This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
File:                     klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json)
Hash identifier:          Irt/uu9TyTwlKLxrDJunbPQHpC2dNAz+r/4FecC07Go=
Subject key identifier:   89:F8:DB:EE:8B:1C:32:69:38:E4:4E:87:DA:7C:C3:2B:67:F9:17:CE
Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
Certificate issuer:       /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
Manifest number:          02B7
Signing time:             Sun 25 Jan 2026 00:36:51 +0000
Manifest this update:     Sun 25 Jan 2026 00:36:50 +0000
Manifest next update:     Sun 01 Feb 2026 00:36:50 +0000
Files and hashes:         1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: Q1yBsjbpXAs+HZVKgo7FNcZRcaWNZz7A5TPaDpLkz7I=)
                          2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: wBqvUEdJXS+W4twJcgw0kDbGssoYll+0BYZGvLl67rM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
                          rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
        Validity
            Not Before: Jan 25 00:36:50 2026 GMT
            Not After : Feb  1 00:36:50 2026 GMT
        Subject: CN=697565a3-c4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:5b:51:d4:08:1e:bb:a6:e5:8b:b4:cd:fa:
                    0d:66:c9:6e:11:69:16:76:10:74:8d:2c:75:e2:19:
                    1c:22:18:f7:d4:76:03:c1:5a:d2:f7:fd:af:69:96:
                    9d:3b:1b:6e:9c:66:40:c2:56:0e:1f:0c:31:38:68:
                    cb:6d:b8:22:b4:24:be:52:e6:c1:65:6d:49:0a:99:
                    ba:a0:cd:f9:92:1b:2a:0a:59:e2:cc:64:22:2c:55:
                    e8:f6:bb:9e:5a:a7:75:37:e8:f7:9f:48:32:e6:33:
                    2b:92:08:be:fe:75:19:d9:1b:d6:7d:21:e9:36:90:
                    ed:2f:4b:ce:65:88:32:2c:93:4d:8c:a9:d9:24:5b:
                    ed:52:1e:1c:72:d3:47:70:af:20:04:34:8c:97:7e:
                    16:de:53:64:d5:e1:04:d3:a0:45:4a:16:db:da:58:
                    f4:99:db:17:05:75:d5:a8:52:0f:17:09:fb:c9:1a:
                    25:4b:6e:8a:48:0b:a4:a4:99:8e:93:f8:a0:2c:42:
                    8e:96:84:2a:08:2b:24:b1:d6:23:8d:e6:37:09:c5:
                    74:68:7d:f3:b3:f2:fd:7e:2f:40:ce:d6:57:c7:48:
                    63:4e:71:f7:5c:0e:df:74:cb:06:4c:85:3a:31:f0:
                    c1:d8:1b:06:76:d2:d5:89:e2:36:59:c4:f4:14:f5:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F8:DB:EE:8B:1C:32:69:38:E4:4E:87:DA:7C:C3:2B:67:F9:17:CE
            X509v3 Authority Key Identifier:
                keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:c9:52:e3:16:97:a2:ba:2e:b9:dd:f1:4f:f8:33:59:69:
         c6:56:02:d1:3e:f4:b1:be:f9:26:20:19:06:f6:59:f3:bf:6d:
         a7:66:f5:58:37:fd:ee:57:ae:90:91:55:3a:68:51:07:c8:76:
         17:d6:2b:90:9c:8f:70:a3:31:56:ff:f1:f1:85:83:f1:06:59:
         69:f1:98:91:cc:08:5e:5e:50:da:8c:89:6d:df:b9:7d:fa:b1:
         cf:9b:48:8e:9e:10:68:0c:25:6e:1f:cf:0b:67:65:66:c3:4a:
         f5:f8:f9:0b:5a:ac:b8:c2:c2:c1:a6:58:bb:53:5f:7d:1a:0b:
         7a:d7:31:48:1a:eb:6d:67:b3:46:dd:b6:46:99:63:63:74:2f:
         08:a1:a9:e8:b1:b1:b3:06:92:33:47:98:c1:46:ab:cf:5d:43:
         7f:38:3f:e7:04:b2:ef:2a:3e:ca:4d:8d:c5:df:8f:3e:96:ec:
         b8:ed:ff:6e:4c:df:6c:86:75:da:1a:fd:d0:e2:c1:e2:6b:c2:
         a1:23:7e:b0:c4:82:d8:a5:a5:35:da:c0:d5:d0:d6:4a:a3:59:
         bc:ca:6c:76:84:40:3a:68:ae:f7:6c:23:2a:9a:e8:af:5c:8d:
         86:c6:e7:84:c4:59:b6:7b:65:f4:c1:a0:40:f5:43:09:a0:c3:
         a0:cc:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:52 2026 by rpki-client