This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File:                     kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier:          E3WZGGdJp7RLf/C33cJR8X9wwlOFuAFzYhtdZXCaNTQ=
Subject key identifier:   70:B7:A2:AD:89:33:44:C8:AE:99:09:A8:EE:8D:32:CB:9E:90:36:1D
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer:       /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number:          0162
Signing time:             Fri 23 Jan 2026 03:14:21 +0000
Manifest this update:     Fri 23 Jan 2026 03:14:20 +0000
Manifest next update:     Fri 30 Jan 2026 03:14:20 +0000
Files and hashes:         1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: 7PClkz0kx9Gsdx4E0TIUpbVUy+DlaqB5SPS1LqNA8rA=)
                          2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: d6abLKyd7fr1z0R2GJ3OwWkvRu3wB2ZUv3mxpyp6whI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
        Validity
            Not Before: Jan 23 03:14:20 2026 GMT
            Not After : Jan 30 03:14:20 2026 GMT
        Subject: CN=6972e78d-72f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:c2:d5:04:d6:44:9a:84:63:d3:37:08:3c:
                    58:5a:3c:12:06:a3:1d:c1:3e:08:58:1d:73:00:52:
                    d4:72:61:ce:3d:c5:35:8f:36:d6:36:06:0b:70:67:
                    a5:12:30:98:79:99:11:84:b7:3e:c4:8c:a4:34:87:
                    bc:4a:ad:cc:b4:f4:0c:de:e3:5a:ab:e8:ac:30:7a:
                    12:ee:04:fd:e1:98:97:53:60:75:c9:f3:4f:02:15:
                    cc:a0:e7:2b:a1:7b:8a:48:35:3b:f3:a1:56:ba:9d:
                    ad:08:f9:ed:83:5d:21:39:06:43:e0:d1:59:6e:08:
                    0d:d1:a2:43:cf:c6:d1:cd:16:99:ab:97:81:10:40:
                    0f:d5:2c:db:ba:73:6b:aa:11:00:5f:73:88:6a:06:
                    0f:98:f5:0f:99:ae:d3:48:3d:09:a9:1e:6f:c5:f0:
                    ca:07:61:c6:3b:aa:bb:50:43:ed:ac:33:0c:4c:a8:
                    e2:8d:e1:37:94:57:a1:f0:f4:90:f1:6b:36:03:4e:
                    f4:f4:bb:8b:5c:d5:d7:49:a8:3a:a3:66:d2:ea:73:
                    76:71:05:cd:41:f0:84:ec:15:77:e1:81:4d:8c:2f:
                    de:47:50:83:74:0f:e0:a7:99:20:93:1f:c3:23:93:
                    5d:65:29:f4:2c:5a:b9:47:b4:2e:f1:44:4f:3f:56:
                    18:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:A2:AD:89:33:44:C8:AE:99:09:A8:EE:8D:32:CB:9E:90:36:1D
            X509v3 Authority Key Identifier:
                keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:b0:d7:53:5a:1e:6e:d6:5c:8a:ec:e6:f7:1f:a6:bb:9b:
         87:90:9b:5b:91:44:4d:51:71:20:46:9e:1d:2c:2b:e6:20:73:
         20:c7:f1:17:7f:69:fd:72:83:aa:67:d0:0d:0c:0d:15:2b:0e:
         82:a4:ec:8a:17:a6:cb:65:a5:fe:f9:1d:e7:71:e1:9e:9a:86:
         3f:27:63:ab:d1:11:fd:c5:88:60:c2:b8:d8:1a:8b:59:65:97:
         f0:39:54:88:cc:ec:ca:ff:1f:ec:04:9d:83:3b:67:ba:a3:57:
         00:79:3f:bd:17:7f:d4:98:15:43:f1:c3:bd:a0:89:7f:a4:b7:
         a2:b7:38:ea:ee:78:6e:8d:15:6a:c0:e7:f6:33:bd:f3:b1:3f:
         5c:cd:2f:f1:b0:ea:a2:92:c8:fe:6d:18:50:a0:94:34:66:f4:
         f1:ce:a8:1f:d4:6c:01:0d:94:89:8f:a5:73:66:1a:e8:64:12:
         a9:da:b6:3d:9a:8d:9a:e5:49:7a:05:49:c2:b2:5e:c0:d0:83:
         f2:b3:13:e5:10:a6:33:79:0f:20:c5:5e:b8:c3:19:c1:b5:d6:
         82:61:e1:d2:24:ef:49:d0:e7:7f:67:30:55:c3:82:c6:03:ce:
         57:f4:6d:1f:c8:b9:77:9b:ef:e0:64:2b:1d:b6:9e:78:68:40:
         bb:80:1f:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy
NDlDQ0M4RjQwHhcNMjYwMTIzMDMxNDIwWhcNMjYwMTMwMDMxNDIwWjAYMRYwFAYD
VQQDDA02OTcyZTc4ZC03MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAomfC1QTWRJqEY9M3CDxYWjwSBqMdwT4IWB1zAFLUcmHOPcU1jzbWNgYLcGel
EjCYeZkRhLc+xIykNIe8Sq3MtPQM3uNaq+isMHoS7gT94ZiXU2B1yfNPAhXMoOcr
oXuKSDU786FWup2tCPntg10hOQZD4NFZbggN0aJDz8bRzRaZq5eBEEAP1SzbunNr
qhEAX3OIagYPmPUPma7TSD0JqR5vxfDKB2HGO6q7UEPtrDMMTKjijeE3lFeh8PSQ
8Ws2A0709LuLXNXXSag6o2bS6nN2cQXNQfCE7BV34YFNjC/eR1CDdA/gp5kgkx/D
I5NdZSn0LFq5R7Qu8URPP1YYtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHC3oq2J
M0TIrpkJqO6NMsuekDYdMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD
RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54
ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqkbDXU1oebtZciuzm9x+mu5uHkJtbkURNUXEgRp4dLCvmIHMgx/EX
f2n9coOqZ9ANDA0VKw6CpOyKF6bLZaX++R3nceGemoY/J2Or0RH9xYhgwrjYGotZ
ZZfwOVSIzOzK/x/sBJ2DO2e6o1cAeT+9F3/UmBVD8cO9oIl/pLeitzjq7nhujRVq
wOf2M73zsT9czS/xsOqiksj+bRhQoJQ0ZvTxzqgf1GwBDZSJj6VzZhroZBKp2rY9
mo2a5Ul6BUnCsl7A0IPysxPlEKYzeQ8gxV64wxnBtdaCYeHSJO9J0Od/ZzBVw4LG
A85X9G0fyLl3m+/gZCsdtp54aEC7gB/F
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:45 2026 by rpki-client