This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File:                     KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier:          qmFtZPIYpaMh5QZRmnFsnBLPA6o15eKaZI5OuwPGzac=
Subject key identifier:   34:03:23:CB:9D:2C:49:07:7B:AB:FF:9A:03:E5:10:B2:6D:B9:03:20
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0B88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number:          0B80
Signing time:             Sat 24 Jan 2026 18:39:05 +0000
Manifest this update:     Sat 24 Jan 2026 18:39:04 +0000
Manifest next update:     Sat 31 Jan 2026 18:39:04 +0000
Files and hashes:         1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: kubKzy/284T8IXJEk7/rF0CGzkHwxqj+0g0HgCd8l9c=)
                          2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2952 (0xb88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: Jan 24 18:39:04 2026 GMT
            Not After : Jan 31 18:39:04 2026 GMT
        Subject: CN=697511c8-bbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:d9:41:57:49:8c:d1:76:d8:07:c4:50:ef:
                    c2:52:0a:e3:a7:fc:91:42:0b:6f:b9:d8:e4:f0:f1:
                    06:00:0a:bd:c3:a1:94:17:46:84:4c:c9:35:b6:19:
                    e8:3e:10:d9:dc:7b:20:ca:66:94:43:c8:56:46:40:
                    f8:1e:75:d8:3f:79:df:a8:da:9b:d8:6a:ac:50:c5:
                    3f:78:60:13:cd:dd:0c:f3:90:89:6d:1d:52:d3:93:
                    48:49:8f:c5:d4:3c:29:e1:51:32:7a:68:00:95:97:
                    11:6a:4f:12:12:16:71:e8:2a:b8:bb:a6:19:6c:77:
                    9e:b7:a9:62:35:25:c0:d2:fb:08:93:b3:c2:27:a0:
                    71:b1:4d:80:12:60:dc:1a:2c:67:32:a0:ad:70:94:
                    87:60:70:cd:c5:06:ab:b1:40:b5:86:9d:12:96:90:
                    99:30:60:bb:ac:48:f9:73:9b:6c:47:9d:4c:b5:20:
                    c6:48:7f:3e:95:30:c7:eb:bf:01:ca:99:1b:a1:ed:
                    57:22:39:90:18:70:ce:d2:c2:75:51:d5:56:f3:a6:
                    3c:1a:7f:07:72:f3:30:90:94:3f:4e:58:34:36:bb:
                    ac:45:24:cb:ee:b1:04:cd:8f:86:d0:0f:c3:9d:08:
                    38:dc:d9:0d:f0:3d:e5:ed:d7:0c:00:ab:1d:f8:88:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:03:23:CB:9D:2C:49:07:7B:AB:FF:9A:03:E5:10:B2:6D:B9:03:20
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:26:b5:b2:ec:96:f1:72:41:8c:cc:13:04:91:be:d9:d0:f3:
         91:2b:2c:c4:20:f0:06:62:46:b8:d3:73:e0:9a:fc:1b:75:bc:
         e2:aa:4f:ef:1c:77:31:e5:34:79:88:31:e9:f7:98:34:f9:b9:
         e7:12:b0:82:fc:9d:ab:e3:05:1c:bd:3e:f3:d5:7b:2b:e1:c1:
         dd:78:1d:d5:e4:65:ef:5d:bb:1f:41:a0:c0:79:de:af:5c:7c:
         87:aa:76:a0:75:c1:d0:c2:34:e6:9e:5e:12:d2:5b:9d:e4:f1:
         cc:a5:da:5d:fb:24:21:19:51:0d:a9:a3:28:3e:22:95:fb:f1:
         55:bb:dd:ca:f5:47:dc:f9:ff:df:97:43:c9:0d:17:8a:a5:75:
         32:67:e9:82:9b:a4:f2:4b:00:0e:5b:b1:4c:d8:e6:9a:03:e8:
         c8:fc:cf:ee:3f:28:99:cb:4d:80:cd:18:ad:39:af:09:76:d3:
         7d:97:18:69:6e:37:98:f0:43:a3:7c:e2:29:41:1e:5f:83:a6:
         90:52:a1:62:e6:52:49:b4:85:cb:e3:ea:7a:ef:7b:d9:95:47:
         22:a8:c9:38:df:0a:66:57:da:20:22:cd:aa:9e:93:c6:06:9d:
         45:16:6c:b9:ec:7c:bb:92:a8:db:40:c4:1e:11:09:06:e3:68:
         96:28:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:42:22 2026 by rpki-client