This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File:                     kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier:          tdDZx9CP71yHMxM3x11kSIjG0O0LCVGqqEbMaFj6bPQ=
Subject key identifier:   BB:FB:13:27:11:69:72:78:4B:72:9C:10:C9:F9:00:CE:2F:96:34:99
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer:       /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial:       1064
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number:          1064
Signing time:             Sat 24 Jan 2026 17:04:54 +0000
Manifest this update:     Sat 24 Jan 2026 17:04:54 +0000
Manifest next update:     Sat 31 Jan 2026 17:04:54 +0000
Files and hashes:         1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: 99CWSTHg6Ewk5sNNI3l5jjobKSKaAXz1oQJhxrdI9Nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
                          rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4196 (0x1064)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
        Validity
            Not Before: Jan 24 17:04:54 2026 GMT
            Not After : Jan 31 17:04:54 2026 GMT
        Subject: CN=6974fbb6-d526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:4e:80:34:81:e3:3f:de:e2:56:96:a0:af:
                    63:51:ab:b7:54:9a:4c:d8:8b:5d:50:d8:e0:d0:8f:
                    f1:75:bd:da:9b:cf:f7:3d:e7:0b:cd:19:9e:15:02:
                    1a:e7:ed:6c:96:4e:89:d5:ab:8e:36:1f:8c:bd:8d:
                    24:04:fe:7c:0c:8b:17:8e:23:66:18:6a:7b:ff:f7:
                    45:1f:7c:ec:d2:33:b0:38:6b:fa:25:6b:94:43:50:
                    51:80:50:9e:0e:98:a9:9f:85:67:2e:fc:c9:34:dc:
                    40:6e:8f:75:c4:2b:78:51:13:9c:85:6f:d3:0e:82:
                    1a:64:2c:a9:f5:88:74:e4:1b:e7:75:27:04:ce:c1:
                    41:21:aa:a9:3c:e3:ff:05:a8:44:0f:79:ae:f7:1c:
                    59:64:f4:d2:38:c4:da:76:cb:d5:97:89:af:dc:af:
                    49:15:b1:1c:28:7a:0f:02:35:80:c8:34:7b:f1:19:
                    61:b5:75:d4:11:a9:3f:fa:ff:15:55:e0:6e:e4:f7:
                    5b:4d:bd:ff:de:e9:81:0a:54:9f:3d:e9:97:47:5e:
                    4e:bf:0c:06:27:e4:99:6e:1c:38:60:33:17:83:a9:
                    73:56:01:22:da:e5:2c:6f:f2:b8:1c:3d:e9:5a:bf:
                    84:68:24:41:f1:91:9a:c2:c4:1b:fd:e0:ad:a5:75:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:13:27:11:69:72:78:4B:72:9C:10:C9:F9:00:CE:2F:96:34:99
            X509v3 Authority Key Identifier:
                keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:39:01:5f:74:2b:fe:fe:fe:90:cd:c3:8e:aa:cf:7c:da:05:
         d7:b7:75:e9:7c:4b:56:2b:80:57:cc:e9:c2:d5:ec:ca:f0:d8:
         07:38:b6:46:82:41:17:f1:4f:81:8e:54:b7:93:b3:da:2d:e5:
         45:c9:94:f6:69:4b:9a:87:b4:ff:79:4b:2e:ac:37:fc:62:44:
         6c:a8:0a:b9:a9:41:29:4f:7f:4c:af:06:23:3a:32:bc:5e:82:
         19:ea:60:d0:82:47:6a:45:be:e5:43:2e:41:c5:d6:4a:1a:aa:
         b6:80:03:e5:70:bb:72:9d:7c:08:ce:ab:4d:f3:99:5c:13:78:
         29:1d:1b:23:f6:1e:b9:16:c1:e3:00:ac:23:8e:e1:65:26:b1:
         c7:ed:68:ff:be:d3:eb:64:25:62:5c:29:32:1a:57:fd:97:e7:
         a6:c5:d1:51:f4:69:a0:b9:b7:0f:b5:7e:29:ed:f5:f0:f8:e8:
         a3:b2:be:7e:12:20:f8:2b:f5:e1:af:d8:8d:69:8b:50:41:ea:
         2a:3f:a2:63:9a:de:1e:62:c4:97:1a:e8:53:f7:27:aa:3c:bd:
         8b:f2:69:bb:11:02:7a:2c:a5:c8:ac:89:15:df:9a:95:5e:92:
         5e:72:f7:b4:85:89:22:4d:03:ed:b6:1c:71:cd:6f:a1:78:90:
         41:48:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:01 2026 by rpki-client