This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File:                     KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier:          DpjHcCNHJzlpBe8y32t7CsWJw5ae8BubDY+zRWnupX8=
Subject key identifier:   EE:95:EF:3B:64:A4:E0:37:E4:3C:AF:D8:6C:B8:F6:AE:39:4A:40:0A
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       0494
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number:          0413
Signing time:             Sat 24 Jan 2026 23:51:52 +0000
Manifest this update:     Sat 24 Jan 2026 23:51:52 +0000
Manifest next update:     Sat 31 Jan 2026 23:51:52 +0000
Files and hashes:         1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: VY5JRUE2YZwrGKSdDWs5TOJg1Fg1iYj8GBNefG9OQeY=)
                          2: 69738B14E8AD11F09A679225586F56BC.roa (hash: PcMWgbTomfVmzOPfyw5PbMrfv3lqV9Tx72HMdZAnfm0=)
                          3: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: x/fURVgHMxeoAlarve9A+lF6P60f2bclShA/wwrURkM=)
                          4: 458AC21A684111EEA6632877C4F9AE02.roa (hash: 0etHP0vNjZ0wS7deZi50YLUT1cDycXszc/epOvXick4=)
                          5: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: TriCCnFo4mOMKJL+HVNMjRDt9bPh+YF5+Eq+SLW5G8k=)
                          6: 69E7D456E8AD11F09A679225586F56BC.roa (hash: QLNDsByG1QX2WiXvNzlSdD44sYckrLeaORLSQtsZWZ8=)
                          7: F83786F4030011F0984B974FC4F9AE02.roa (hash: NnqzdhTneChMcHeCwKuKEbMTRZZZ4OZecUCnjJ6o38A=)
                          8: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: UWjsDTna3xN8UXBvUtn5RQ4vzV2naXa6iAAtPOuRpNA=)
                          9: 2F24736869C111EF92B54060C4F9AE02.roa (hash: Miqja/vpKVAaF/vnRgSmVQ18Av7Df4WDRSV+aGQxo+c=)
                          10: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: 0aUzLo+tj0STYntnMy41IKYzEm935Bzt+cazcmTnPgc=)
                          11: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: xFISd+ttEAQblHfttx8rPYImOsDbFXxuc1pYVxxc5iM=)
                          12: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: otwHNOckyf1ytn1Apq/1BeR1CNk021GVJMzJD9T7ctY=)
                          13: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: cmDbt6+hgVAuc68D0QOLjv6gRVfjKRHOGDZYET5JrIM=)
                          14: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: 7jeiGelpitVZJ2SDM97NQyDQ054WKrwcVFs2fiL9rR4=)
                          15: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: /x1NixuQhNxLXo/3apZddriClLaw/KTmbAeb4wF5saI=)
                          16: A336FE62609111EFB751B771C4F9AE02.roa (hash: MFUO2Vwggul03zb8VthB8JTwYiWWzEcIazSxBfoGylk=)
                          17: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: V/oKRNRfbJinqpBjkqvJ5o6sCG+SkzmNR18bmVNkN0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Jan 24 23:51:52 2026 GMT
            Not After : Jan 31 23:51:52 2026 GMT
        Subject: CN=69755b18-9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:84:6b:35:62:43:81:23:8c:66:6e:db:8e:
                    53:9d:ac:44:bd:22:6a:7e:84:a6:1c:8d:00:ba:ba:
                    bb:2e:88:8e:10:32:cf:68:7a:e0:70:22:0c:3a:3c:
                    e9:46:58:23:c2:6f:79:36:76:72:94:ea:c4:84:f1:
                    2c:63:fc:8f:14:5a:da:73:5a:90:73:f6:31:0d:8b:
                    64:b9:57:80:84:4b:9f:75:bc:60:2d:47:26:67:e1:
                    1f:e4:28:8f:db:41:4c:92:30:5a:a9:b6:f9:11:d1:
                    3f:95:42:a9:a5:8c:4f:c1:90:93:1b:e6:ad:c2:24:
                    0a:95:94:f8:ba:f8:a4:4c:16:23:93:61:fb:48:f2:
                    85:b0:5b:d4:83:c8:42:11:4c:53:db:1d:53:e9:af:
                    95:65:40:cc:e6:8d:05:45:f1:27:38:c7:1b:b5:09:
                    43:99:26:1a:d7:a7:14:25:4d:6b:ae:e5:04:26:8c:
                    87:90:26:e5:ab:ca:2e:98:82:37:4e:4a:60:68:2f:
                    c9:54:bd:74:d6:a0:7b:54:f8:c8:35:fe:c2:5c:9a:
                    4a:05:6e:a9:be:d2:49:a4:da:ac:75:48:15:9d:8a:
                    e4:24:24:45:cb:29:e1:f9:9a:a6:dc:49:c2:d4:72:
                    5f:05:c4:c5:81:0d:77:03:f7:d3:be:8c:3b:0f:94:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:95:EF:3B:64:A4:E0:37:E4:3C:AF:D8:6C:B8:F6:AE:39:4A:40:0A
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:00:50:d4:d4:1a:e0:ad:cb:60:ba:16:52:2b:f3:1f:45:f3:
         92:20:82:be:44:d7:7d:f0:d2:db:47:fb:e7:87:86:5e:3c:60:
         21:4c:08:31:2e:10:30:18:ef:e6:41:22:7b:e4:80:95:75:a3:
         b0:55:ee:39:d9:1b:c2:53:54:fa:6d:9d:8e:4c:f6:6b:41:d6:
         de:fd:eb:ca:5b:ae:1b:e2:4a:3a:a9:da:d0:0a:88:f5:97:e2:
         43:28:dd:ba:5b:74:aa:c3:9c:55:ae:16:38:1d:82:04:bf:21:
         1e:19:7c:36:f0:4e:94:ee:df:ec:bb:18:12:5d:12:5d:d4:64:
         04:b0:ca:6c:5b:1e:66:9c:f2:24:00:9f:3a:2d:2f:08:6a:6e:
         7d:93:49:a0:fb:e5:ea:69:2e:71:7d:49:2f:c6:dc:3c:51:b4:
         4a:f9:19:ff:bf:b3:71:73:55:ce:77:c0:2d:9a:c2:54:7f:f6:
         3d:0c:c0:ee:6d:58:78:8a:f8:11:05:7c:6b:d9:90:ff:e1:02:
         1a:66:ab:61:69:47:e4:84:3a:a0:81:4b:1c:85:6f:36:17:bc:
         c5:de:f1:18:0e:7e:85:e8:d4:1c:c8:4f:2c:ac:64:69:cd:19:
         60:be:1f:98:4f:11:d6:86:4e:90:ee:0f:8b:66:5e:41:95:6b:
         e9:cf:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:23 2026 by rpki-client