This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File:                     KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier:          QU/ZhxJOntDNqZRMtm+s2UOPGQXmbpNi/kYEKaXgEY0=
Subject key identifier:   8B:93:E7:86:D0:AD:68:06:5A:8A:0C:B8:D1:F3:C4:08:63:77:48:FD
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer:       /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number:          90
Signing time:             Sun 25 Jan 2026 05:42:44 +0000
Manifest this update:     Sun 25 Jan 2026 05:42:44 +0000
Manifest next update:     Sun 01 Feb 2026 05:42:44 +0000
Files and hashes:         1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: 9lArKRCsdvBZWe2JZn40g2UtBU1geF2jpZbRm3NCUS0=)
                          2: FAA72960259911F0953E0023C4F9AE02.roa (hash: e7nzxpCTQBDCIg5PEDtZeqSUVMOKuiFn7Ttj5SwjEWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
                          rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
        Validity
            Not Before: Jan 25 05:42:44 2026 GMT
            Not After : Feb  1 05:42:44 2026 GMT
        Subject: CN=6975ad54-12de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:11:73:06:c1:76:1b:1b:65:9d:f4:16:ca:
                    ee:0a:00:07:04:08:66:ad:78:1c:cc:26:70:7f:1a:
                    76:e8:d3:4f:0f:f2:63:0d:f0:ab:a9:34:bb:77:62:
                    44:66:ce:66:ff:73:f4:48:a7:dd:5d:6e:de:28:23:
                    0d:06:6e:3a:90:83:d7:6d:7d:ac:28:79:8d:a3:93:
                    53:c8:50:42:82:81:85:bf:47:2f:fd:0b:d2:79:34:
                    02:dc:3e:02:96:44:00:af:73:a0:46:ed:87:c9:ce:
                    38:5e:83:b7:6e:37:51:3b:16:f6:53:fa:fb:bd:60:
                    c2:98:20:c0:d8:94:43:5e:75:68:b8:3f:7a:00:8e:
                    07:14:40:cd:2e:d4:7d:16:05:9e:5b:e9:a5:bd:25:
                    52:0f:e4:b1:f9:f0:c9:da:44:52:61:70:61:b7:8f:
                    be:0c:e7:1c:80:9f:7d:c3:ff:bb:92:0c:39:b5:6f:
                    7c:ff:32:a8:5c:ed:0c:8a:3b:d8:cb:bd:70:3b:89:
                    c7:3a:05:d2:62:3a:9b:ad:b4:6a:81:49:ca:ea:3a:
                    eb:d1:2f:a7:64:72:f2:fe:c6:74:94:49:e3:33:50:
                    b5:d4:93:f4:87:c7:bc:4b:6d:e0:38:36:00:83:21:
                    25:ba:37:ae:14:77:20:ee:1d:63:d3:a4:61:19:bc:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:93:E7:86:D0:AD:68:06:5A:8A:0C:B8:D1:F3:C4:08:63:77:48:FD
            X509v3 Authority Key Identifier:
                keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f3:95:1b:c1:19:1a:98:bc:9c:56:f3:5f:3a:98:9d:36:32:
         d3:f4:6e:51:e2:aa:a0:5e:e0:b3:63:91:ef:2a:c8:fe:16:0a:
         1c:3f:a8:55:4c:67:7b:f3:a8:37:3d:fa:a7:4b:cb:6d:e1:e3:
         29:20:b2:a1:91:38:f4:1f:a1:fb:31:6c:69:59:00:18:f7:3a:
         53:19:61:c7:87:22:5e:c0:06:a5:23:eb:82:d2:ec:a1:37:09:
         e6:cb:a5:1c:05:9c:f0:69:0e:65:10:90:b7:39:90:28:8a:de:
         92:91:5b:da:e9:c3:38:27:ec:bc:d4:3a:50:7c:3d:3a:03:34:
         0c:72:b1:7f:9b:65:c6:6b:4b:fc:50:91:6d:a3:28:c1:cf:2c:
         ba:ce:f1:60:9d:0b:26:b8:41:01:7d:ac:dc:d9:ca:ee:e3:7b:
         44:65:4c:be:bd:27:bd:de:65:60:59:cd:1c:0b:c0:4a:65:5f:
         ce:82:ae:56:e5:9c:91:04:83:97:f3:29:f2:69:b7:b5:c5:23:
         4e:54:62:7d:64:e5:5e:3c:80:73:a3:d8:d2:ee:7f:35:d4:09:
         93:2b:1a:27:ca:dd:35:e4:d2:e6:40:fa:c2:4e:bc:fb:8b:da:
         3f:7b:82:bf:1e:53:c7:d3:e2:f2:78:30:0b:19:4f:70:06:46:
         19:94:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:35:59 2026 by rpki-client