This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
File:                     KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json)
Hash identifier:          EROhv2TTv6VzOYlxAVY+Y3ZrdPT4TEkJC0FqmOTic2g=
Subject key identifier:   0F:3E:75:51:81:94:89:46:2B:A2:6E:E6:85:C5:50:CD:88:F3:14:38
Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Certificate issuer:       /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
Manifest number:          011F
Signing time:             Sun 25 Jan 2026 04:03:30 +0000
Manifest this update:     Sun 25 Jan 2026 04:03:30 +0000
Manifest next update:     Sun 01 Feb 2026 04:03:30 +0000
Files and hashes:         1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: y44P3Ai/zqMKJ7ge7oKAqbWhE40pl4vdsVEcyUgfMrU=)
                          2: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: QteYiqxagttieW0gH2HjsmgjmoFz+n9ylxq8eEuUcDA=)
                          3: AAF88862D51811F0B469126CC4F9AE02.roa (hash: 9rsF5J70Klw5DKV3FQ8sVc1/GZi9hGE+u4uR6zxHJHw=)
                          4: AB61CD86D51811F09422126CC4F9AE02.roa (hash: DNYYD1qhZgeoz9EHaAuF+a1hE8ZqrXuBI6M/ZwD1fD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
        Validity
            Not Before: Jan 25 04:03:30 2026 GMT
            Not After : Feb  1 04:03:30 2026 GMT
        Subject: CN=69759612-3293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:7e:94:e6:14:71:01:08:21:a8:6e:fa:cc:
                    c9:19:08:5a:a3:13:3b:a7:bd:aa:ac:33:aa:3f:37:
                    71:99:79:09:d4:cd:c4:1e:c9:6b:68:25:54:3d:2f:
                    b4:58:63:fc:4a:45:23:bc:98:a0:80:b0:e7:70:e0:
                    3d:d5:f3:5b:6b:e1:05:5a:0b:ef:aa:e6:2c:3c:39:
                    1a:f4:fa:2c:4f:7c:56:b5:66:b0:d1:ba:28:9e:8b:
                    7e:43:ac:1c:d9:b4:af:cf:24:00:66:a9:59:d9:6d:
                    77:6f:22:ca:73:51:25:45:03:54:eb:7a:d1:b6:88:
                    cb:99:c3:89:2b:a3:c9:37:9c:e4:f4:bd:b3:f0:7f:
                    62:bf:9c:48:9a:1f:39:65:f1:4a:70:23:36:8e:16:
                    05:37:23:f6:8f:6d:70:1f:ed:7a:34:15:9b:bc:49:
                    79:25:a3:84:d2:42:c7:62:f3:b5:38:dd:30:95:ee:
                    e3:a4:16:8f:dd:3d:10:6e:d8:00:77:b0:ba:6b:c4:
                    bc:6a:bd:bc:98:7b:0b:d5:6a:ae:f5:c5:29:c9:01:
                    0f:84:2c:cd:e0:53:96:ce:b3:1e:ed:37:ae:66:6a:
                    4d:dd:ce:14:49:d4:43:fd:64:f4:dd:8e:f6:b0:52:
                    cb:42:35:d8:51:61:d8:f7:20:66:ca:1c:5c:33:90:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3E:75:51:81:94:89:46:2B:A2:6E:E6:85:C5:50:CD:88:F3:14:38
            X509v3 Authority Key Identifier:
                keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:65:e1:5f:47:f9:7e:80:5d:3b:08:16:37:53:29:95:b0:
         e2:ac:d3:ef:e4:cd:47:c8:2e:4d:f8:6e:53:43:f5:b1:a2:ad:
         bf:43:df:16:e5:c1:15:7b:a2:28:5c:03:20:17:c5:bd:73:8f:
         06:f0:5f:e9:95:59:b5:4c:44:d3:e0:e1:16:e0:6f:ce:cd:1c:
         83:c1:fb:d0:97:c3:30:a8:3d:2d:29:5d:04:54:3f:80:92:aa:
         45:77:85:6e:8b:b4:42:ee:03:7e:57:a9:be:4d:7d:0e:22:fb:
         72:c2:49:3f:40:79:9e:71:96:b4:7c:da:7c:84:98:1d:56:26:
         b8:d6:f5:5c:f4:c6:94:8e:76:db:01:ba:49:fd:f0:40:39:45:
         93:f6:15:29:86:34:b7:dc:f3:ad:6a:8f:cb:a1:fa:f8:71:54:
         34:a4:fc:2a:47:63:a5:d2:aa:f7:40:8c:87:24:8f:c2:64:13:
         07:3b:7a:4f:70:34:80:19:07:de:48:4f:b1:d4:56:5c:3d:14:
         38:2e:02:81:ce:9b:57:0f:d4:d1:3e:d3:90:ce:8f:e9:8e:79:
         00:b3:2a:c7:a1:fb:59:57:73:d4:c1:60:8f:5a:43:47:0d:46:
         da:5d:42:2b:6f:75:bc:d5:09:c5:89:ba:ff:5d:3f:47:0c:09:
         ba:91:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:25:40 2026 by rpki-client