This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File:                     Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier:          3Kyg7L9bPScvsnVtElqr7+b9oMhjpWGNuaE1FzyNOWI=
Subject key identifier:   37:22:7F:CF:23:87:79:C6:44:FF:08:86:76:F9:C7:6C:1C:22:0A:B4
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0CA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number:          0CA2
Signing time:             Sat 24 Jan 2026 18:15:30 +0000
Manifest this update:     Sat 24 Jan 2026 18:15:30 +0000
Manifest next update:     Sat 31 Jan 2026 18:15:30 +0000
Files and hashes:         1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: ZpMs0YTssissh4ASQZ8QmitbZ9cXgwgHI8KBDAWKSAc=)
                          2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: HCyq9+JbYnWqBjG857egLJAZjZ/A6J6wtCC9YMXsA+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3240 (0xca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: Jan 24 18:15:30 2026 GMT
            Not After : Jan 31 18:15:30 2026 GMT
        Subject: CN=69750c42-04a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:42:3f:d4:83:72:e6:48:9b:68:dc:a9:ed:
                    62:04:37:b9:91:84:73:18:a8:11:7d:54:36:1d:be:
                    e5:eb:61:cc:24:5b:5a:15:0c:66:eb:44:bd:54:4f:
                    4d:66:1c:32:10:1e:00:8b:7c:85:fa:b3:1f:d7:56:
                    f8:fa:5b:a1:90:61:98:19:f3:55:03:11:a2:db:3a:
                    3a:a0:a7:26:90:4b:9d:44:c8:7b:1f:2f:df:8a:4b:
                    00:37:41:8b:b0:cc:df:97:d2:61:d7:67:07:23:a0:
                    2d:38:9b:42:31:1b:95:e8:dd:83:dd:5a:12:80:cb:
                    d4:6d:cb:a7:1d:db:8c:80:3c:5f:a5:89:04:7a:1d:
                    11:56:4c:34:ff:9a:0b:b1:f4:3d:c1:30:54:21:9f:
                    54:16:d8:b6:57:31:2a:de:7d:52:3c:fe:ee:79:2b:
                    04:61:36:df:f9:90:e4:e2:c7:48:be:b9:ca:8c:2d:
                    5f:51:7d:4a:76:30:22:42:b1:11:aa:37:db:40:78:
                    3d:eb:ae:22:5a:77:59:0c:6b:f0:b0:93:9c:97:95:
                    7b:e7:1a:4d:bc:e8:b1:99:8d:f2:ac:86:7d:bd:98:
                    77:de:d5:38:1b:2e:28:7d:b8:4b:86:90:ea:cb:da:
                    e9:39:aa:17:9f:bf:59:6a:cc:97:49:a2:ef:34:0b:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:22:7F:CF:23:87:79:C6:44:FF:08:86:76:F9:C7:6C:1C:22:0A:B4
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4f:cd:43:cd:07:97:47:a9:ca:63:4f:f4:86:31:09:56:19:
         24:39:42:e2:d3:3f:38:54:0c:35:f4:15:04:b3:6c:53:b5:df:
         ad:2a:99:a8:92:52:9e:2d:e3:27:28:bc:09:90:f6:74:12:6a:
         6e:47:8e:bc:32:40:34:69:d3:95:25:e8:07:0f:5f:4e:1c:ee:
         14:3f:ec:e4:e9:37:91:d8:d5:ed:c5:fb:ad:47:0a:28:fa:ca:
         46:99:d2:89:17:cb:8a:fc:f7:46:e9:54:11:e2:f7:2b:12:a0:
         14:71:03:90:b4:77:ac:e7:97:41:1a:11:1c:59:d4:f3:a5:dd:
         2e:11:ce:ee:53:2e:ba:f0:99:86:64:e7:80:da:02:02:5b:e9:
         08:bd:93:27:f4:aa:d9:62:5c:c2:0d:85:af:f8:a2:e8:10:9c:
         e9:9a:e9:3b:af:b8:03:74:5b:44:7a:dd:f4:46:db:6c:c1:88:
         0f:2d:03:64:1d:7d:0c:a9:b6:3f:c0:80:fd:4a:06:28:cc:1a:
         d0:e0:7f:2f:50:94:d8:f9:7c:8b:a4:99:66:8e:bb:ee:b7:ea:
         ee:3f:af:a3:86:b9:5c:ec:65:37:4c:12:a1:d5:4c:76:52:23:
         bb:e6:71:0b:32:08:b1:5d:c0:30:95:28:96:cc:37:58:d3:7c:
         e9:03:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:14 2026 by rpki-client