This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
File:                     K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json)
Hash identifier:          Nll3h6sugAXnelBwB6fmyW5Jxb86iV2c/ZEsWNGYc5c=
Subject key identifier:   91:3F:27:A0:C3:22:F0:F1:2B:DE:41:62:4C:EF:70:20:97:39:FD:2B
Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
Certificate issuer:       /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
Manifest number:          51
Signing time:             Fri 23 Jan 2026 06:17:44 +0000
Manifest this update:     Fri 23 Jan 2026 06:17:43 +0000
Manifest next update:     Fri 30 Jan 2026 06:17:43 +0000
Files and hashes:         1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: SKSQZS4ESPzgejIksUiIU6dSwmdmJz2ls7SnFHz21zo=)
                          2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: RjgLOuF0n1X6yMn5QtVrfn7LMHid0aUgc2sd0x2KRqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl
                          rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
        Validity
            Not Before: Jan 23 06:17:43 2026 GMT
            Not After : Jan 30 06:17:43 2026 GMT
        Subject: CN=69731288-8ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:c4:6e:ad:e2:59:d1:9c:4a:bc:04:de:8c:
                    10:7d:f4:85:10:1b:b8:e4:13:49:8a:d9:fa:df:ad:
                    bb:e8:96:de:9b:2c:b1:89:9d:c9:bc:e6:86:03:65:
                    12:3c:43:36:9b:44:f9:11:60:25:b4:f1:60:6b:25:
                    20:79:27:a7:e3:f8:34:c3:3e:f9:e4:26:ca:e0:bf:
                    10:67:05:6f:f8:e4:92:12:1a:89:66:6c:14:7b:3a:
                    0d:05:9f:6d:2e:c6:98:cd:35:a1:9c:81:a7:33:70:
                    f9:25:0b:b2:b6:3b:a4:57:b4:87:b6:c6:83:d4:e1:
                    3e:99:3c:25:46:2e:8c:00:48:6b:d2:aa:a0:05:00:
                    6c:06:a9:4a:de:fa:bf:8a:38:71:70:b4:9a:87:e4:
                    c2:14:e7:ec:20:e3:32:9d:3c:53:a6:52:fa:82:86:
                    3a:bf:2b:44:f0:dc:cb:8d:e6:e4:39:e9:38:27:49:
                    c8:cf:51:29:f2:81:d8:ef:7e:04:28:15:46:51:84:
                    26:5b:3d:9c:76:45:69:c3:bd:6b:66:3c:b2:86:9d:
                    6a:2c:91:7f:56:aa:41:6f:f3:34:0f:43:f1:0b:ad:
                    fd:b6:5a:43:a2:e3:cd:93:ac:5b:03:60:fc:3f:ec:
                    c1:ec:8f:0d:a3:be:96:77:15:9b:cc:fd:0f:32:00:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3F:27:A0:C3:22:F0:F1:2B:DE:41:62:4C:EF:70:20:97:39:FD:2B
            X509v3 Authority Key Identifier:
                keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f6:bf:56:cf:0d:d6:84:bd:25:82:56:17:40:db:6b:3f:3a:
         d6:85:57:b4:92:82:de:a5:f0:57:d9:d6:47:ac:0d:53:f2:6f:
         6b:cb:48:16:f8:fe:01:d6:21:8b:71:74:dd:b2:82:2b:d0:f4:
         b3:c7:1f:f0:2d:cf:5f:3f:79:0d:d5:19:c3:f1:6b:93:e5:f4:
         00:fd:ae:45:12:c6:5a:b9:80:3d:54:e3:42:95:df:60:4e:19:
         bb:ea:95:9b:2c:ac:08:b7:89:ad:6f:63:15:87:e8:5c:ab:d0:
         4a:b2:34:60:c5:0e:74:2d:90:ce:83:44:5c:49:72:15:b6:d5:
         d2:66:ec:c9:b6:ef:80:50:01:ac:cb:3f:83:4e:0f:03:09:d9:
         b8:85:3f:bf:0e:d9:3c:9d:82:fc:b4:0f:fe:4c:f8:a2:b8:a8:
         f8:59:26:f2:8e:c8:f6:c6:cd:37:d6:8c:11:54:ae:d9:97:22:
         3d:6a:a9:9a:84:88:53:d4:91:d0:ea:08:c4:37:43:5c:b9:e7:
         79:6f:4d:3d:54:16:9b:ab:e5:c3:3b:77:26:24:ea:17:ca:1b:
         f5:8b:25:0d:83:44:b3:62:8a:ba:fe:18:a9:ef:bc:9f:8c:6f:
         15:bd:ae:10:b8:ca:d6:eb:cd:3a:7c:11:9c:67:a0:3a:4f:76:
         e2:e7:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:21 2026 by rpki-client