This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
File:                     kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json)
Hash identifier:          7udVWZPy7fvTXod+OWxnRTvH/FKFGOaaE1HxRukjDWI=
Subject key identifier:   93:0F:BC:59:FC:51:70:51:1C:A9:E3:B4:B8:88:D5:5A:DD:02:E1:21
Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60
Certificate issuer:       /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
Certificate serial:       040B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
Manifest number:          0404
Signing time:             Sat 24 Jan 2026 23:40:42 +0000
Manifest this update:     Sat 24 Jan 2026 23:40:42 +0000
Manifest next update:     Sat 31 Jan 2026 23:40:42 +0000
Files and hashes:         1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: 8NFvmSvFbNGoMpCAs4o2rrgFxb9mmDgxZeveBT6Wb7w=)
                          2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 8U+UsiCXDKifnoegufsPJKGalX6CUXoFX96X70pYMYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
        Validity
            Not Before: Jan 24 23:40:42 2026 GMT
            Not After : Jan 31 23:40:42 2026 GMT
        Subject: CN=6975587a-4960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:56:c2:d7:35:b7:32:e3:7b:be:eb:7a:8d:0b:
                    a5:98:42:04:a2:d5:a3:09:7c:5a:5a:df:3e:6e:21:
                    ad:dc:dc:2a:5b:e6:bd:7b:39:42:28:cd:49:e2:4e:
                    16:9f:dd:f7:7c:4a:80:4b:93:0e:f2:b4:d2:86:73:
                    b3:0c:4f:08:a7:3e:2a:09:7d:6a:e4:ec:66:f6:d5:
                    df:56:99:31:f1:7e:c5:51:3e:09:20:f1:1f:b4:74:
                    0b:00:96:88:82:cb:f8:d0:76:9f:e2:e0:25:bf:5b:
                    7f:56:7c:f3:81:c6:94:24:29:b3:ad:5a:21:46:1e:
                    f7:63:67:68:5f:99:aa:24:e8:93:b0:bd:87:5d:e6:
                    78:8f:e4:1a:81:4d:f3:7e:93:ec:5b:62:56:73:5f:
                    bc:14:6a:b3:24:6d:f1:da:13:a4:e3:5d:ef:a5:72:
                    70:3d:f4:e9:cd:aa:b1:95:a3:ee:4b:60:3e:ad:7b:
                    78:4d:e0:71:5e:48:65:74:8a:07:26:6a:3f:90:83:
                    8f:c8:73:6e:76:6c:52:c2:3c:37:2c:63:a4:51:74:
                    73:b9:59:ab:e7:14:0f:71:87:31:14:64:b5:f0:e0:
                    2f:1b:10:49:ef:ab:f0:2f:90:65:81:7d:f1:ca:43:
                    46:c1:64:04:eb:ae:03:d4:3a:bf:e3:59:3a:b0:22:
                    99:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0F:BC:59:FC:51:70:51:1C:A9:E3:B4:B8:88:D5:5A:DD:02:E1:21
            X509v3 Authority Key Identifier:
                keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:64:6c:9c:61:78:1b:c6:41:17:a6:5d:e5:73:25:26:b4:7b:
         18:15:54:6d:35:da:0e:74:56:77:27:09:f3:67:37:a1:8e:0d:
         2b:4b:84:fa:17:c1:fa:70:e0:ce:70:d0:eb:13:52:e8:10:d3:
         7e:39:1a:83:b8:ea:90:2d:1f:68:9b:d2:5e:f3:0b:71:17:7f:
         0a:84:a0:67:89:98:a0:5b:3d:33:72:71:05:8e:b3:8b:37:ae:
         f5:73:9d:96:53:fa:4b:57:3e:86:77:54:78:88:05:17:26:8c:
         2c:27:f2:60:e7:76:3e:55:f7:28:dd:98:c6:c5:30:9d:64:57:
         b7:6c:bb:8e:5c:d7:10:af:f5:74:9b:b0:a4:fc:5d:59:6a:dd:
         11:53:4b:b9:f5:f8:11:aa:d5:3e:8d:9e:56:9e:18:99:57:22:
         b5:0a:bf:8e:16:5a:45:24:48:f2:82:55:8e:1e:d4:ea:d6:43:
         35:36:0e:76:da:09:6a:f1:3f:00:46:d4:95:b5:44:71:8f:1a:
         68:e6:e7:05:9b:e6:11:31:f6:50:10:92:ff:8b:1c:43:f4:6d:
         30:e6:58:9a:9f:51:fb:cd:8e:9d:1a:89:31:0e:1e:de:21:07:
         d6:47:e9:7f:6e:a5:db:ba:56:47:46:b2:10:1f:d1:27:14:46:
         ca:82:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:38 2026 by rpki-client