This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
File:                     kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json)
Hash identifier:          6gKWAKGGS0Dd+evOUb8d0+aLPwuGAuTVO8khLoyyW7A=
Subject key identifier:   62:5E:FA:69:97:C6:08:68:EA:36:B1:30:CB:6D:26:6B:5F:49:45:FA
Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
Certificate issuer:       /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
Manifest number:          C4
Signing time:             Sun 25 Jan 2026 05:03:17 +0000
Manifest this update:     Sun 25 Jan 2026 05:03:17 +0000
Manifest next update:     Sun 01 Feb 2026 05:03:17 +0000
Files and hashes:         1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: 595qYo8Idi7rVDvT1CP5jSSr6d/WW3K2eyaZaRVfQNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
        Validity
            Not Before: Jan 25 05:03:17 2026 GMT
            Not After : Feb  1 05:03:17 2026 GMT
        Subject: CN=6975a415-93c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:9e:0c:2f:c8:fe:6d:52:48:a6:c8:70:67:
                    cb:09:cc:99:7d:8e:15:10:19:3e:c8:02:b5:7e:c4:
                    f2:42:ab:a9:65:6d:25:7f:ab:04:2b:58:0d:98:40:
                    7a:c5:22:98:a2:28:90:ba:0d:55:4a:f1:69:45:59:
                    b6:fd:a7:f4:ef:b1:db:8d:5f:40:fe:0f:f9:e5:d7:
                    e8:ce:29:f2:c7:12:f8:10:89:a0:30:9b:68:e9:10:
                    ac:37:06:85:86:5e:08:3b:c9:5a:93:31:da:ce:a5:
                    12:6a:76:61:5c:e9:b5:5a:d2:fa:b8:6f:6e:ab:0e:
                    f1:9a:cf:27:ce:c3:dc:93:c7:3b:0c:8a:da:60:6f:
                    20:08:04:07:59:d6:a2:a4:35:57:0a:c5:fd:d3:43:
                    9c:2a:75:56:60:5a:ad:1b:25:14:3c:07:41:e5:19:
                    32:68:2e:b9:ca:5e:12:30:5c:b5:cf:4e:43:02:d9:
                    4a:ba:90:b6:31:92:e7:46:12:dd:f6:71:94:8e:7c:
                    ec:2b:2d:2c:85:45:96:6d:fc:73:35:a8:f5:73:7c:
                    e7:76:59:b2:5f:13:f8:25:f1:6a:7b:09:59:3e:ec:
                    50:51:3c:b1:67:99:6f:42:f2:80:83:f2:dd:d1:31:
                    87:f0:01:31:bc:71:14:9d:07:92:19:5e:ba:b2:14:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5E:FA:69:97:C6:08:68:EA:36:B1:30:CB:6D:26:6B:5F:49:45:FA
            X509v3 Authority Key Identifier:
                keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:eb:11:5b:23:28:9c:64:1f:65:09:cd:0d:6e:52:20:e2:
         e4:5c:4f:81:cf:f7:d2:47:38:45:29:4d:e4:fc:45:f6:2a:1f:
         f3:55:f2:25:b2:90:be:10:8c:76:6b:84:9c:4f:56:36:56:ce:
         0f:0c:4b:22:62:19:3b:85:75:c7:93:76:34:4d:16:83:b6:41:
         1f:e2:87:c7:4c:66:ea:cf:98:2f:af:bd:58:ad:96:69:1a:62:
         25:d0:9a:92:48:79:44:eb:bf:9c:00:45:32:79:e6:b5:e3:56:
         c4:5b:02:52:d2:28:b6:fa:03:b3:8c:5b:ab:e7:33:89:74:20:
         a3:e6:b8:f8:de:87:74:66:c4:94:82:c9:e2:8f:ad:0b:da:16:
         ef:4c:ca:16:8b:54:3a:7b:83:2f:b8:15:06:43:cc:4d:82:9f:
         cf:e9:2a:06:2d:a9:19:5b:97:05:01:fb:33:17:8d:8d:dd:95:
         c5:cf:26:d0:6b:21:03:35:c7:f9:3c:ce:8e:94:1f:68:04:cb:
         e1:5b:0f:04:cd:24:a8:12:ee:ae:e2:40:8c:d7:1c:36:a9:f8:
         d9:bc:0b:31:64:4c:dd:9d:46:4d:c2:93:2f:83:0b:60:02:d2:
         4b:0e:20:95:3e:db:7b:d2:3c:cb:78:02:b0:19:b6:69:b2:c1:
         a3:51:84:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:31 2026 by rpki-client