This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File:                     rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier:          vjZZULk5JVhWwLE2q7Q+7oexsyMoI9u3udtHQ7FNzPQ=
Subject key identifier:   2D:4E:71:8D:A9:55:5E:4E:0E:AF:FA:91:12:58:FA:3D:B1:50:01:79
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer:       /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number:          4A
Signing time:             Sun 25 Jan 2026 06:22:03 +0000
Manifest this update:     Sun 25 Jan 2026 06:22:03 +0000
Manifest next update:     Sun 01 Feb 2026 06:22:03 +0000
Files and hashes:         1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: TpF701dyT+efz8gTlQ8ZmmMBEuqGsKEJ1CwfYg5ihJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
                          rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
        Validity
            Not Before: Jan 25 06:22:03 2026 GMT
            Not After : Feb  1 06:22:03 2026 GMT
        Subject: CN=6975b68b-d9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:43:55:7e:c2:25:f6:1d:b2:d1:db:4e:a1:
                    06:b4:e9:1e:a6:1b:4a:65:63:87:e8:5f:41:5c:cc:
                    7e:9b:63:e5:6a:8a:0b:8c:cc:ae:52:95:5c:c4:23:
                    f8:41:fa:5f:c0:d1:0f:30:9d:d4:e5:b8:1a:04:fd:
                    ce:af:9f:c2:a9:0b:0e:5f:6f:be:2b:76:da:b4:40:
                    68:38:ab:20:e0:c8:1e:55:61:8a:b8:68:da:2e:13:
                    92:d4:f9:cd:1c:3e:ca:60:26:ec:3e:c6:07:b2:12:
                    88:7b:e5:cc:71:0d:e2:e2:c2:e9:de:f8:8c:cb:73:
                    94:ac:bc:69:4e:9d:ec:ad:3c:4e:84:88:42:6e:e4:
                    80:19:e2:78:c9:c3:d0:77:18:5e:23:be:a1:c6:e5:
                    ff:30:40:cb:85:b6:12:2b:d1:0c:45:39:26:c7:d1:
                    58:14:5a:fb:84:19:bd:ad:b5:77:1c:66:90:8a:52:
                    3b:26:99:e3:48:2f:ed:ba:cc:76:8d:b4:62:af:64:
                    1b:d8:92:74:66:02:c4:49:f4:c3:5b:dc:27:cc:52:
                    7f:47:e2:af:ea:69:09:ce:05:c3:d3:9b:24:6c:ef:
                    55:af:67:1d:a5:55:a7:c3:9d:59:95:ed:28:55:1e:
                    fd:15:3d:fa:51:da:f6:19:da:bb:e8:15:81:40:59:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:71:8D:A9:55:5E:4E:0E:AF:FA:91:12:58:FA:3D:B1:50:01:79
            X509v3 Authority Key Identifier:
                keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:13:af:3f:a8:7e:73:26:fe:80:e8:70:b7:cd:06:14:8c:
         87:f6:b4:f8:8c:db:c2:3a:4a:40:b6:71:a5:1b:ef:12:37:0a:
         31:b8:71:02:03:53:26:ca:5b:66:ab:91:10:5e:84:cb:fa:3a:
         14:1a:c5:5f:b3:37:4f:22:c1:8f:1b:0b:dc:80:70:bb:19:e9:
         63:4c:83:19:25:c7:5a:39:a8:5b:6b:4f:53:80:f7:6a:d4:b9:
         68:f0:b6:6d:3b:3e:c4:bd:b0:71:e4:f7:cc:d4:ff:2c:37:66:
         e8:90:26:bf:97:8f:0f:96:b7:4d:8f:bc:36:a4:6f:00:07:42:
         de:2b:09:88:11:08:f9:33:a0:6d:52:26:76:8b:0c:54:85:14:
         24:f4:46:37:48:0b:dc:a5:8b:e7:b8:ea:3e:90:8d:c6:7a:26:
         af:7f:98:9e:6c:5f:fb:43:91:d0:18:46:ea:c6:b5:bc:bd:85:
         62:9e:14:08:0a:67:29:68:01:49:2c:36:5d:bd:aa:db:b2:84:
         9f:c3:63:e5:08:cd:b6:b5:f6:29:3f:32:13:11:3c:7b:ad:67:
         6b:cf:f6:3c:77:c5:9b:07:5e:ae:7d:ca:4d:6d:1d:ce:9a:9f:
         a0:f7:d2:72:be:aa:cf:ee:19:8d:70:de:34:7c:b2:d3:38:c0:
         1d:ec:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:42 2026 by rpki-client