This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
File:                     KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json)
Hash identifier:          rxQAVq8s2xftxo2BeCfIWJAOpQw7/tP6HTNg9tK0uM4=
Subject key identifier:   37:A2:88:05:5C:A9:FE:19:C3:47:99:26:DE:CC:78:F3:39:67:30:5F
Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
Certificate issuer:       /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Certificate serial:       0AD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
Manifest number:          0ABE
Signing time:             Sat 24 Jan 2026 18:59:25 +0000
Manifest this update:     Sat 24 Jan 2026 18:59:25 +0000
Manifest next update:     Sat 31 Jan 2026 18:59:25 +0000
Files and hashes:         1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: 1VIQ/3VnFe/mk/7CFmP/klX2FnO+QxaldeP0QVwcu/E=)
                          2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=)
                          3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
                          rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
        Validity
            Not Before: Jan 24 18:59:25 2026 GMT
            Not After : Jan 31 18:59:25 2026 GMT
        Subject: CN=6975168d-ba49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:ff:87:19:52:7b:d5:53:1e:d9:48:86:61:
                    3b:f3:b5:b4:fb:d0:ff:db:f3:ab:37:5d:27:17:d8:
                    3f:99:36:67:2c:ce:83:f7:71:c5:c0:8d:7e:84:d7:
                    4e:c8:7e:10:70:9f:34:2f:f0:c4:5a:5d:ef:ff:87:
                    b2:4b:fd:a9:68:ee:3d:96:98:39:0d:0f:ff:94:eb:
                    13:fc:37:eb:5f:5e:8d:e1:05:9b:51:e6:1b:13:19:
                    2d:d7:72:86:96:40:7e:2a:29:2d:f2:f9:95:0d:94:
                    9a:9f:d2:21:cb:97:68:cd:a9:a3:b2:ab:50:4a:e1:
                    5a:62:d2:0d:81:35:78:07:f3:40:4c:84:58:57:c4:
                    be:e3:43:cb:69:0a:df:a7:bc:ba:66:be:57:4d:81:
                    18:fd:59:a2:6b:9d:43:b5:1a:95:c0:1f:9a:de:75:
                    27:25:96:79:84:ee:49:5f:7d:a0:ee:35:75:0b:a8:
                    60:f8:9f:b5:b0:c9:b3:c5:85:64:0d:28:f8:19:1f:
                    2e:26:b1:09:70:cf:dc:13:3e:47:de:4a:8d:75:78:
                    a6:32:88:7b:41:30:85:8c:da:87:c7:15:e0:05:b4:
                    98:58:9f:8b:97:6d:12:0d:eb:a4:00:99:3a:be:0d:
                    dd:4b:cf:22:e0:a3:6a:dc:ce:97:9e:4d:3d:f1:d5:
                    c8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A2:88:05:5C:A9:FE:19:C3:47:99:26:DE:CC:78:F3:39:67:30:5F
            X509v3 Authority Key Identifier:
                keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:bc:7f:d1:94:94:50:42:08:21:4a:9a:31:82:7c:9d:f0:
         d7:7b:5b:99:77:40:18:68:8b:a9:34:ca:60:ab:35:53:d6:11:
         43:ee:ca:38:82:ba:3d:32:9d:1d:59:ca:44:45:5b:16:0b:13:
         83:a9:23:d5:97:31:83:fa:a1:38:f9:5d:b6:20:e7:a8:2d:0c:
         81:63:7b:21:ae:39:9e:ca:db:a5:10:d1:23:1c:91:2d:71:27:
         1a:c1:ef:0e:ed:f6:b3:7c:bf:08:8e:00:a1:36:cf:e7:14:c3:
         3c:db:cb:b9:51:e7:26:f9:f8:3a:f7:76:5a:d7:d6:97:29:8f:
         3e:cd:b8:da:0e:92:bb:8d:5b:db:8c:ff:2e:4b:b9:6f:6e:ec:
         2c:46:3e:25:a0:64:6e:09:4b:ab:34:2f:91:a3:99:c6:1d:c0:
         25:68:3c:68:65:a8:f1:fa:50:9c:6e:97:03:1f:23:d8:b0:ea:
         e3:d9:6a:4a:f7:16:02:c7:ec:d4:70:2e:b8:cc:09:62:31:60:
         6b:0a:ff:d6:03:1c:19:ac:9c:e2:ce:e1:c0:be:fc:de:fc:e8:
         8c:89:4e:0c:3d:a3:57:a8:b7:83:ef:82:87:6f:41:5f:37:ba:
         8f:87:1c:7d:d7:fb:18:7e:2f:52:25:07:c8:25:d6:4f:0a:29:
         66:61:6d:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC
RTVBQzBENkIwHhcNMjYwMTI0MTg1OTI1WhcNMjYwMTMxMTg1OTI1WjAYMRYwFAYD
VQQDDA02OTc1MTY4ZC1iYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+b/hxlSe9VTHtlIhmE787W0+9D/2/OrN10nF9g/mTZnLM6D93HFwI1+hNdO
yH4QcJ80L/DEWl3v/4eyS/2paO49lpg5DQ//lOsT/DfrX16N4QWbUeYbExkt13KG
lkB+Kikt8vmVDZSan9Ihy5dozamjsqtQSuFaYtINgTV4B/NATIRYV8S+40PLaQrf
p7y6Zr5XTYEY/Vmia51DtRqVwB+a3nUnJZZ5hO5JX32g7jV1C6hg+J+1sMmzxYVk
DSj4GR8uJrEJcM/cEz5H3kqNdXimMoh7QTCFjNqHxxXgBbSYWJ+Ll20SDeukAJk6
vg3dS88i4KNq3M6Xnk098dXI+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeiiAVc
qf4Zw0eZJt7MePM5ZzBfMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC
MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH
R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9kbx/0ZSUUEIIIUqaMYJ8nfDXe1uZd0AYaIupNMpgqzVT1hFD7so4
gro9Mp0dWcpERVsWCxODqSPVlzGD+qE4+V22IOeoLQyBY3shrjmeytulENEjHJEt
cScawe8O7fazfL8IjgChNs/nFMM828u5Uecm+fg693Za19aXKY8+zbjaDpK7jVvb
jP8uS7lvbuwsRj4loGRuCUurNC+Ro5nGHcAlaDxoZajx+lCcbpcDHyPYsOrj2WpK
9xYCx+zUcC64zAliMWBrCv/WAxwZrJzizuHAvvze/OiMiU4MPaNXqLeD74KHb0Ff
N7qPhxx91/sYfi9SJQfIJdZPCilmYW28
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:05 2026 by rpki-client