This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
File:                     keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json)
Hash identifier:          1TtjNAFZle9UAcGdAsnPUf0N5qU3Z1rRlMtx+iUS96Q=
Subject key identifier:   FC:AC:5A:0B:1A:E7:D1:71:D0:04:1B:99:3E:E9:C3:B7:CA:57:17:86
Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5
Certificate issuer:       /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
Manifest number:          01DF
Signing time:             Sun 25 Jan 2026 02:01:47 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:47 +0000
Manifest next update:     Sun 01 Feb 2026 02:01:47 +0000
Files and hashes:         1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: OpLHqm1pNuj9aYkfOgXEnZTpp+fTcMLvd6orqGfBvnw=)
                          2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: tkkYz0ghUklFSNnUvurDs2pFNwSVM0cpaVXq98edoAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl
                          rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
        Validity
            Not Before: Jan 25 02:01:47 2026 GMT
            Not After : Feb  1 02:01:47 2026 GMT
        Subject: CN=6975798b-a412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:ae:6d:49:93:d3:78:a2:2c:2f:bc:1b:7a:
                    e8:fc:da:6d:59:08:8e:ef:69:88:a9:a4:be:08:ed:
                    e7:fb:4d:f1:8b:a1:b0:0c:9c:63:7c:24:0a:8e:12:
                    f0:99:c6:1b:63:18:d1:d4:e2:fc:d9:ac:5a:4a:23:
                    70:1b:02:54:6f:8d:12:00:24:98:16:18:66:9f:67:
                    be:88:7a:6c:07:c5:89:00:2a:3b:e1:d3:e1:97:34:
                    fa:7b:9d:b1:6b:9d:45:a1:49:97:45:5c:34:8a:5b:
                    23:68:c6:a5:a1:4f:93:b3:dd:9c:9a:a0:58:dc:50:
                    7b:62:97:86:04:ab:70:52:5e:a2:2b:7a:00:1a:0e:
                    5c:f1:1b:68:57:5f:e5:24:19:a8:b5:8e:fc:f4:71:
                    5e:7b:01:d1:2b:09:52:65:45:5e:0e:86:d6:7c:c0:
                    02:9f:9c:c1:96:ed:48:ce:3b:e7:41:d8:68:09:f2:
                    35:d8:6e:f2:2f:1d:27:73:66:c8:a6:7b:a7:ca:85:
                    7a:10:a2:fc:f4:74:3b:8a:a2:ee:78:63:23:9f:9c:
                    24:ca:53:d4:5a:01:bc:c0:93:78:0f:d7:9a:8c:cb:
                    6f:46:96:95:26:76:8e:d8:16:bd:57:7b:0a:a7:a4:
                    5d:9a:df:1e:80:2c:ea:88:05:08:a4:6a:02:71:14:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AC:5A:0B:1A:E7:D1:71:D0:04:1B:99:3E:E9:C3:B7:CA:57:17:86
            X509v3 Authority Key Identifier:
                keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:17:81:aa:67:0e:2f:6f:1b:68:c0:10:fb:c7:ad:25:bf:de:
         35:d3:ef:ae:12:d5:d4:26:e2:0c:54:55:7f:3c:bf:7c:ae:61:
         97:68:77:9a:81:81:ea:98:86:78:62:59:3c:d3:cb:4c:21:a6:
         00:99:9f:b3:d4:7a:50:ca:5a:2b:f2:48:f1:de:6a:e4:e7:39:
         e0:98:72:70:81:d7:54:e4:0e:58:00:6e:11:a1:b8:1f:2b:4f:
         e3:dd:59:61:1c:11:5b:59:0a:74:b0:9d:80:7a:13:cd:5f:6a:
         c5:d4:57:01:b7:a8:70:ef:08:05:2b:f8:c5:a7:63:15:79:91:
         fa:57:ee:95:c9:cc:91:4a:cd:56:65:ec:b2:e4:97:01:44:18:
         63:83:d2:cd:53:bb:24:48:7c:37:0f:ad:7d:71:d6:a4:6a:2d:
         d0:52:eb:0a:c7:7b:09:e6:21:96:e7:76:e3:f4:28:8a:a4:4a:
         19:2c:6e:cf:bf:a0:fb:18:2c:9e:2e:d1:95:20:cc:cf:7e:d4:
         16:23:60:20:be:69:62:a3:55:ce:ac:65:a4:fd:c8:cf:89:85:
         c1:92:e2:96:ec:55:dc:96:36:9d:20:a8:c8:74:ff:5b:cb:0f:
         5d:47:2b:03:df:8c:bf:1a:30:02:87:6c:67:ca:70:06:4d:ff:
         4a:55:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:55 2026 by rpki-client