This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
File:                     KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json)
Hash identifier:          PcelVnBIvCuskJjp19UX3iQv6+zuLUEFrYxlZm44Dj4=
Subject key identifier:   8B:DD:A9:EE:C5:93:19:82:99:18:CA:F0:0B:50:5B:DD:89:C4:81:06
Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
Certificate issuer:       /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Certificate serial:       07B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
Manifest number:          079F
Signing time:             Sat 24 Jan 2026 20:52:31 +0000
Manifest this update:     Sat 24 Jan 2026 20:52:30 +0000
Manifest next update:     Sat 31 Jan 2026 20:52:30 +0000
Files and hashes:         1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: 5ZOFHjfe4UMg0/eWdzegbuZAwDxSvgh74UnU2gmm8pI=)
                          2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: vScPDcKQqioESY3fiWqsXqSq+CDEGlxPspBb4jYpPj8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
                          rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
        Validity
            Not Before: Jan 24 20:52:30 2026 GMT
            Not After : Jan 31 20:52:30 2026 GMT
        Subject: CN=6975310f-931c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:b3:72:11:b2:16:7f:04:30:6e:d7:7f:86:
                    a7:ce:4b:09:bf:ea:d8:d4:13:9b:25:0a:1a:71:ab:
                    7b:cb:6a:c7:78:1f:16:67:ef:d9:1b:e6:0c:50:28:
                    42:69:ec:ed:c4:db:b3:ae:ab:e0:a7:a4:55:9c:a9:
                    68:8d:bf:6d:1e:f1:92:57:ea:fa:c6:34:28:c2:38:
                    4b:97:02:0e:e7:9a:c6:d6:5a:dd:7d:3a:fa:2c:de:
                    38:a1:2c:d4:4e:49:a0:ad:bc:5e:de:3a:9a:d5:42:
                    7d:57:dc:74:31:c5:3a:88:ad:08:f4:82:6f:9d:ef:
                    41:6a:aa:b6:dc:f8:01:8a:68:4b:06:79:ec:7c:9d:
                    7c:df:cd:e2:30:bb:35:7d:6f:8a:d3:9c:13:2b:5a:
                    ce:d4:ed:a2:ae:52:ad:81:da:43:18:83:a6:6c:d5:
                    11:50:60:9f:44:f2:8c:fb:ed:49:c2:5b:10:bc:18:
                    f4:ec:29:b6:e3:e0:2a:88:e6:1a:7e:44:f9:92:09:
                    a1:27:e6:c0:3b:89:5a:56:88:ea:d6:f6:df:8d:79:
                    d8:a2:65:c7:97:9a:21:e5:c1:5b:77:96:1a:3f:fe:
                    0b:85:3c:13:53:c0:e1:2d:a9:08:4a:76:be:da:37:
                    c3:4b:6a:74:a7:76:05:e9:69:d7:99:42:b1:83:e1:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DD:A9:EE:C5:93:19:82:99:18:CA:F0:0B:50:5B:DD:89:C4:81:06
            X509v3 Authority Key Identifier:
                keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:23:a7:ec:59:cb:2f:c5:d2:1d:4b:f8:97:e0:39:c4:d7:1b:
         fd:29:b1:7d:8d:f2:59:9b:58:78:b4:f0:2e:90:a3:9c:07:1c:
         ff:16:dc:11:98:d1:cc:9e:28:e7:aa:39:af:14:fc:39:a3:5f:
         3a:d7:09:d7:2e:58:53:bf:20:f1:ed:82:c4:c7:34:b6:e0:ab:
         ca:77:84:52:e3:cc:da:13:e4:8c:86:d3:6f:56:a5:50:ba:07:
         0f:c9:4d:8e:b0:99:9b:3d:e4:48:1d:31:30:6c:f6:d4:68:3b:
         36:93:6a:40:d5:c2:88:be:dc:6b:12:ef:a7:eb:02:91:90:d6:
         1e:7e:88:64:0a:b5:fa:9c:08:8d:59:8e:f9:f5:99:d4:a4:0b:
         0c:8b:32:fd:30:d3:d4:13:32:01:a3:92:e7:a0:75:87:c6:8e:
         86:07:28:9b:0a:1a:58:8d:e6:45:cc:cc:84:ff:86:a3:ae:3a:
         25:60:52:eb:86:3b:5c:3c:e3:99:11:7a:09:d1:6c:91:b4:34:
         26:26:4a:1a:da:e7:5b:72:6a:90:84:9b:60:4a:6e:76:8b:f3:
         05:39:5c:51:aa:22:a8:43:d8:8f:b7:43:92:49:34:3c:9c:5a:
         8e:fe:dc:52:b8:99:54:68:46:0b:9b:a1:21:21:d4:45:f8:8f:
         82:08:4b:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzUwMjExMTAvBgNVBAUTKDI4RjA3MTEwRTQzNTg0QTNCQTZBM0E0QTg3RDY4RTlF
QjdEM0U5MDIwHhcNMjYwMTI0MjA1MjMwWhcNMjYwMTMxMjA1MjMwWjAYMRYwFAYD
VQQDDA02OTc1MzEwZi05MzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAriOzchGyFn8EMG7Xf4anzksJv+rY1BObJQoacat7y2rHeB8WZ+/ZG+YMUChC
aeztxNuzrqvgp6RVnKlojb9tHvGSV+r6xjQowjhLlwIO55rG1lrdfTr6LN44oSzU
Tkmgrbxe3jqa1UJ9V9x0McU6iK0I9IJvne9Baqq23PgBimhLBnnsfJ18383iMLs1
fW+K05wTK1rO1O2irlKtgdpDGIOmbNURUGCfRPKM++1JwlsQvBj07Cm24+AqiOYa
fkT5kgmhJ+bAO4laVojq1vbfjXnYomXHl5oh5cFbd5YaP/4LhTwTU8DhLakISna+
2jfDS2p0p3YF6WnXmUKxg+H39QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvdqe7F
kxmCmRjK8AtQW92JxIEGMB8GA1UdIwQYMBaAFCjwcRDkNYSjumo6SofWjp630+kC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTAyMS85QUZENDg2QzNC
QkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhLTzZhanBLaDlhT25yZlQ2
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tQQnhFT1ExaEtPNmFqcEtoOWFPbnJmVDZRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTAyMS85QUZENDg2QzNCQkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhL
TzZhanBLaDlhT25yZlQ2UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNI6fsWcsvxdIdS/iX4DnE1xv9KbF9jfJZm1h4tPAukKOcBxz/FtwR
mNHMnijnqjmvFPw5o1861wnXLlhTvyDx7YLExzS24KvKd4RS48zaE+SMhtNvVqVQ
ugcPyU2OsJmbPeRIHTEwbPbUaDs2k2pA1cKIvtxrEu+n6wKRkNYefohkCrX6nAiN
WY759ZnUpAsMizL9MNPUEzIBo5LnoHWHxo6GByibChpYjeZFzMyE/4ajrjolYFLr
hjtcPOOZEXoJ0WyRtDQmJkoa2udbcmqQhJtgSm52i/MFOVxRqiKoQ9iPt0OSSTQ8
nFqO/txSuJlUaEYLm6EhIdRF+I+CCEuQ
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:13 2026 by rpki-client