This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
File:                     kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json)
Hash identifier:          CTtHz+vX3SPY5nxzoqYvd8qDH7zpPlraEkXdvfAvebI=
Subject key identifier:   5A:A5:E3:56:94:58:BB:C8:97:BF:44:5A:32:FB:4A:99:E9:A1:96:27
Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E
Certificate issuer:       /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
Certificate serial:       0740
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
Manifest number:          0735
Signing time:             Sat 24 Jan 2026 21:07:37 +0000
Manifest this update:     Sat 24 Jan 2026 21:07:36 +0000
Manifest next update:     Sat 31 Jan 2026 21:07:36 +0000
Files and hashes:         1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: Tx6UoUcpSW0PAe1q1qO2Jf9N5cyLj2YnhNlkBDEz8i0=)
                          2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vMhYeDmA4rQgDzWKujwjU7tw9Dx++6v75EIl46gAbaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl
                          rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
        Validity
            Not Before: Jan 24 21:07:36 2026 GMT
            Not After : Jan 31 21:07:36 2026 GMT
        Subject: CN=69753499-8b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:d4:04:61:ef:5b:de:d8:aa:61:c5:3d:1c:
                    20:b2:8e:54:81:d6:8e:61:50:ee:59:a9:f2:d1:a8:
                    1b:0b:80:42:fc:de:ef:99:15:68:a0:3d:94:35:31:
                    39:49:58:82:50:6d:ea:81:85:4a:df:c2:54:d2:a2:
                    59:76:a6:04:14:b6:ce:7a:b6:14:ec:71:b7:fc:f8:
                    96:83:a0:d0:3b:0a:00:30:23:d2:d2:b4:d8:74:80:
                    bf:b5:4e:b4:15:97:3a:a1:2a:94:57:78:a3:00:5d:
                    c4:17:d8:2c:3a:cc:eb:39:70:6e:5e:f1:3e:d6:e1:
                    03:8b:f1:70:5b:d5:31:06:86:10:c3:cb:10:ae:66:
                    5b:b7:c4:61:1e:44:b8:1d:22:b0:2b:d0:25:ec:61:
                    3b:11:37:55:cb:8d:ca:53:5c:6b:22:ad:bd:c7:0c:
                    af:e8:99:a2:30:2f:fb:c6:6a:dd:f4:5e:da:18:9d:
                    98:21:e2:43:d8:eb:b8:29:16:be:92:95:06:97:c8:
                    61:08:fa:84:c5:9e:42:eb:bc:7b:91:39:82:f3:ff:
                    35:8e:eb:7b:3a:f8:93:d1:57:77:0a:35:cb:60:b9:
                    ec:ad:d6:ae:b8:c7:61:27:c8:88:d3:d1:14:43:f5:
                    d8:28:c5:6c:6f:c1:48:60:21:b0:a9:49:07:7b:2a:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:E3:56:94:58:BB:C8:97:BF:44:5A:32:FB:4A:99:E9:A1:96:27
            X509v3 Authority Key Identifier:
                keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a7:29:98:aa:ff:77:0e:25:68:5f:d6:ef:5e:90:94:c7:c0:
         77:63:44:ea:56:75:dc:c3:1b:ac:1b:76:c2:63:3c:46:85:f7:
         6a:6c:c6:6c:48:fa:16:67:e5:88:48:22:1f:55:8c:6f:5f:6d:
         08:59:0a:1e:82:84:f8:f3:b3:54:c3:a6:49:38:4d:be:c8:38:
         63:df:6e:5a:d9:e6:8a:24:a7:1f:99:59:7e:5c:01:11:4f:70:
         5e:57:97:d5:d5:43:ac:11:5a:03:5f:82:8d:21:70:d5:2c:20:
         eb:ac:ef:24:ff:ba:2c:24:1f:ae:58:f2:92:89:20:ff:61:05:
         a9:09:c5:0a:49:89:35:68:b7:50:8e:70:d1:2c:2f:5a:9a:0b:
         a5:00:95:1f:58:55:b8:85:38:b3:8d:be:59:e3:71:c8:3a:8f:
         f4:c3:19:1a:56:22:b2:f7:92:9c:81:53:8f:fb:56:9d:8e:fa:
         98:60:4e:03:95:be:54:ff:ca:ad:3f:22:d2:36:b9:85:24:b9:
         69:ef:82:b7:2b:e9:85:f3:66:9f:2f:15:bb:6a:86:f4:ba:1f:
         63:62:f1:9f:69:29:b8:34:97:ef:b4:e8:2b:01:45:28:4b:74:
         3d:64:34:95:08:57:31:5e:44:8c:b3:92:f8:04:35:04:dc:42:
         0a:10:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:07 2026 by rpki-client