This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File:                     xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier:          xhyJo6XyoSXotJGwg09E+EfpPJCVZqRgXzz0LCrc+cY=
Subject key identifier:   E0:BD:7D:B3:95:4C:5C:FE:3B:58:5F:1F:A8:91:91:4F:F5:F8:24:E6
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer:       /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number:          F2
Signing time:             Fri 09 Jan 2026 04:37:00 +0000
Manifest this update:     Fri 09 Jan 2026 04:37:00 +0000
Manifest next update:     Fri 16 Jan 2026 04:37:00 +0000
Files and hashes:         1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: LpsmSLsH6AyGtvq1Oz+ni6G19efEhvxlhGPh8s08w78=)
                          2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 04:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
        Validity
            Not Before: Jan  9 04:37:00 2026 GMT
            Not After : Jan 16 04:37:00 2026 GMT
        Subject: CN=696085ec-8a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:cc:96:13:f6:9e:09:d0:12:69:bf:88:ba:
                    d5:9e:d0:e9:eb:b5:4b:37:99:a6:a7:5d:8e:61:6c:
                    5a:af:4b:5e:fe:f6:0b:c0:1c:63:e9:75:60:33:ed:
                    b2:6c:3e:96:43:bb:50:22:66:74:d8:6d:e2:61:16:
                    54:2b:35:0a:af:a2:b7:7b:fb:f1:1e:bc:75:7c:19:
                    18:1a:61:c6:63:16:b1:1c:06:b0:15:5d:2e:db:a3:
                    e4:2d:57:16:fa:7d:49:5d:b7:d9:16:36:c5:a0:37:
                    9a:6c:83:a4:33:2e:9d:55:c6:4c:8c:c6:07:4d:93:
                    0d:dd:80:f7:e4:b8:ae:19:94:37:e1:6b:5e:0b:29:
                    ba:14:2c:da:33:6e:db:ba:df:c6:24:38:90:71:9f:
                    02:4d:d5:a8:f3:60:cc:5e:95:c9:a2:fe:75:ed:91:
                    a1:2f:d8:cf:09:0f:80:98:a3:ad:57:25:34:ef:02:
                    fd:01:14:a7:9e:23:a6:aa:9b:b2:54:e3:de:76:c0:
                    a4:06:5f:cb:76:78:e8:02:71:0e:5a:f8:dd:f0:9b:
                    d1:ef:b9:be:5c:4e:eb:56:e2:a3:d4:3b:0a:04:83:
                    5d:54:e1:38:99:08:4d:b2:a3:14:ae:e2:8d:38:60:
                    f1:60:e7:7c:55:b9:56:65:66:11:cf:78:31:02:2d:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BD:7D:B3:95:4C:5C:FE:3B:58:5F:1F:A8:91:91:4F:F5:F8:24:E6
            X509v3 Authority Key Identifier:
                keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5c:90:60:56:59:ac:65:6b:30:1f:fd:df:3b:37:6c:53:54:
         36:b5:2e:4d:30:15:6e:b2:44:ea:3f:58:a6:49:b7:1a:f1:95:
         21:83:72:97:be:75:e6:b8:ed:d8:96:ed:c9:41:81:e3:a1:40:
         a2:c4:61:ed:e3:c5:ab:26:03:67:14:bc:a0:14:d8:8e:72:c9:
         1a:a9:19:bd:49:dd:f7:13:30:1c:0a:dd:ae:d2:64:5d:7e:9f:
         26:2e:19:30:de:d5:bc:a9:dc:13:7f:76:ae:2a:44:ab:4e:7e:
         a7:78:a1:62:51:d1:dd:bd:5c:8e:07:c9:af:2d:f2:e5:e5:2b:
         48:41:1b:7c:72:4b:bb:7b:8c:c9:6b:d8:af:27:b1:46:b6:0e:
         fd:04:80:e4:44:ff:20:97:1f:ba:02:05:42:e6:db:87:8f:85:
         97:d8:ad:60:2f:fd:04:6e:83:b7:d9:2c:a4:0d:ce:6e:62:cb:
         84:a6:c9:37:15:fb:a9:ee:e1:2d:1f:da:c4:e3:67:c3:e5:e9:
         93:a2:62:d9:81:ad:64:e3:43:55:27:e8:c5:86:3a:36:ad:94:
         68:17:d3:3d:8c:ab:1b:7a:f7:50:8f:f4:53:87:d5:eb:39:49:
         de:bc:9c:05:6b:f4:9a:c3:39:c9:e3:0d:cd:70:cd:54:6b:3a:
         14:1d:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 07:45:28 2026 by rpki-client