This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
File:                     kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json)
Hash identifier:          n5hOW7g6zV4FDMqbDOgXbeWVSvKMDV3j4rCHzo8Fycw=
Subject key identifier:   7C:96:9B:26:54:35:24:E7:1F:9D:CB:F2:47:E6:68:25:1C:15:F2:F9
Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
Certificate issuer:       /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Certificate serial:       093F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
Manifest number:          0938
Signing time:             Sat 24 Jan 2026 19:37:39 +0000
Manifest this update:     Sat 24 Jan 2026 19:37:38 +0000
Manifest next update:     Sat 31 Jan 2026 19:37:38 +0000
Files and hashes:         1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: l4bu3lSc6hRUTm2e9BkeGDkpFA/oACGwDRebWtKhtYE=)
                          2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: m4UHiwp0JUFTF/BuJBJ638dc3TTaAGAQNXHClFrF1qI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
        Validity
            Not Before: Jan 24 19:37:38 2026 GMT
            Not After : Jan 31 19:37:38 2026 GMT
        Subject: CN=69751f83-d60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:32:eb:3a:05:a6:59:eb:3d:e4:4b:5d:57:
                    a3:f2:5b:56:e9:2d:e9:46:76:5a:90:3f:69:93:13:
                    a7:29:5b:76:38:af:af:e0:d1:0b:3a:af:28:33:fb:
                    07:17:9d:16:fb:7f:e4:ec:1e:76:10:1a:7b:0e:af:
                    3b:ca:31:da:5b:e1:f1:8a:f1:54:7c:72:05:d2:c6:
                    5c:5b:16:a1:88:29:c9:72:09:d7:99:63:d6:d9:64:
                    5d:0c:0d:aa:14:5f:ba:23:7e:c4:53:93:7a:d4:c1:
                    2f:47:a2:46:c8:fa:b5:11:16:f7:af:42:36:e5:55:
                    01:6a:d7:14:3d:ac:b8:3f:0b:78:c0:78:88:f7:ae:
                    01:0c:84:25:14:07:d7:56:cc:52:1d:9d:27:66:1b:
                    6e:69:21:9d:8a:20:38:34:2a:c1:e7:66:c4:69:b1:
                    94:4e:19:a1:70:43:24:4b:9f:ac:17:30:07:9a:6a:
                    98:4e:ef:fd:cc:79:a3:7a:a8:81:df:f7:71:c2:34:
                    19:c6:54:ec:83:82:02:f1:51:d1:2c:c7:c8:50:94:
                    a5:3d:a4:d2:21:c2:e6:30:21:1d:4c:e3:90:90:a5:
                    ab:8b:c8:8d:e1:02:d8:1a:88:9f:b9:c7:d0:c9:03:
                    ef:2a:53:10:e1:4c:1d:03:27:19:dd:31:06:b7:ba:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:9B:26:54:35:24:E7:1F:9D:CB:F2:47:E6:68:25:1C:15:F2:F9
            X509v3 Authority Key Identifier:
                keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:76:0b:78:fa:5f:73:bb:cc:ad:56:f1:4d:ee:c3:94:60:
         92:68:32:fe:a5:bc:fe:72:2e:ad:73:99:eb:8a:14:b7:7c:b5:
         79:48:1c:a0:3d:4f:2d:31:be:b5:ee:d1:6e:46:1e:5f:cd:93:
         17:72:6b:12:39:f1:8e:99:e7:b0:2b:0a:15:d3:65:88:83:a5:
         e0:c3:af:60:c1:ea:7b:73:00:60:05:69:58:b3:43:11:6c:37:
         ab:97:af:db:00:00:86:14:05:e4:9b:42:99:dd:d6:16:be:7d:
         17:52:f4:5f:53:5c:95:67:42:89:d4:34:b7:68:2e:6c:62:8d:
         6c:6b:75:67:6b:c0:c3:fc:05:d8:ae:42:13:a1:87:a1:55:db:
         3f:f5:75:fb:30:03:69:d1:26:bd:4c:c3:be:77:37:af:c6:dd:
         de:36:0d:fb:0c:9c:0e:74:17:4f:6c:42:5f:d2:11:df:81:b5:
         af:3f:29:5c:61:e6:8d:d0:26:0d:96:8b:bb:fd:27:dd:28:9b:
         f0:eb:c5:c1:93:9e:90:95:e0:e2:a9:58:54:b7:51:46:52:ce:
         e5:79:b2:62:54:bf:83:c0:dc:a9:e7:4f:d2:37:eb:06:8b:97:
         01:57:ed:2e:98:15:92:62:59:48:62:18:e2:f0:d4:4c:54:eb:
         0c:cf:41:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz
NzAzMkYzRDQwHhcNMjYwMTI0MTkzNzM4WhcNMjYwMTMxMTkzNzM4WjAYMRYwFAYD
VQQDDA02OTc1MWY4My1kNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzRgy6zoFplnrPeRLXVej8ltW6S3pRnZakD9pkxOnKVt2OK+v4NELOq8oM/sH
F50W+3/k7B52EBp7Dq87yjHaW+HxivFUfHIF0sZcWxahiCnJcgnXmWPW2WRdDA2q
FF+6I37EU5N61MEvR6JGyPq1ERb3r0I25VUBatcUPay4Pwt4wHiI964BDIQlFAfX
VsxSHZ0nZhtuaSGdiiA4NCrB52bEabGUThmhcEMkS5+sFzAHmmqYTu/9zHmjeqiB
3/dxwjQZxlTsg4IC8VHRLMfIUJSlPaTSIcLmMCEdTOOQkKWri8iN4QLYGoifucfQ
yQPvKlMQ4UwdAycZ3TEGt7p8ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyWmyZU
NSTnH53L8kfmaCUcFfL5MB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0
RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl
Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjPXYLePpfc7vMrVbxTe7DlGCSaDL+pbz+ci6tc5nrihS3fLV5SByg
PU8tMb617tFuRh5fzZMXcmsSOfGOmeewKwoV02WIg6Xgw69gwep7cwBgBWlYs0MR
bDerl6/bAACGFAXkm0KZ3dYWvn0XUvRfU1yVZ0KJ1DS3aC5sYo1sa3Vna8DD/AXY
rkIToYehVds/9XX7MANp0Sa9TMO+dzevxt3eNg37DJwOdBdPbEJf0hHfgbWvPylc
YeaN0CYNlou7/SfdKJvw68XBk56QleDiqVhUt1FGUs7lebJiVL+DwNyp50/SN+sG
i5cBV+0umBWSYllIYhji8NRMVOsMz0Ho
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:23 2026 by rpki-client