This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File:                     KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier:          u0ncQ0mgdecaMkuzUiHEM7PS3Npk6JM0+VHDQ09vCWU=
Subject key identifier:   0A:61:0D:A1:C3:65:92:8C:14:9F:2B:2E:24:A6:37:D8:19:70:15:70
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer:       /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial:       0739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number:          072E
Signing time:             Sat 24 Jan 2026 21:07:56 +0000
Manifest this update:     Sat 24 Jan 2026 21:07:56 +0000
Manifest next update:     Sat 31 Jan 2026 21:07:56 +0000
Files and hashes:         1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: 5qDH6pYSHhcsLME616asutFhIYxIy7NiDuNpg/2cO8Q=)
                          2: 9398F508619611EBA485B448C4F9AE02.roa (hash: CFEUDF+dG6qKnpU1eHBX9Jqx9Z184q8fTNLy6tKeF1E=)
                          3: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: U9jox4hBqmt6Ecd6jG1wCd/lzs7u1yZA99lQIN9ctng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
                          rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
        Validity
            Not Before: Jan 24 21:07:56 2026 GMT
            Not After : Jan 31 21:07:56 2026 GMT
        Subject: CN=697534ac-b810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:83:b1:e1:46:65:c2:10:81:2d:07:58:90:
                    41:72:8b:2a:f3:b8:e1:bb:6f:a3:28:9a:00:04:09:
                    8c:84:97:d5:bc:19:f0:07:29:70:74:e3:5a:55:13:
                    0a:e4:b6:a3:9d:c2:3f:c0:d8:b8:00:ac:c7:72:79:
                    6b:55:e6:d3:3a:57:70:35:f1:31:90:72:06:54:60:
                    a5:36:76:35:f6:9e:bf:1d:2d:ac:7d:54:6f:02:51:
                    ef:b9:1f:14:7a:81:76:fd:7f:81:e0:da:79:aa:b5:
                    2b:13:d7:3b:cf:47:04:01:b2:7c:78:41:4c:23:36:
                    e3:62:54:9e:b4:b0:9b:06:eb:e9:67:c7:42:e1:2c:
                    02:a7:1b:c1:6f:a9:d1:9c:c5:b1:cb:dc:88:d1:f8:
                    cf:93:d7:e2:b5:9c:d7:c0:96:4a:8f:18:c7:b6:4a:
                    81:40:58:e1:c7:c1:d4:79:3d:ee:1f:4b:9a:fd:a7:
                    9a:95:c3:05:bc:7c:3b:e7:f9:6b:79:0f:54:83:fe:
                    ac:69:06:e1:6c:2c:ab:58:3c:3a:94:ae:a7:d7:25:
                    b5:05:fd:66:7d:98:25:0a:35:9c:42:fa:69:ca:ee:
                    0f:8e:72:16:3e:ad:56:7c:89:47:8c:b0:92:14:02:
                    00:39:ca:d3:6d:24:e3:3c:88:27:2c:2e:14:42:a5:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:61:0D:A1:C3:65:92:8C:14:9F:2B:2E:24:A6:37:D8:19:70:15:70
            X509v3 Authority Key Identifier:
                keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b2:e9:3d:49:70:66:5d:f9:37:22:2d:da:2c:26:3f:74:f8:
         c6:ed:5c:cf:fd:5c:72:8b:4f:ee:f1:35:9e:7c:d7:f6:1a:70:
         cb:4f:19:87:a1:61:86:f1:7e:bb:fb:2f:f8:d7:c1:1e:6e:98:
         12:94:dd:53:77:73:82:ab:5a:64:7b:57:a5:d7:ac:ce:4f:75:
         3b:3e:07:37:cd:5b:6b:30:80:bb:40:a1:96:2e:9f:55:9c:a1:
         dd:f3:c4:77:7f:9c:0f:d3:e6:e2:95:7b:ca:7c:1e:62:3f:11:
         46:75:78:ef:cf:19:10:d7:cc:14:95:b2:94:90:b7:1a:bc:58:
         47:0a:02:4c:02:04:87:40:af:a7:0f:2e:78:d3:cf:ae:be:84:
         36:66:2d:a3:3f:d6:bb:fb:ac:43:74:aa:c1:76:56:35:5e:4c:
         63:66:74:a0:7b:b8:86:c4:74:11:a4:27:08:2c:f7:34:27:89:
         a2:31:61:89:67:eb:cf:04:76:7b:ef:9d:a9:cc:86:55:79:8e:
         54:10:9d:aa:f1:18:73:d8:e1:cd:b3:88:01:4b:c2:c0:85:02:
         86:32:df:ec:ac:0f:4f:0c:b1:8d:15:73:42:00:a2:a8:25:a4:
         bd:41:5e:5a:14:f2:8f:ea:88:64:5f:0c:7e:ae:4d:69:45:5a:
         3a:cd:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:38:33 2026 by rpki-client