ff:0d:35:68:77:27:3f:b4:81:80:4d:9c:b2:
                    68:27:4c:c7:d4:4e:d5:a1:89:2b:85:02:13:53:41:
                    ed:97:f7:f4:30:24:6e:ba:f4:97:7b:b9:2d:ed:d4:
                    9b:54:c5:30:e6:d5:eb:73:70:93:e0:14:c8:8f:b4:
                    f9:f9:27:f6:10:31:41:2e:a7:67:e8:34:7b:e9:64:
                    1d:ac:1b:0e:10:76:df:62:b8:00:7e:3c:cb:21:36:
                    b3:45:80:d1:1b:51:72:0e:a1:fa:57:9f:3d:46:fe:
                    70:0f:c7:5e:6e:a5:d1:d1:9c:ae:50:b1:76:f9:78:
                    2d:df:8e:e5:1c:80:cf:05:e2:41:79:6e:c7:09:0e:
                    63:53:69:14:16:c0:78:78:37:10:dc:d5:ca:83:24:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:F4:31:19:19:B3:D8:96:F9:89:87:4C:CA:B1:AD:A6:16:E1:8F
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:0e:b3:32:49:13:4a:b1:88:a1:c3:20:54:c7:25:da:a6:
         97:23:4e:a2:87:eb:d6:33:b8:9e:00:b1:65:82:08:82:ae:60:
         2f:92:9f:13:d2:67:f6:58:87:20:6a:43:c0:37:46:f9:48:b2:
         de:c0:d7:10:23:00:d0:72:30:9f:9c:5d:3c:29:66:3c:72:7b:
         20:f9:56:44:ea:04:f7:ea:7d:85:5e:f9:e4:88:9d:cc:cd:cb:
         93:fc:48:d6:49:31:c3:55:70:b0:bc:d8:34:d6:56:33:7e:38:
         44:a2:c2:38:2e:79:a2:34:65:97:7c:bb:89:8e:70:18:58:8b:
         79:cf:63:a5:db:f7:70:bf:66:5a:49:02:ad:95:90:6e:47:58:
         78:ff:64:24:d0:8a:20:ab:6f:ca:0b:9d:fb:55:34:4c:dc:bd:
         4b:60:e7:f2:57:00:cf:7f:9a:57:f1:07:9b:6c:0b:ce:17:d7:
         cc:12:43:fa:85:48:88:6f:b1:1b:7c:29:fc:90:35:e3:24:81:
         df:81:a9:f3:06:02:07:07:52:d4:ac:39:ee:68:74:32:f2:2b:
         e6:33:b0:0a:a1:3d:a2:b9:e9:b0:4b:bc:1b:f0:8d:5a:cb:68:
         6e:f3:1a:ee:74:9d:16:2e:31:5f:70:b7:27:ac:3d:5a:57:82:
         22:80:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 02:37:43 2026 by rpki-client