This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File:                     kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier:          uh9g2g7QD1yISMsPQuSKiK4DoGJcuQKp8sZAS2jyub0=
Subject key identifier:   93:F8:43:9A:74:29:29:FF:6F:35:AB:DE:F5:BE:B4:5C:12:3E:10:28
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer:       /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial:       0B23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number:          0B1B
Signing time:             Sat 24 Jan 2026 18:51:41 +0000
Manifest this update:     Sat 24 Jan 2026 18:51:40 +0000
Manifest next update:     Sat 31 Jan 2026 18:51:40 +0000
Files and hashes:         1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: nOeGOubJHTVb8GGZt3+Je4B4aHi+AWFRl5WklxrhYEA=)
                          2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: 3V95dG8EwbjGC7EMndTVlVAHQWvt90W2HKQwUZ++P/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
        Validity
            Not Before: Jan 24 18:51:40 2026 GMT
            Not After : Jan 31 18:51:40 2026 GMT
        Subject: CN=697514bc-74fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:98:57:ac:fb:ea:19:7c:23:c2:75:ec:d2:
                    b5:71:c6:39:6d:0b:cf:bb:cf:49:15:6f:28:10:c1:
                    45:0d:1e:31:9c:58:ab:19:e9:e8:90:6c:ae:91:27:
                    fe:00:58:06:ac:af:3b:46:6b:14:09:12:6b:8d:82:
                    4b:1c:c3:20:54:c3:4f:25:88:b7:f2:34:07:2a:0f:
                    29:c0:da:5f:7a:44:9b:59:b0:bb:8d:c8:93:5c:c7:
                    e5:ff:a3:50:b3:c1:e2:30:18:c3:e7:af:89:3c:11:
                    aa:8e:5b:55:9f:d3:e5:44:e9:be:bb:63:10:f5:ce:
                    72:df:20:19:ce:d1:8f:4d:6a:55:2c:be:a2:f7:9d:
                    e7:52:f8:df:2c:98:13:74:bb:c6:f7:75:3e:d1:71:
                    3b:7d:af:36:53:5c:69:b4:f0:2e:e9:ed:01:34:15:
                    1e:89:82:af:b3:bc:08:2b:51:f3:07:b6:87:10:3e:
                    ec:2e:ae:42:84:86:53:5e:8a:d9:a6:e7:e2:be:83:
                    1d:68:ac:9a:d1:fc:87:f2:81:45:ea:2a:86:86:bd:
                    c1:67:f4:b0:04:2b:51:61:75:b4:ba:5f:aa:f4:8e:
                    e4:3e:42:ff:49:9d:10:a4:52:f5:b6:57:39:eb:e8:
                    b0:57:20:a8:cf:a3:b8:a8:af:7e:2f:a7:6f:66:e2:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:43:9A:74:29:29:FF:6F:35:AB:DE:F5:BE:B4:5C:12:3E:10:28
            X509v3 Authority Key Identifier:
                keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:23:97:79:02:57:92:4b:73:89:32:08:4d:2c:cb:06:b4:
         d8:89:53:3f:5e:8f:1e:03:38:27:47:05:fe:5b:ea:95:35:0a:
         ba:c2:81:a2:71:fa:d0:0a:05:3d:fa:6a:22:8b:84:88:ea:51:
         5c:ab:1b:4b:3f:eb:d2:39:06:a1:12:ad:a7:db:46:f3:05:34:
         1e:f9:2e:c8:00:94:fd:3b:db:66:fa:3f:cc:5d:e7:bd:23:f6:
         b4:47:63:80:2c:92:97:53:a8:68:16:73:01:51:54:a8:fe:2c:
         bb:c8:59:97:09:c1:50:b5:4d:29:75:6e:c9:b5:83:1a:06:e3:
         cb:ae:1d:a4:f7:44:e8:c1:bb:71:b6:d5:a4:6e:c8:f9:c6:b1:
         ca:76:10:3d:05:c8:90:96:5f:22:72:18:86:44:c0:22:e6:51:
         08:fa:d6:35:fb:6b:c0:f0:6f:a0:f2:fa:f2:de:15:bf:58:a3:
         c7:22:88:76:17:c9:a0:01:73:1d:ba:c2:10:82:d1:ef:c7:0a:
         3b:95:21:58:9e:03:0b:a6:aa:ef:fc:a6:68:2f:d1:5a:a9:2b:
         1e:1d:0a:c4:9e:40:5f:33:60:76:8d:d4:71:68:9f:9a:40:34:
         b1:f0:0d:5b:4a:4b:4f:3c:ba:02:cf:d1:df:59:8d:71:da:e4:
         47:74:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:26:29 2026 by rpki-client