This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
File:                     kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json)
Hash identifier:          w8bd3z50ny12/rH1UfpqgUOZf6+7mHJsVFx9Ba/xmZY=
Subject key identifier:   BD:10:2A:54:C6:71:0D:66:2B:AC:55:DF:CA:AE:E1:F1:37:50:F2:ED
Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Certificate issuer:       /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
Manifest number:          4A
Signing time:             Fri 23 Jan 2026 06:27:09 +0000
Manifest this update:     Fri 23 Jan 2026 06:27:09 +0000
Manifest next update:     Fri 30 Jan 2026 06:27:09 +0000
Files and hashes:         1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: WQIiioyXAWUXlZXKSrlrpdloscNo6P+7dt3CkpHodWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
        Validity
            Not Before: Jan 23 06:27:09 2026 GMT
            Not After : Jan 30 06:27:09 2026 GMT
        Subject: CN=697314bd-f1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:44:54:ac:93:6e:8e:d5:d7:cd:7f:58:e9:
                    70:ee:e0:f0:0f:e1:46:78:8d:9c:52:f1:ae:83:a6:
                    a0:66:08:7e:d0:74:70:a5:56:cd:d9:43:ac:0c:19:
                    db:ea:f0:2f:a2:8b:79:9d:ea:c0:f0:e1:88:8b:ab:
                    6d:08:7e:06:62:75:64:95:e4:87:60:ed:29:66:52:
                    1d:b5:93:46:d6:e3:29:8a:6a:a3:8e:5c:ab:d1:a6:
                    70:45:87:16:8c:9b:1f:8a:f3:05:b1:bc:d4:20:61:
                    77:01:00:4d:a9:57:d2:92:2a:6e:52:cb:ac:34:f0:
                    8e:3a:38:8c:69:d1:33:56:88:c2:92:de:13:82:1d:
                    f2:44:30:67:ca:5b:de:75:48:53:f8:91:7e:27:25:
                    47:ad:49:56:b5:6b:c7:86:7d:14:34:ee:f9:a7:e2:
                    85:0f:15:89:ba:ba:99:9a:25:a6:bd:ce:22:f0:09:
                    90:ca:9b:d6:55:c9:c1:8c:7a:b8:d3:d3:20:49:db:
                    6c:40:76:02:03:95:f9:0d:85:cd:fa:12:e2:db:a8:
                    03:49:d4:4f:64:41:1b:e9:78:42:a9:8a:02:76:65:
                    65:ac:db:a3:aa:92:71:26:3d:ab:e6:5e:90:87:40:
                    73:63:0a:bc:bb:1d:18:00:66:dd:ac:4f:a6:13:68:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:10:2A:54:C6:71:0D:66:2B:AC:55:DF:CA:AE:E1:F1:37:50:F2:ED
            X509v3 Authority Key Identifier:
                keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a6:48:0e:c2:21:41:e9:cd:69:02:a6:87:d5:e9:b7:db:1e:
         9d:da:f6:48:6d:60:72:4e:09:fd:41:a3:41:23:88:dd:9c:1c:
         da:99:ab:5e:66:23:67:ad:fb:ea:09:38:07:87:f3:b2:50:19:
         c7:0b:d6:b3:fc:f8:47:d0:ea:aa:5a:24:55:49:d6:d9:15:a6:
         0a:39:03:a4:db:43:93:54:08:01:47:91:af:f7:a6:a9:eb:e6:
         4a:1b:01:9c:14:37:79:c2:af:6d:86:ae:0d:c5:1d:0f:cc:aa:
         64:5f:46:0d:b5:47:61:af:9a:0a:30:34:3e:b8:30:fe:22:8e:
         af:0d:77:08:1c:51:8f:9d:46:bd:95:ec:18:e5:4c:0e:3d:27:
         c1:db:ba:29:49:67:90:b5:53:d7:a1:9b:78:f7:98:b6:59:0c:
         5b:7d:e3:b2:e2:22:ce:0e:23:9a:a2:da:7e:5b:d2:5d:3d:2a:
         fc:ec:eb:20:f1:87:a3:a1:3d:9b:3d:3e:08:f3:1a:56:52:20:
         b4:de:9e:2e:c9:c4:61:05:f8:d9:05:92:a1:90:33:ee:16:50:
         82:dd:db:8d:8f:77:93:48:6c:b8:ef:83:32:73:32:2a:23:47:
         03:03:9b:d2:e0:62:de:a0:23:fb:d7:ff:42:96:45:c3:05:81:
         5e:05:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:51 2026 by rpki-client