This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
File:                     Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json)
Hash identifier:          QD+4tgF+PVEUcew67XNi1LncCfaq1wqiBfXft93yq/U=
Subject key identifier:   C6:24:5E:D9:84:CF:23:FC:FC:74:34:6F:60:9F:36:1C:FE:24:99:90
Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43
Certificate issuer:       /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
Manifest number:          AA
Signing time:             Fri 23 Jan 2026 05:19:21 +0000
Manifest this update:     Fri 23 Jan 2026 05:19:20 +0000
Manifest next update:     Fri 30 Jan 2026 05:19:20 +0000
Files and hashes:         1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: 0BmcwoiK3CIkh40qIxM0Rq40cY/JBYLizebfpcYYv7U=)
                          2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: ghtYYnHvBHOXjjafNw/o3b7nWMJznKoJtYacsPdc8uY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl
                          rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
        Validity
            Not Before: Jan 23 05:19:20 2026 GMT
            Not After : Jan 30 05:19:20 2026 GMT
        Subject: CN=697304d8-cf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:f3:78:aa:21:95:db:7c:0b:e2:e7:ca:18:
                    c8:fd:f1:98:8c:f1:a8:13:ff:3c:eb:67:45:13:1c:
                    a5:b9:11:f1:b6:65:d1:af:c6:a6:eb:7b:f4:09:03:
                    34:3f:04:66:02:e7:04:3f:31:17:fd:2e:ed:f7:2e:
                    22:03:b5:a3:18:92:c7:b8:16:2e:7d:43:47:63:3e:
                    08:80:43:56:21:d9:1a:20:1c:a7:dd:23:2c:bf:2e:
                    df:80:25:93:1d:95:8b:f2:4d:a5:3f:f9:74:05:4e:
                    1e:27:06:f2:c1:50:46:c3:59:64:83:ff:96:4f:0c:
                    a1:3b:5d:be:54:64:4f:d4:d7:da:8a:a9:ce:70:9e:
                    f6:33:d4:42:62:51:6a:7f:47:7a:e3:4a:b4:c0:2b:
                    ee:95:99:11:7b:69:8a:12:a5:ea:d4:90:46:56:a1:
                    92:3f:ab:b9:76:96:72:a3:f9:60:dc:9e:b8:55:ef:
                    3f:0d:68:bf:93:a4:86:60:dd:ec:4f:53:a0:79:1a:
                    25:a8:87:70:2e:33:21:94:ab:f7:9b:8f:51:78:84:
                    9d:32:52:75:f9:94:35:73:00:e6:f5:95:9e:50:87:
                    6c:84:2c:3e:80:a2:16:78:8d:ed:cd:f8:36:03:25:
                    c9:73:fe:6f:e0:e9:2c:f2:51:cf:df:73:09:1b:31:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:24:5E:D9:84:CF:23:FC:FC:74:34:6F:60:9F:36:1C:FE:24:99:90
            X509v3 Authority Key Identifier:
                keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b1:67:a6:50:f6:8a:75:e8:1b:5e:50:64:a9:f7:49:95:16:
         73:4e:a6:a4:9d:db:c9:58:ec:fb:af:c2:e8:d6:78:6a:cb:19:
         78:a1:14:87:0e:0a:0f:c0:14:c6:a7:31:4c:a7:1d:09:f2:e4:
         1c:02:ae:d5:61:ca:ee:3e:9a:d4:3b:f6:90:55:aa:b3:a5:df:
         9b:16:c6:cc:99:c6:69:40:0e:ed:9b:4b:2a:a1:7a:f3:a5:c0:
         0e:e9:6f:62:7d:80:fe:18:4a:78:27:25:50:51:dd:a2:6e:3b:
         a7:96:40:35:f1:c3:50:3b:89:a8:9b:23:90:fc:ac:74:89:02:
         bb:3a:5c:13:d3:16:21:4e:33:d8:17:0d:17:80:42:92:c6:e8:
         83:dd:3c:47:11:59:fc:ce:72:7a:b5:c2:32:9d:79:54:ad:40:
         49:0a:eb:94:49:ae:05:45:e5:9a:4d:4c:ca:0a:24:52:0a:cc:
         ac:d5:28:e0:f7:e5:00:0e:45:71:6d:cb:9c:1b:f3:f1:95:c6:
         cd:62:f1:71:46:3a:5c:56:8d:f8:ad:01:04:38:e3:6c:2c:e7:
         2c:65:87:06:63:d7:48:6a:e3:3c:b1:7e:9e:8c:02:0a:ed:92:
         f4:7d:b8:21:f7:19:8d:ab:7c:5a:05:0c:62:a2:d5:34:d3:12:
         18:b4:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:01:25 2026 by rpki-client