This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft
File:                     KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json)
Hash identifier:          Q7WZNc5CkGdrw6KWKibVcN5K58CLrMBRB+s39Kj/wAg=
Subject key identifier:   B2:18:60:6C:31:C7:01:7A:32:40:C6:D2:43:EB:31:BD:66:F5:AF:F9
Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B
Certificate issuer:       /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B
Certificate serial:       07F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft
Manifest number:          07E2
Signing time:             Sat 24 Jan 2026 20:38:51 +0000
Manifest this update:     Sat 24 Jan 2026 20:38:51 +0000
Manifest next update:     Sat 31 Jan 2026 20:38:51 +0000
Files and hashes:         1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: PsnpO6ej9MjvGv1HYx6B5PJUdIjpd1ufeSHWtmVX2S8=)
                          2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: m3jxJQF+AC7fQWOTcRGVcRm7nhWrV4djextUV/e5Tp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl
                          rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040 (0x7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B
        Validity
            Not Before: Jan 24 20:38:51 2026 GMT
            Not After : Jan 31 20:38:51 2026 GMT
        Subject: CN=69752ddb-ff6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:55:e9:53:0d:f3:28:77:d6:08:ee:6f:de:
                    da:c4:2f:71:8e:d7:ea:b5:3c:58:ce:22:8c:34:00:
                    85:1c:74:82:79:d1:d1:6b:0d:d8:3d:a3:53:ee:ed:
                    88:72:69:ac:9a:08:1b:fa:e7:f6:23:f0:4f:a8:d1:
                    cd:fa:22:45:51:89:08:cb:21:08:62:ce:aa:87:15:
                    39:1a:de:72:a4:f0:cd:11:8c:eb:55:e0:a1:3e:ed:
                    77:ca:eb:3d:99:70:1d:32:7a:4e:2f:26:cb:9b:43:
                    d8:fd:6f:fa:b8:15:36:9d:84:1c:08:51:61:72:86:
                    82:92:17:8d:c2:d0:8e:9e:c9:05:b0:a8:0f:12:c0:
                    7c:78:08:5f:62:fe:49:82:6a:30:d8:ae:60:1b:30:
                    ef:d9:df:13:7b:f3:0f:3a:5a:b4:93:5f:df:4a:fc:
                    04:9b:d7:a1:3b:c5:8f:6a:77:4f:a3:6e:92:54:9b:
                    ed:50:84:3e:db:63:98:6d:c6:e0:2c:2e:76:0c:75:
                    3c:75:25:eb:db:85:8a:9a:07:6f:60:00:0d:ba:9b:
                    bd:a2:e6:6c:49:76:b6:b1:4c:ce:7a:b4:ff:40:eb:
                    7c:16:6f:db:c1:5a:2a:ce:43:c8:9f:73:57:e5:df:
                    c3:99:50:d6:2c:df:98:5c:2d:99:21:82:65:b9:3d:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:18:60:6C:31:C7:01:7A:32:40:C6:D2:43:EB:31:BD:66:F5:AF:F9
            X509v3 Authority Key Identifier:
                keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:89:8b:96:c3:d0:5b:00:6a:be:9b:ae:7d:87:0f:29:b0:8f:
         3f:c3:29:67:d5:2d:de:14:01:df:ae:99:d5:c1:81:e3:ca:d6:
         cd:d9:45:85:eb:59:69:90:dc:d1:b5:1b:17:dc:c7:a0:b3:7d:
         52:07:b2:b6:25:f3:b3:25:ec:71:25:97:f4:f1:25:5d:28:5b:
         5b:90:20:8c:b0:d1:70:d4:94:2c:b6:df:ac:55:fb:3d:95:9f:
         96:49:61:83:47:a5:66:6e:18:22:9d:54:07:d9:9e:2e:4d:8f:
         b3:e2:78:f2:7e:71:eb:17:1e:36:5b:01:5d:cc:80:39:c5:be:
         19:e2:77:3d:d7:92:e0:c0:ef:56:d1:e6:af:3e:91:d3:4c:de:
         26:b5:21:67:61:ee:09:24:55:08:23:c2:c5:04:7f:e5:69:35:
         f1:18:e7:ca:30:55:25:cb:b0:ba:4c:cc:d9:26:d4:3c:5e:a7:
         ab:0d:2c:b0:b3:99:32:f8:02:11:59:a8:29:fa:d6:ac:82:2f:
         2d:aa:5a:84:25:c5:e7:2c:1c:90:86:d4:3c:89:3b:3d:1c:1b:
         be:15:c3:ab:b0:af:95:c5:7b:3a:03:05:70:95:1a:11:3e:88:
         95:45:ce:4e:c8:09:93:d7:af:e2:4a:07:5c:55:ca:35:45:ed:
         b9:31:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:34 2026 by rpki-client