This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File:                     k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier:          URA5dlVKLFdzh+ZoG5oGqsZYSahI18UW0kRZHGwNtTI=
Subject key identifier:   04:EB:0A:01:47:33:78:2C:79:3F:18:69:3F:14:A5:F7:8D:41:8D:E5
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer:       /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number:          28
Signing time:             Sun 25 Jan 2026 06:43:47 +0000
Manifest this update:     Sun 25 Jan 2026 06:43:46 +0000
Manifest next update:     Sun 01 Feb 2026 06:43:46 +0000
Files and hashes:         1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: 1a64MEynIKqt6WmnZqKMPxASvHWq+UhBoR//0mOo6fE=)
                          2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: WMpjwelneu59KCwsFhtoJENKBFdbJa7sC91eiRfTIfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
        Validity
            Not Before: Jan 25 06:43:46 2026 GMT
            Not After : Feb  1 06:43:46 2026 GMT
        Subject: CN=6975bba2-d4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:b8:37:6d:2e:88:01:43:e5:8e:da:ff:e2:
                    db:9f:8b:9d:e5:ed:50:79:af:20:20:5e:ec:bc:cb:
                    04:f1:41:80:d0:32:ac:ce:0b:50:82:72:57:b6:fb:
                    4a:65:7e:67:c0:e3:7d:10:e6:89:d1:93:b7:74:c2:
                    22:c9:92:79:6c:57:32:60:d4:f4:f0:8a:1f:9d:17:
                    fc:dc:3d:83:30:d6:ae:6c:14:ee:34:99:1c:fa:ae:
                    70:64:52:64:17:c8:fa:15:6b:2b:fb:c0:00:23:4f:
                    f7:5a:6e:95:3f:7c:b6:03:d7:62:3a:83:7d:15:c2:
                    17:64:ef:67:0f:d4:04:6d:0c:56:e2:32:49:2c:c2:
                    7e:a4:ba:24:be:51:12:53:ae:8d:3b:1c:ea:59:28:
                    c1:3d:bf:cd:cb:a3:01:8e:ee:05:a2:23:4c:b7:3d:
                    77:5c:8b:aa:5e:91:17:1e:3c:0b:ea:1b:b3:27:fd:
                    c4:3f:42:05:80:78:ae:38:f7:19:f3:9f:03:9e:f6:
                    bd:66:8b:9f:8a:d2:47:15:96:46:6a:0a:2b:a9:61:
                    4a:b4:27:e7:be:38:19:c6:d9:d1:15:fd:e1:dc:0e:
                    ce:b9:a6:38:8e:d9:31:cc:fe:c9:7a:5c:f5:cc:a4:
                    3e:58:74:ec:a7:32:f0:9b:c6:5e:9f:18:4f:01:6c:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EB:0A:01:47:33:78:2C:79:3F:18:69:3F:14:A5:F7:8D:41:8D:E5
            X509v3 Authority Key Identifier:
                keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:76:86:7b:16:b8:25:cb:44:8e:94:72:b7:92:2b:b9:49:59:
         19:11:69:41:c9:08:6d:dd:65:82:cd:d7:3d:52:b3:c0:7d:c9:
         9c:59:f9:89:b2:62:07:70:10:a9:41:7c:e9:da:b7:89:60:d2:
         e9:7f:f8:a6:37:34:45:f4:e8:45:c3:e0:0d:8a:da:9b:2f:1f:
         e2:43:16:ed:63:c0:79:40:61:88:8b:a4:35:fd:70:de:98:a8:
         e8:e9:ea:d6:82:29:da:fb:d1:16:14:fd:5d:98:60:94:58:50:
         fc:30:ff:8f:06:f5:05:78:1b:02:d2:37:7e:ad:bd:ba:bb:6e:
         e0:ea:66:5c:6b:13:ba:d0:d3:ff:16:8f:3f:6c:c6:df:a0:61:
         97:41:5e:8d:e4:ea:91:a0:3a:25:95:9b:b7:12:b6:41:e0:ab:
         9d:b8:c2:ce:31:a5:99:b7:cd:57:e0:ab:fa:5c:fc:c5:c9:ae:
         39:51:11:b4:a5:83:9c:a9:22:73:10:73:e4:1d:69:b3:b3:55:
         a7:33:f0:1f:0e:50:9a:f3:3c:cf:2d:c8:4a:b0:46:e9:59:7d:
         13:e2:f0:f7:76:8d:7d:c7:b6:0d:c7:4a:94:f8:3d:b1:fe:c7:
         f6:b1:ad:cd:93:b6:42:fe:14:89:9f:fc:ed:ba:f5:6f:f4:ec:
         1a:3f:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:01:48 2026 by rpki-client