This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File:                     kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier:          FtMesOXRdzyZ9tfxs1ZT+UOwrI/1QXkeCRQwHdZJtvo=
Subject key identifier:   D7:25:5F:97:43:01:CA:57:31:97:80:37:02:07:EE:12:78:1D:EA:52
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number:          0120
Signing time:             Sun 25 Jan 2026 04:12:49 +0000
Manifest this update:     Sun 25 Jan 2026 04:12:48 +0000
Manifest next update:     Sun 01 Feb 2026 04:12:48 +0000
Files and hashes:         1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: 1Pbvsq1HBciDr2e3sA3i0iLL+aaaCCPeFvYAJBlqL2o=)
                          2: AC7759D2135511F092D0090CC4F9AE02.roa (hash: P73GyQ+xRG30WPGNAHQCLDV4zJy6doRK0RrvTedfB+M=)
                          3: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: vhbGmjHPdOQaH+bh64NTaxDM6fa2DZigRG71btxol5I=)
                          4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: /OrLVPVfTQAPE0kSOqhjwV7inTaQkqbRHnBk9gH3iZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: Jan 25 04:12:48 2026 GMT
            Not After : Feb  1 04:12:48 2026 GMT
        Subject: CN=69759841-985c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:f8:0c:31:69:ad:3c:e3:4d:c6:df:8b:cd:
                    52:23:ec:d5:42:66:7d:d6:e2:9b:53:53:51:78:20:
                    9d:9c:2f:ff:db:0b:75:ae:21:60:60:e2:1d:3b:4e:
                    71:6b:80:53:c1:a2:e8:c2:5b:a5:13:f5:34:89:b4:
                    68:1e:94:bd:f6:47:26:17:87:6f:34:fb:c3:5a:b8:
                    70:b8:2d:32:a5:a0:ad:cc:82:12:58:4a:fd:b1:ae:
                    32:94:51:c2:b3:7f:4f:47:72:2d:65:61:da:7d:48:
                    76:a8:16:ad:a7:88:b5:9f:31:60:76:68:d3:1f:c3:
                    3c:b3:dd:e8:8b:46:69:13:37:c1:b6:af:4b:89:c8:
                    7c:c3:2e:03:51:aa:84:a3:97:bf:45:8a:88:65:f5:
                    a3:6f:e5:aa:7a:2f:c3:f6:bc:91:b5:a9:2d:fc:cd:
                    7e:e1:3b:2a:41:ce:1e:08:00:e6:37:37:85:01:7e:
                    96:ad:0d:4d:e9:d0:ac:d9:ac:b0:47:f8:0f:51:5f:
                    f0:ee:d3:05:ad:31:c3:86:52:6e:e0:23:3d:ca:6d:
                    1e:8b:69:0f:8d:00:52:86:ca:fc:06:e0:04:c0:88:
                    d0:25:0f:95:e5:77:43:97:3a:a4:a3:2b:33:88:33:
                    fa:8c:54:8e:13:95:b1:1c:aa:a2:52:d4:d1:25:5f:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:25:5F:97:43:01:CA:57:31:97:80:37:02:07:EE:12:78:1D:EA:52
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:23:31:7f:b9:32:0e:b6:97:1c:13:db:a0:0c:c1:a7:b0:7e:
         bb:7e:f4:a8:48:4c:57:66:e0:b9:a1:9a:2b:44:07:fc:3d:a1:
         25:26:89:39:39:90:8d:64:83:85:b5:e0:f0:5b:23:7b:c2:c3:
         c5:29:31:40:e4:82:09:12:58:5f:ff:1a:8a:2a:bb:a0:fd:ac:
         e4:4a:45:60:4a:09:d3:52:31:60:1c:9b:86:f9:1c:07:f3:20:
         24:6c:8e:bd:7a:7a:a1:75:6a:33:3d:2d:2c:7f:14:82:65:a9:
         e5:c1:6b:48:cb:cb:af:5b:f4:08:79:07:a5:c8:e1:51:61:36:
         a9:88:72:bf:0a:9c:cc:62:09:03:69:8f:c2:b2:5a:54:3f:82:
         64:49:75:ec:4a:89:48:04:76:57:2f:da:52:52:4b:a3:93:bb:
         1b:cb:71:cf:e0:64:31:55:f5:7d:e0:cf:41:07:4a:c0:3b:85:
         1e:07:82:b8:1f:68:93:63:e8:4a:34:58:9a:36:15:30:0e:8c:
         c5:40:ea:22:24:8d:8a:c0:78:ea:82:3e:89:01:b8:ee:57:cf:
         57:cc:66:e7:9d:7e:4c:c6:fb:91:06:fb:fa:e3:15:1e:fc:ef:
         e3:44:8b:8a:35:68:3f:39:95:18:b6:25:73:d8:fe:ac:2b:82:
         62:d5:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:11 2026 by rpki-client