This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
File:                     kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json)
Hash identifier:          bVZYL3L5+MYi3u9epVkyUwOSKvuyAjF9fxr59XCr7nk=
Subject key identifier:   78:F5:FE:91:67:48:6F:82:9E:B4:BC:00:92:57:69:CD:D5:B2:F8:FD
Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Certificate issuer:       /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
Manifest number:          01B4
Signing time:             Sun 25 Jan 2026 02:47:33 +0000
Manifest this update:     Sun 25 Jan 2026 02:47:32 +0000
Manifest next update:     Sun 01 Feb 2026 02:47:32 +0000
Files and hashes:         1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: EuUL1WOcbHUAj8K1OWgPO7Z7NoZ2dDHHYUIaDpW4zjY=)
                          2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: YCjR3XX3Cd2zeYLJZKZ4kwaaPa0+0oaBqmsJC+zthpI=)
                          3: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: 3SC9H6oC7G/BQoC1mJ0aWR7RoAsy3S6P5QbGLaKsxIA=)
                          4: 59962840D01911EE96596B16C4F9AE02.roa (hash: 47CtM1yN1CdjUlF4SY8eSFCkgrsejSEAp2dNpEZ2S0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl
                          rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
        Validity
            Not Before: Jan 25 02:47:32 2026 GMT
            Not After : Feb  1 02:47:32 2026 GMT
        Subject: CN=69758445-0676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:0e:52:1e:24:f7:ae:8d:39:b4:e5:6a:4c:
                    f6:b8:26:ea:60:00:86:97:21:be:a1:a8:ea:a6:00:
                    4a:7f:27:6e:c9:b2:53:cb:d9:ab:84:13:c5:96:3a:
                    16:3f:1b:75:eb:2d:bf:3d:12:c6:c2:8e:4d:59:6f:
                    c7:a0:a7:7b:46:fa:35:25:bc:89:21:a2:e6:09:4b:
                    79:40:8f:ab:51:ae:e5:05:7b:2d:9f:37:d5:58:e0:
                    06:3b:a2:7e:74:1a:ee:8e:c0:bc:bc:de:db:9c:84:
                    34:fd:b7:54:ab:73:d7:80:24:85:37:22:e9:e8:51:
                    9b:20:10:01:b3:26:8d:2b:33:5e:34:0f:57:78:6e:
                    52:f2:f5:37:5d:90:16:ca:5b:e5:04:bb:ab:59:06:
                    90:83:65:ea:df:d9:d4:f5:e2:e2:00:0b:de:11:50:
                    87:2f:51:e8:73:d5:da:46:ea:6f:a1:58:f6:46:b6:
                    4a:cb:b7:7a:c4:4c:71:a9:07:04:8c:5f:a2:cd:a4:
                    b7:5c:dd:73:d9:17:8a:4c:0a:02:1f:50:ed:e8:a5:
                    a4:ca:2f:9c:31:2f:b6:2f:6e:5d:22:66:bf:9e:67:
                    fc:21:bf:f2:86:13:49:1f:59:67:f0:c1:6c:1d:d1:
                    6f:e5:d5:0f:ac:2e:95:a8:d6:bc:c1:cf:c2:22:b1:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F5:FE:91:67:48:6F:82:9E:B4:BC:00:92:57:69:CD:D5:B2:F8:FD
            X509v3 Authority Key Identifier:
                keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:88:7e:28:10:b6:08:2a:39:e5:fe:61:f3:48:10:11:e0:0c:
         a1:9f:f1:09:e3:e3:80:25:69:28:4d:21:80:77:bb:ca:e7:5c:
         ff:2f:55:df:b3:73:74:44:37:6d:db:b6:d7:36:22:35:df:9f:
         02:82:62:35:e0:34:3a:ed:64:41:1e:b0:4b:78:e0:ec:c3:ad:
         b0:61:f2:93:41:a8:9e:d4:70:00:fa:b2:34:23:3b:4c:a6:4b:
         d3:b9:73:b7:f4:34:07:b1:b2:7e:30:22:66:f9:d4:e5:47:e6:
         af:73:3a:b0:97:f6:cd:7b:f5:35:db:db:80:64:ee:f4:2b:85:
         05:f1:c4:69:23:8c:eb:8b:9b:33:55:35:74:a5:7e:0c:5f:14:
         19:a1:45:ba:5c:30:01:8c:cd:e3:f5:55:0e:48:11:15:d2:6f:
         58:d0:06:c8:7e:af:c2:ea:84:fa:fb:ab:fc:4c:7d:77:fb:bc:
         e2:e7:b6:40:3a:cb:6d:b3:a1:72:ed:97:7a:61:0c:b3:34:9f:
         cd:f8:4c:a4:c8:bb:60:e2:08:c4:07:5c:31:8d:66:ae:45:d5:
         44:5d:a8:07:6b:be:cf:43:df:e4:eb:c8:ed:81:d8:d9:d4:24:
         fb:fc:91:4f:24:bf:90:06:99:c6:bb:bc:85:69:9b:8f:c4:b7:
         52:74:58:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx
RERFMzBENjMwHhcNMjYwMTI1MDI0NzMyWhcNMjYwMjAxMDI0NzMyWjAYMRYwFAYD
VQQDDA02OTc1ODQ0NS0wNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxssOUh4k966NObTlakz2uCbqYACGlyG+oajqpgBKfyduybJTy9mrhBPFljoW
Pxt16y2/PRLGwo5NWW/HoKd7Rvo1JbyJIaLmCUt5QI+rUa7lBXstnzfVWOAGO6J+
dBrujsC8vN7bnIQ0/bdUq3PXgCSFNyLp6FGbIBABsyaNKzNeNA9XeG5S8vU3XZAW
ylvlBLurWQaQg2Xq39nU9eLiAAveEVCHL1Hoc9XaRupvoVj2RrZKy7d6xExxqQcE
jF+izaS3XN1z2ReKTAoCH1Dt6KWkyi+cMS+2L25dIma/nmf8Ib/yhhNJH1ln8MFs
HdFv5dUPrC6VqNa8wc/CIrF5eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj1/pFn
SG+CnrS8AJJXac3Vsvj9MB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx
NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1
dVZNYk9iTnV4MUlkM2pEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3iH4oELYIKjnl/mHzSBAR4Ayhn/EJ4+OAJWkoTSGAd7vK51z/L1Xf
s3N0RDdt27bXNiI1358CgmI14DQ67WRBHrBLeODsw62wYfKTQaie1HAA+rI0IztM
pkvTuXO39DQHsbJ+MCJm+dTlR+avczqwl/bNe/U129uAZO70K4UF8cRpI4zri5sz
VTV0pX4MXxQZoUW6XDABjM3j9VUOSBEV0m9Y0AbIfq/C6oT6+6v8TH13+7zi57ZA
Ostts6Fy7Zd6YQyzNJ/N+EykyLtg4gjEB1wxjWauRdVEXagHa77PQ9/k68jtgdjZ
1CT7/JFPJL+QBpnGu7yFaZuPxLdSdFin
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:24 2026 by rpki-client