This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft
File:                     kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json)
Hash identifier:          IuRF8Ir8KpZZ9VdMkiFdYqdzGGHLKphCOwfGKW81KsY=
Subject key identifier:   E7:55:54:1E:D6:B8:48:E6:00:AA:93:67:BB:65:76:96:B9:BC:A8:71
Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36
Certificate issuer:       /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft
Manifest number:          86
Signing time:             Sun 25 Jan 2026 05:46:30 +0000
Manifest this update:     Sun 25 Jan 2026 05:46:29 +0000
Manifest next update:     Sun 01 Feb 2026 05:46:29 +0000
Files and hashes:         1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: SVItuFEUxvs1PNQDhTDLxDVdGLbRHwJO5+po1yl41iQ=)
                          2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436
        Validity
            Not Before: Jan 25 05:46:29 2026 GMT
            Not After : Feb  1 05:46:29 2026 GMT
        Subject: CN=6975ae36-99e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:50:ee:9d:9b:be:c4:be:93:ac:92:5d:ca:a3:
                    cd:db:11:ec:c0:e7:85:f0:d3:bb:c2:75:81:30:c0:
                    be:c2:41:cb:12:f8:f4:4d:41:37:66:d0:96:24:e4:
                    dc:7c:f1:30:4a:f9:4b:9e:1d:b4:55:2e:de:0f:66:
                    f6:2f:27:5b:36:ae:42:1d:fd:51:ba:3d:0c:3f:7b:
                    34:e2:7b:d6:b9:16:1d:b4:05:62:cd:97:b1:be:6b:
                    8a:49:32:0b:d4:66:95:fd:d5:78:08:f6:52:38:70:
                    6c:de:a5:b8:3b:a3:17:00:7b:c4:30:13:4c:b6:b4:
                    e0:42:42:7c:ed:da:43:ad:93:08:86:69:ff:3a:80:
                    3c:78:77:ce:60:67:a3:55:2f:5a:03:31:cd:9c:0f:
                    01:6c:5f:72:30:fe:54:1d:fe:d5:a7:c1:02:c6:bc:
                    ec:ac:62:f8:2a:1f:85:a3:99:7e:31:3c:ee:36:7b:
                    f9:25:14:f5:ae:f8:bb:b0:31:4f:82:ef:fa:92:05:
                    61:d0:b7:bf:37:0b:5b:a9:5b:cb:0e:1c:fe:f5:98:
                    af:71:2e:9d:3d:35:ee:bd:dd:ab:8e:35:63:c3:23:
                    50:e4:af:34:70:75:5c:e6:3a:5b:fa:ee:33:ec:6b:
                    6b:b6:d3:79:76:f5:df:34:24:81:50:97:b9:a4:5a:
                    da:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:55:54:1E:D6:B8:48:E6:00:AA:93:67:BB:65:76:96:B9:BC:A8:71
            X509v3 Authority Key Identifier:
                keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:bb:02:3f:30:bb:8b:e6:48:3d:be:71:4f:20:a6:56:e9:6a:
         ea:4a:71:d7:ff:22:43:1f:14:ee:d5:64:8b:49:1f:5b:96:12:
         75:cf:2e:f1:eb:50:68:01:67:10:78:d4:74:88:69:f6:cf:34:
         b2:6c:19:39:e5:85:d0:74:dc:6e:10:c5:8d:b5:0e:7c:15:57:
         0c:55:5d:b0:7f:66:26:13:76:53:0a:27:85:15:3c:4a:9f:d0:
         ce:19:02:6e:32:6a:ae:42:67:6c:b2:33:47:02:d4:5e:35:64:
         06:1f:19:6e:e1:7d:f2:eb:78:1e:03:c9:fc:05:ae:ee:24:8a:
         5d:be:44:e1:8c:13:d0:e8:50:b8:11:d7:36:d2:f5:fc:6c:27:
         4c:43:56:80:db:8d:1e:b0:5b:d4:fa:f6:92:60:06:e6:55:c9:
         28:04:3b:0c:35:6a:5a:ba:d7:a3:c7:52:30:a6:4e:b1:0c:14:
         3b:ad:a5:be:c0:a2:b6:a4:38:16:e9:94:c3:09:19:e7:76:9b:
         2e:12:88:0f:6b:96:18:e8:1c:96:e4:d2:2c:08:c1:52:95:5e:
         e5:57:d1:28:cc:7b:f1:39:ad:8e:de:0c:95:7c:12:26:e5:d1:
         42:97:57:bd:72:1a:e4:75:1c:40:ad:2a:b0:04:4b:c6:37:bf:
         86:f6:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:32 2026 by rpki-client