This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft
File:                     KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json)
Hash identifier:          gNhQrtypBRseVLF9gk9iH0d2hSW5mBn6WtN9/ItemeI=
Subject key identifier:   A2:90:12:AD:41:59:A1:24:15:DC:0F:93:94:84:CB:A1:50:08:4A:06
Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78
Certificate issuer:       /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft
Manifest number:          012C
Signing time:             Sun 15 Feb 2026 04:48:28 +0000
Manifest this update:     Sun 15 Feb 2026 04:48:28 +0000
Manifest next update:     Sun 22 Feb 2026 04:48:28 +0000
Files and hashes:         1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: ClX6TWWyha1J5IXnOrNdcsQc0Z58lwUBls7kI0hmEcU=)
                          2: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: CGn0Q55/AX22nfT4AGCKBK/ILhvxf+/fmsvng3DA1pY=)
                          3: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: ZZDdEUCyxIX0Eybvqkeb03mNWg+YxSkSpegb3mdW8RE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl
                          rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 04:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678
        Validity
            Not Before: Feb 15 04:48:28 2026 GMT
            Not After : Feb 22 04:48:28 2026 GMT
        Subject: CN=6991501c-972b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:c8:f1:51:be:40:6e:88:32:16:c1:c4:b1:
                    89:d7:da:57:44:2f:e4:9b:57:3c:ba:48:d5:fb:07:
                    34:7a:58:72:22:74:aa:c0:5e:71:4a:76:a4:4f:df:
                    c2:b8:da:c8:97:b0:1c:97:b9:38:5b:73:d4:71:ff:
                    79:b1:b1:ee:e5:ba:11:6f:73:42:bd:90:13:ab:35:
                    60:cc:fb:a6:5a:5f:be:b1:0c:c7:c8:5d:13:bb:c2:
                    84:af:34:d5:4c:f5:4f:ad:fa:58:ba:e7:f9:21:4a:
                    23:fe:91:dc:b8:e9:d5:e7:6a:1c:75:28:65:1a:aa:
                    0f:e3:21:be:9b:d6:3e:b1:c2:fa:d4:1b:93:e9:00:
                    c1:95:f9:dd:3d:8f:6b:81:2b:e6:26:a5:40:68:33:
                    c1:47:04:6d:61:35:20:ac:bc:e5:54:22:f1:9c:dd:
                    5a:30:69:3e:08:f8:73:c9:b4:67:aa:b1:33:a3:88:
                    09:cb:9a:41:6a:6e:62:b4:38:c6:05:86:98:10:88:
                    c5:15:19:26:12:5b:2f:39:63:cd:81:9b:bc:69:f4:
                    7f:d4:51:f6:04:dd:7e:f6:b1:48:40:7d:01:ef:be:
                    da:37:77:e8:4c:bc:56:90:6e:d3:19:d0:25:46:24:
                    4f:28:37:63:02:bc:78:9b:48:ad:4a:d3:bf:79:00:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:90:12:AD:41:59:A1:24:15:DC:0F:93:94:84:CB:A1:50:08:4A:06
            X509v3 Authority Key Identifier:
                keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ac:d2:ec:17:3f:1e:c4:ff:2b:14:23:16:f5:a0:5e:b8:9b:
         65:ef:89:2e:e6:de:b6:4a:06:9f:c0:c6:db:b0:91:5c:a8:6a:
         0a:a1:cb:19:a1:72:9f:a3:2b:7e:89:76:22:73:0b:97:d5:94:
         a9:7b:7c:5c:cc:a5:79:04:7e:4d:64:2a:2d:5b:13:68:22:03:
         0a:83:9a:61:10:33:6c:0a:ce:58:9e:56:d7:0d:2a:12:00:d7:
         20:dc:36:e7:3e:64:5f:26:69:79:2c:7e:26:51:3f:4d:f1:c0:
         f8:05:1a:50:75:02:3c:7e:2e:c9:7f:5c:03:16:df:b3:e1:2d:
         94:28:6d:df:98:d3:77:be:87:ce:27:e4:3b:51:3a:e9:88:81:
         56:bf:a0:0e:b3:65:0a:56:4e:da:b8:8f:be:fd:39:21:df:e1:
         4c:5c:db:73:0a:4b:43:6a:6d:c4:9e:12:b5:0e:99:62:47:46:
         f7:a6:24:f0:fb:13:6f:f7:7d:3f:b7:32:37:54:9a:c3:3c:f8:
         a0:41:0e:64:eb:46:f1:db:ba:94:89:04:4e:56:c5:62:ca:99:
         a2:55:1c:08:8c:2d:a1:10:47:6f:3b:86:79:b6:c5:d9:ca:b7:
         31:81:16:96:55:03:21:36:f3:b5:8c:f5:64:49:29:d5:89:0e:
         d5:df:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 12:54:03 2026 by rpki-client