This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File:                     KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier:          FePz/brLkJyvt/HkBrdWqlvRb8dousn22HeEQ4OcIsU=
Subject key identifier:   82:4A:20:EF:5D:0D:E1:00:73:D9:51:1D:22:25:9F:B9:2E:48:D8:02
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer:       /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number:          0207
Signing time:             Sun 25 Jan 2026 01:40:52 +0000
Manifest this update:     Sun 25 Jan 2026 01:40:51 +0000
Manifest next update:     Sun 01 Feb 2026 01:40:51 +0000
Files and hashes:         1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: KX5vkIQtcwEzak0ptFM2ucPzA9x68QnmGGoCbqudyIg=)
                          2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: KmbLnAg6ov5pbSc4GHHtI4bgompHpB3w8fab5eJbYog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
                          rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
        Validity
            Not Before: Jan 25 01:40:51 2026 GMT
            Not After : Feb  1 01:40:51 2026 GMT
        Subject: CN=697574a4-6874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:4e:4a:77:0f:13:93:ca:d1:e6:c6:2d:fb:
                    d0:89:fc:00:ef:67:5e:37:40:ea:e0:38:7a:99:cd:
                    8b:0d:2d:b3:be:4c:af:4a:b3:65:80:83:9a:41:7d:
                    06:62:b8:8c:21:00:f9:61:cc:cf:97:1d:09:4a:fa:
                    01:9f:7c:be:19:31:05:a1:43:2a:13:ec:dc:22:09:
                    a7:33:f9:e3:22:a4:c3:ff:5e:11:87:42:d2:9b:69:
                    20:39:9b:23:b4:76:77:02:8a:ef:b2:9a:4a:2c:3e:
                    e7:26:97:0b:9b:41:8d:90:ea:66:8a:3c:16:77:54:
                    ef:15:aa:75:e0:2d:24:95:f0:05:b3:47:24:a0:b9:
                    6c:2f:4f:3b:af:fa:24:94:ca:1c:77:10:44:a0:11:
                    6f:c8:5a:e6:f5:30:d5:d2:42:f6:bb:9c:6b:53:18:
                    78:84:34:4b:cb:d0:de:9d:70:08:17:79:0e:bb:32:
                    9f:4e:8b:ce:3b:77:46:22:1e:1b:6d:d1:eb:da:0e:
                    e3:65:f0:e4:37:55:08:54:a9:ab:81:f4:f5:ed:ab:
                    36:41:7c:38:03:a5:43:bb:46:54:dd:83:81:18:e9:
                    5c:21:c4:92:6c:1a:f3:47:3c:fb:cf:f7:c5:40:d3:
                    d9:60:a8:96:fa:6f:4d:0b:81:84:c1:6f:8c:83:7c:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4A:20:EF:5D:0D:E1:00:73:D9:51:1D:22:25:9F:B9:2E:48:D8:02
            X509v3 Authority Key Identifier:
                keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4f:95:4f:a1:da:e3:66:b6:42:6b:82:41:3f:eb:8f:de:90:
         1d:34:a2:de:2e:c7:49:98:d9:d3:87:16:72:00:90:8c:ce:0d:
         89:08:e0:27:31:63:e6:b2:ed:39:41:44:b2:23:86:30:5d:35:
         72:f4:ab:b0:8c:3e:52:69:3a:3a:85:73:de:52:5a:25:ec:1f:
         ac:ed:d4:5c:26:e9:3a:b5:41:6f:8e:32:d3:cd:35:70:eb:0f:
         40:36:2c:1a:fe:7f:c4:d1:5a:e8:24:aa:03:fb:19:3e:c8:02:
         02:11:74:23:a0:b9:aa:49:ab:14:a1:ad:5c:59:4d:67:53:98:
         43:00:df:52:35:21:95:6a:24:1c:62:42:28:d7:14:2c:f6:9a:
         67:4e:84:f9:57:b6:ce:a3:d7:bc:2c:3d:08:5f:46:bb:02:e1:
         f3:7e:82:2a:38:57:30:bc:98:5f:37:76:a5:19:cc:04:33:01:
         ae:ff:54:b9:39:93:ac:ee:06:ff:41:d5:1b:c3:30:ff:5f:ba:
         be:92:ca:87:02:13:e4:90:6a:ba:7b:1f:83:51:93:ff:12:3a:
         2a:32:d6:2a:93:5b:b9:26:88:28:f6:84:01:59:ee:da:2f:16:
         e6:36:cc:fd:c7:d1:6d:25:49:fe:d6:27:e0:86:aa:65:b0:ad:
         72:4d:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:01 2026 by rpki-client