This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
File:                     kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json)
Hash identifier:          T1yniHGhw04ZfgYfQOz8XNUBBZC5yHY9OnMGzoaMwKQ=
Subject key identifier:   24:66:A6:EC:C8:8D:CA:E3:A3:0E:24:DE:CE:A9:C2:05:B2:01:14:A1
Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Certificate issuer:       /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Certificate serial:       34FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
Manifest number:          34FD
Signing time:             Sat 24 Jan 2026 15:10:20 +0000
Manifest this update:     Sat 24 Jan 2026 15:10:20 +0000
Manifest next update:     Sat 31 Jan 2026 15:10:20 +0000
Files and hashes:         1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: G7+y3eGak5RqWVGzu9Co1URgMZPNGfRCmIEIpPaWj94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
                          rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13567 (0x34ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
        Validity
            Not Before: Jan 24 15:10:20 2026 GMT
            Not After : Jan 31 15:10:20 2026 GMT
        Subject: CN=6974e0dc-f63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:12:ab:16:e6:bb:7a:1f:04:35:4b:a3:b5:
                    66:0f:c6:0d:cc:2d:8e:d6:2e:10:5d:31:ef:e9:6e:
                    bd:73:0a:92:e3:f0:88:a6:db:71:84:06:8b:be:f2:
                    a0:9b:57:56:1d:03:39:fb:11:f2:8b:9e:0e:c8:90:
                    cd:be:5e:e7:b2:b7:f6:41:48:61:50:c4:0b:7e:f7:
                    ed:68:8c:14:32:fb:95:08:8f:fd:59:ee:ff:42:a5:
                    98:68:73:3d:65:b0:0e:2e:97:05:25:35:8e:7d:b2:
                    f2:23:69:35:ed:1a:0b:ec:1a:79:10:43:cb:03:54:
                    76:2b:9b:44:e0:8a:6b:bd:6f:52:23:a4:30:db:35:
                    1a:3e:71:1b:d3:c4:2a:26:95:04:62:6d:6d:15:4e:
                    71:c2:46:64:5a:26:f9:32:a6:3a:b2:9c:a0:c6:6b:
                    bf:8e:c1:af:40:6c:67:83:5f:6c:26:f1:8f:15:f1:
                    bd:3b:f7:93:a2:85:ca:d7:7a:52:4a:19:50:92:8f:
                    e9:d1:c3:25:5f:12:9c:2e:e9:51:97:b6:87:fb:43:
                    a6:c8:39:20:6b:5c:63:58:29:f2:0a:76:fa:22:1a:
                    70:18:f5:87:05:33:3c:50:31:a6:0d:29:af:65:13:
                    85:30:ee:32:28:e4:e3:af:d0:64:a4:e9:61:1d:b0:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:A6:EC:C8:8D:CA:E3:A3:0E:24:DE:CE:A9:C2:05:B2:01:14:A1
            X509v3 Authority Key Identifier:
                keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:4d:bb:31:02:ff:42:45:9c:1b:33:5c:34:ea:40:ca:d8:
         b5:18:84:57:e6:ef:6b:69:e4:ee:e7:eb:36:19:10:ea:40:b7:
         1b:6c:e8:f0:80:a2:20:ee:3f:be:d3:70:a8:2c:42:60:2e:aa:
         07:8c:2a:d6:b7:0f:45:bc:8d:b7:5d:46:f0:9a:a5:8b:a1:b1:
         28:30:da:d8:90:40:64:26:0a:81:e0:4c:36:f1:44:aa:20:1e:
         86:89:d1:4e:3b:15:92:48:e3:12:b9:50:fe:3e:76:e7:fe:50:
         7e:24:5a:68:64:9f:64:39:ad:6b:e2:6c:e6:f6:cb:df:67:5f:
         aa:c4:9b:7f:ee:d2:7d:ea:d4:e5:0d:a4:fb:05:c0:92:6b:06:
         2d:45:b5:82:c0:9b:c2:cf:06:15:71:9c:53:8b:5d:6c:bc:da:
         21:50:16:7e:c3:70:98:7c:d7:a9:51:65:cd:95:e4:61:85:ca:
         5e:d1:28:d9:3f:31:da:61:97:82:47:63:47:02:1c:4b:ae:98:
         88:fb:05:c7:ed:21:48:6d:94:10:b6:9d:ba:c4:58:bc:08:3e:
         b2:89:a8:99:9d:47:af:be:84:09:a0:b5:58:f0:79:0f:bb:5f:
         7f:e5:06:f4:a0:eb:48:4a:e4:cf:91:ba:29:74:8c:4b:9f:d7:
         45:6b:9b:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG
NTQwNjEwODIwHhcNMjYwMTI0MTUxMDIwWhcNMjYwMTMxMTUxMDIwWjAYMRYwFAYD
VQQDDA02OTc0ZTBkYy1mNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwsSqxbmu3ofBDVLo7VmD8YNzC2O1i4QXTHv6W69cwqS4/CIpttxhAaLvvKg
m1dWHQM5+xHyi54OyJDNvl7nsrf2QUhhUMQLfvftaIwUMvuVCI/9We7/QqWYaHM9
ZbAOLpcFJTWOfbLyI2k17RoL7Bp5EEPLA1R2K5tE4IprvW9SI6Qw2zUaPnEb08Qq
JpUEYm1tFU5xwkZkWib5MqY6spygxmu/jsGvQGxng19sJvGPFfG9O/eTooXK13pS
ShlQko/p0cMlXxKcLulRl7aH+0OmyDkga1xjWCnyCnb6IhpwGPWHBTM8UDGmDSmv
ZROFMO4yKOTjr9BkpOlhHbBEwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRmpuzI
jcrjow4k3s6pwgWyARShMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE
QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv
X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQxU27MQL/QkWcGzNcNOpAyti1GIRX5u9raeTu5+s2GRDqQLcbbOjw
gKIg7j++03CoLEJgLqoHjCrWtw9FvI23XUbwmqWLobEoMNrYkEBkJgqB4Ew28USq
IB6GidFOOxWSSOMSuVD+Pnbn/lB+JFpoZJ9kOa1r4mzm9svfZ1+qxJt/7tJ96tTl
DaT7BcCSawYtRbWCwJvCzwYVcZxTi11svNohUBZ+w3CYfNepUWXNleRhhcpe0SjZ
PzHaYZeCR2NHAhxLrpiI+wXH7SFIbZQQtp26xFi8CD6yiaiZnUevvoQJoLVY8HkP
u19/5Qb0oOtISuTPkbopdIxLn9dFa5uo
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:28 2026 by rpki-client