This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File:                     k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier:          d5+G5AuaLKPQQVP9pIcrtfll2DYAy3tdB+k0uWecCU4=
Subject key identifier:   7F:C1:17:3D:73:C6:E2:B0:A6:3A:80:E7:F7:85:DC:02:8C:4A:A8:44
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer:       /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial:       05B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number:          05AD
Signing time:             Sat 24 Jan 2026 22:22:32 +0000
Manifest this update:     Sat 24 Jan 2026 22:22:32 +0000
Manifest next update:     Sat 31 Jan 2026 22:22:32 +0000
Files and hashes:         1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: vuKhTAjQqKIjl6RSFh4K+uUljdsrz12YmswlEibK4+s=)
                          2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: DiD1wIx5N0oHonnxsIu2kFRZ6TwhX9enYctOFCdvJ64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
                          rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
        Validity
            Not Before: Jan 24 22:22:32 2026 GMT
            Not After : Jan 31 22:22:32 2026 GMT
        Subject: CN=69754628-d941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:19:2c:83:71:c1:4c:b6:b0:70:0e:1f:73:
                    c9:f2:bf:7d:b6:9a:7b:8e:87:3d:29:a4:d5:5c:75:
                    0e:d6:8a:7a:6d:22:7b:5e:2d:ef:82:72:97:37:23:
                    30:59:8a:d1:f6:5f:20:c1:4b:f0:0c:a6:3c:e8:ed:
                    63:fc:43:74:ad:17:29:6f:81:61:bf:d4:5e:f2:3f:
                    4b:25:f2:0d:ac:96:3e:4d:5b:48:7a:9b:b3:0a:61:
                    2f:e9:ca:52:32:e3:75:5b:ac:95:39:16:eb:d0:b1:
                    de:5a:49:8a:1c:0f:71:91:97:bd:7d:b1:12:bf:db:
                    ce:02:39:6d:bf:6d:1c:ef:26:b7:4d:7f:e6:3b:bc:
                    02:a7:18:f1:bb:19:54:0d:d3:2e:81:c8:18:2d:09:
                    64:6c:c3:b9:4a:70:20:9d:90:43:9e:8a:0a:a9:8c:
                    a5:d4:6f:11:1a:71:2d:a9:e1:9f:68:75:0e:8e:c2:
                    fd:61:76:69:9e:92:16:7e:b3:ba:29:b0:36:e0:89:
                    35:ba:4c:4c:07:83:dd:0e:be:63:0d:8c:37:a5:3c:
                    bf:ff:bb:33:a7:33:c2:87:15:7d:ad:c7:ea:04:5f:
                    d0:da:76:19:be:a1:cf:0d:6c:2a:24:ff:ff:6e:c6:
                    7a:b1:e1:14:e7:8b:23:08:13:b9:68:97:64:9f:85:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C1:17:3D:73:C6:E2:B0:A6:3A:80:E7:F7:85:DC:02:8C:4A:A8:44
            X509v3 Authority Key Identifier:
                keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:75:e8:73:eb:5b:78:e2:ef:ab:1e:bb:a8:fe:3c:a5:27:36:
         46:d3:cd:d8:7d:d5:71:53:57:7f:75:9c:68:a2:1e:e3:0e:08:
         fd:f2:f0:18:00:d1:77:a6:3e:22:a0:80:5f:fe:60:c3:51:94:
         a5:67:da:19:ad:ea:71:2b:af:66:0f:31:3f:0d:3c:fe:89:1e:
         d4:f3:9f:b8:bb:06:3f:d2:7b:fc:7a:ce:66:82:2d:8a:55:6c:
         43:93:9d:dc:4e:df:03:dc:6f:12:0f:0d:d6:19:64:d8:34:23:
         9d:30:a9:f2:b8:d9:ac:1f:84:38:d5:59:89:e8:3c:cf:00:7b:
         56:6f:66:4c:91:81:6e:4b:a7:b7:70:8f:47:0e:ed:a2:a8:e8:
         28:71:92:6b:07:c3:b6:37:7b:45:13:d0:53:ec:ed:81:06:e6:
         e0:63:70:48:04:b6:5b:69:78:bb:9a:5f:9a:7a:ab:5d:d2:04:
         6b:59:b4:a6:5c:6c:d3:af:a2:86:93:eb:66:9e:c7:f0:a7:5a:
         8d:f5:cf:9a:5b:1c:95:ad:00:d0:3e:3d:5e:09:fc:76:c9:19:
         d7:80:77:2e:5e:77:bc:5c:c6:15:02:fa:fc:ba:4f:76:1c:2b:
         15:d0:12:b9:56:5d:08:28:6b:8d:7a:00:b6:e2:35:1b:46:e0:
         68:29:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:33:15 2026 by rpki-client