This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
File:                     kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json)
Hash identifier:          bNVw4jy6o6LC5JJPEZeQTDsIuFRNbt3F8zrvQLKzQrA=
Subject key identifier:   2E:86:55:D9:11:3D:89:93:87:31:DA:9F:29:D0:6A:F3:D4:AB:03:67
Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91
Certificate issuer:       /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491
Certificate serial:       0A85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
Manifest number:          0A7E
Signing time:             Sat 24 Jan 2026 19:04:02 +0000
Manifest this update:     Sat 24 Jan 2026 19:04:02 +0000
Manifest next update:     Sat 31 Jan 2026 19:04:02 +0000
Files and hashes:         1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: 4QnooE6BFyiKlXui3SCl0IgBZ2EqeInln/txCdpqUkY=)
                          2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: QAHIkspdc3TnmsVMtC5FECO+wrvdYFQYpTaiZNKj4yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl
                          rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693 (0xa85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491
        Validity
            Not Before: Jan 24 19:04:02 2026 GMT
            Not After : Jan 31 19:04:02 2026 GMT
        Subject: CN=697517a2-c8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:56:fd:0a:08:72:0a:93:45:32:6b:fb:11:
                    cf:77:67:ce:91:a2:e6:86:1c:27:a2:8a:1b:9a:ce:
                    26:9a:ba:c4:e3:91:b9:de:05:22:7b:a0:ad:71:d3:
                    25:24:ce:90:7a:9d:12:8b:d1:42:4c:6c:b4:8d:3a:
                    07:1b:3a:51:ee:52:f2:89:15:ee:71:f8:27:49:84:
                    3e:f1:30:b4:5c:cd:93:ce:35:df:44:18:31:d8:17:
                    ae:0f:09:e1:42:28:9e:30:f7:5a:09:f7:6c:25:ee:
                    4b:35:49:af:24:1d:c9:60:62:29:7c:f1:0b:03:7e:
                    d8:7f:62:32:6a:29:79:50:6e:c6:58:94:0c:26:3a:
                    df:ca:47:37:11:26:e4:60:b3:3c:00:46:10:94:c0:
                    e0:e9:5e:80:8f:56:a5:00:4f:00:2a:2c:2a:6b:2c:
                    24:ae:36:c0:be:2d:9a:f6:1f:a8:34:d4:1a:47:47:
                    71:e9:53:f4:e1:ee:43:b4:7e:1f:5a:43:39:b5:5f:
                    7e:61:0a:9d:1b:13:48:a4:43:97:d9:61:ed:4b:a7:
                    42:c7:57:b6:2b:73:81:4a:e5:76:5e:fb:ea:22:eb:
                    7a:b2:98:60:57:d8:37:8b:49:55:87:c6:6e:2b:56:
                    06:f8:a8:62:a6:4c:2c:b0:c6:2e:e1:10:7f:4e:b7:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:86:55:D9:11:3D:89:93:87:31:DA:9F:29:D0:6A:F3:D4:AB:03:67
            X509v3 Authority Key Identifier:
                keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:02:5a:90:c3:c4:a4:9a:fd:9b:93:97:13:af:fe:f9:db:78:
         e2:1f:f7:78:66:b8:22:42:48:0b:71:a9:13:82:ad:c7:06:7c:
         49:ef:2a:13:da:3b:0d:f2:ea:c9:d3:1b:6d:2c:ea:eb:21:12:
         d8:70:09:7e:ae:7a:d6:f4:c1:ad:07:2e:d1:03:6d:88:36:9b:
         4b:ec:d3:66:ca:23:d8:bd:f5:3f:72:fe:f7:bd:70:6e:c5:22:
         d9:53:df:1a:d3:fd:b4:e5:a9:37:be:00:54:95:11:10:6f:0c:
         64:ae:5b:e2:eb:5a:93:01:a6:4b:26:a8:72:3a:27:e0:fd:c8:
         9d:25:38:a8:93:45:53:05:7a:25:87:d8:01:6e:c6:5d:5c:93:
         72:57:fa:5d:63:52:e6:83:0d:4b:66:c3:60:33:3b:66:74:96:
         de:f5:c0:b2:ab:28:a2:61:e0:7b:3a:0e:61:00:17:60:f1:11:
         ea:11:08:eb:c1:51:8b:7b:8d:33:45:56:7f:87:ff:63:c8:78:
         ad:b7:ed:7b:28:49:dc:6b:78:ef:fe:77:c9:81:39:1b:bc:7d:
         67:6a:c2:a4:5d:eb:7b:ac:81:d9:5f:25:90:11:1f:17:7d:77:
         cd:be:91:3c:26:5e:3d:39:8c:18:fe:d4:31:d2:52:51:01:2d:
         43:1e:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:30 2026 by rpki-client