This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File:                     KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier:          4K3XKwTu29vJhiV7BKn5Oe/9PFGBuAX4/Ji5O8Rmg3c=
Subject key identifier:   6B:2F:74:33:4B:DC:2B:0A:BE:47:EA:F2:3A:19:15:5D:B1:68:42:70
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer:       /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number:          C7
Signing time:             Sun 25 Jan 2026 05:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:58 +0000
Manifest next update:     Sun 01 Feb 2026 05:00:58 +0000
Files and hashes:         1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: swMnlKu6BIg2rKI/FLyU5uMZA8GB6Zw9jBDS9Vugs7Q=)
                          2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: McJ+hP8GUu/Ld5Rarq2qGp1xUtwodZVqiVkbBVRJzkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
                          rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
        Validity
            Not Before: Jan 25 05:00:58 2026 GMT
            Not After : Feb  1 05:00:58 2026 GMT
        Subject: CN=6975a38a-16fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:37:ce:48:d1:a6:a3:72:5e:f9:9c:57:d0:
                    85:44:ec:e0:07:25:bc:00:4c:72:ce:37:3e:21:74:
                    24:76:d9:07:0a:11:96:71:d1:37:86:52:33:22:15:
                    77:7b:0a:6c:a7:aa:6e:71:83:91:b8:f3:5f:96:ba:
                    f8:a4:c2:eb:d2:ef:f1:66:7c:ae:4a:7e:31:95:be:
                    4d:e0:0e:85:ff:fe:0f:5c:fd:ab:95:0f:24:4d:9a:
                    88:b1:67:fb:d6:e5:ea:40:78:ed:a8:b3:b4:5a:40:
                    1a:8c:87:ed:b7:41:27:7a:2f:86:b5:f7:16:c1:67:
                    9b:c7:8b:64:89:44:bf:2e:2c:1e:8f:d0:78:15:07:
                    de:3a:59:61:00:64:d2:be:70:da:e8:43:d0:ca:73:
                    20:3c:2f:6e:4f:68:cf:d9:72:64:92:53:e8:d8:66:
                    b7:12:df:f5:8e:5a:5c:ae:e7:3c:40:73:e0:c6:39:
                    b7:e6:b5:5d:a9:7b:d0:75:d2:50:fb:bb:82:2d:29:
                    55:ae:66:e5:1f:f3:98:a2:ea:75:96:d6:2b:3c:db:
                    70:f6:28:d8:c5:a5:ba:36:5f:2e:d6:8d:7a:7f:57:
                    33:20:6b:bc:ac:fc:78:e6:9f:c4:ac:e3:9c:39:c3:
                    02:fd:98:e3:a0:95:03:af:0d:37:06:b0:3d:29:a8:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2F:74:33:4B:DC:2B:0A:BE:47:EA:F2:3A:19:15:5D:B1:68:42:70
            X509v3 Authority Key Identifier:
                keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0c:24:c4:40:c7:ad:4f:50:03:50:1a:4d:3d:02:ad:85:8b:
         85:30:e4:03:ec:f6:19:2a:55:77:8d:2f:80:4c:52:a2:d3:a4:
         20:fe:a3:0b:c9:f1:89:36:e2:8d:65:96:af:4c:21:5b:60:8f:
         d4:13:93:68:19:f7:d7:d8:ad:b0:48:e5:b1:99:ff:34:fe:09:
         fc:82:28:46:12:10:cd:df:38:60:d9:32:dd:95:3e:d3:ad:3a:
         83:c6:2a:2f:a0:54:c6:f1:30:9e:2a:4a:33:96:cf:de:ae:01:
         27:d9:2a:ef:66:9a:0d:18:55:fc:3b:30:ae:b1:14:6c:01:dd:
         72:46:6a:5c:c8:1e:8d:3c:95:66:b0:ca:49:fd:4d:e2:f4:39:
         fc:0d:a1:3c:1b:43:a4:da:d9:2c:5a:f3:df:0b:6d:e4:46:ab:
         a7:07:fd:45:fa:af:d3:81:44:bb:24:78:67:4c:e7:87:a0:a9:
         db:51:0a:b3:88:21:48:ea:01:de:75:72:5d:2a:83:3b:73:56:
         07:27:d8:2b:cc:b3:ab:e3:95:b9:d9:88:c5:3c:05:23:b6:72:
         e3:71:7c:fa:9f:10:2f:1a:b1:14:5a:63:48:17:ac:79:10:9b:
         e9:c7:ba:ff:e6:f7:66:fc:04:98:2b:14:91:14:2c:b7:4d:6d:
         31:bf:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:34 2026 by rpki-client