This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File:                     4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier:          r/j+zh93tRX6VZvXqEJ6hN7QCD8tptjcn3//Rh6CaUk=
Subject key identifier:   A9:90:44:7B:FD:92:30:9F:67:84:EC:3C:65:D9:B7:97:83:00:FF:B6
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer:       /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial:       3500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number:          34FF
Signing time:             Sat 24 Jan 2026 14:26:23 +0000
Manifest this update:     Sat 24 Jan 2026 14:26:23 +0000
Manifest next update:     Sat 31 Jan 2026 14:26:23 +0000
Files and hashes:         1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: 7WLcSWw8AuXzo+LcfVpZ8GkRrMWNRFHY6Q9vPfKf7ls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
                          rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13568 (0x3500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
        Validity
            Not Before: Jan 24 14:26:23 2026 GMT
            Not After : Jan 31 14:26:23 2026 GMT
        Subject: CN=6974d68f-41a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:89:9e:2b:bf:ab:8d:2f:c9:0f:17:37:6f:
                    48:f4:aa:34:87:85:58:8b:82:b1:3f:c4:f4:3d:73:
                    fc:6e:fe:ee:9b:c7:76:16:9a:d4:ed:66:c0:ef:f9:
                    a5:06:92:45:57:ff:a1:a7:dc:6a:d0:8f:3f:bf:52:
                    b0:d8:73:ac:b1:76:48:6c:91:af:69:79:ca:87:23:
                    3e:d3:75:ac:63:1a:4a:0f:44:ab:14:d8:4f:c1:8a:
                    6c:6e:56:40:09:72:1a:28:02:9b:16:79:69:d0:86:
                    03:1f:69:44:74:a5:b5:0e:c6:71:dd:69:44:56:5e:
                    5a:ed:2b:03:1e:8c:40:6b:2d:69:da:4b:3e:df:2c:
                    19:6f:b5:ef:23:8a:89:77:d0:ce:a9:dc:dd:12:0c:
                    2e:cd:b2:64:0b:01:8f:c5:13:e5:67:b4:95:d3:1a:
                    20:77:cf:f7:ce:ef:46:63:f4:d3:f9:ea:03:de:f3:
                    90:07:06:17:4f:8e:f7:76:07:c8:c3:5a:bc:d0:a6:
                    7e:05:f6:fa:47:8b:cb:72:8f:a3:4d:8f:1c:26:40:
                    d3:4b:d0:61:48:91:9d:fa:a6:c7:6f:40:71:bc:09:
                    69:dd:cf:c4:08:05:dd:8e:b3:7a:22:43:7b:84:2f:
                    04:12:f2:20:1f:e1:3a:53:e5:64:bf:97:68:be:db:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:90:44:7B:FD:92:30:9F:67:84:EC:3C:65:D9:B7:97:83:00:FF:B6
            X509v3 Authority Key Identifier:
                keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:92:fc:37:4f:dc:a5:ad:0e:d7:8c:3c:0d:10:44:3d:40:ca:
         16:50:44:7d:9c:1e:39:ea:89:81:ab:68:81:0d:d3:15:27:12:
         c6:cf:9f:15:7c:30:8a:95:cc:cd:08:f7:40:06:ab:24:5a:f0:
         5e:c1:f9:94:7e:72:7c:c7:93:22:4f:4a:a5:47:47:99:c1:77:
         65:fc:54:87:56:6f:ce:af:96:3b:cb:06:62:15:13:f8:e0:b0:
         06:4c:c9:71:aa:08:fa:17:85:bc:59:23:1f:e2:d4:d6:6d:8f:
         f6:93:83:97:b9:ae:93:67:f6:bf:73:cb:3d:19:90:00:ca:4b:
         df:05:42:59:1f:1b:89:04:5a:49:c0:a9:3e:24:9f:44:5b:db:
         cc:4a:12:61:d0:0d:ba:9f:e4:a6:41:95:d5:7c:05:2e:15:02:
         6b:ba:e7:e2:9d:54:52:c7:4f:5d:22:53:f0:ff:22:2a:c4:7b:
         e4:5f:0f:7f:d1:24:0f:1c:f6:06:0c:e8:81:70:b9:36:7d:77:
         bb:68:e9:db:4a:d9:7d:81:28:35:75:de:dc:58:bc:2b:de:67:
         47:83:50:0a:d3:1b:44:bb:87:c7:c9:fd:ed:31:52:59:11:14:
         4c:0b:cf:6b:af:87:62:7b:8a:3f:bd:26:5b:a9:f5:80:c8:3f:
         b9:d7:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:12 2026 by rpki-client