This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
File:                     kBqfnorkBi5SGbdlLY6f7n7FrjM.mft (raw, json)
Hash identifier:          FDJKwPH2fcf/LR9e4NK2K+IaLGNVP1bpdKk2nFAZa5g=
Subject key identifier:   D0:E3:AA:7E:EF:B4:FF:BE:4D:4C:AA:2E:74:DE:88:25:58:AF:0B:B0
Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
Certificate issuer:       /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
Manifest number:          0118
Signing time:             Tue 03 Feb 2026 04:34:59 +0000
Manifest this update:     Tue 03 Feb 2026 04:34:58 +0000
Manifest next update:     Tue 10 Feb 2026 04:34:58 +0000
Files and hashes:         1: kBqfnorkBi5SGbdlLY6f7n7FrjM.crl (hash: f+Gkm8EVZgBgD6drBxGbGL6kGx/kEF5/iO71DP52rX0=)
                          2: 4C738434ABD011F08EDDF110C4F9AE02.roa (hash: Lm3n9/beTQTSuADhNOkS7uaY8GPI4m4BtlZmRSSiRCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl
                          rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 04:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
        Validity
            Not Before: Feb  3 04:34:58 2026 GMT
            Not After : Feb 10 04:34:58 2026 GMT
        Subject: CN=69817af3-0b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:39:01:da:29:fb:8a:4e:4e:7f:b1:76:02:
                    0d:0e:ac:99:a2:06:e0:63:bb:1e:53:b5:37:31:57:
                    09:47:4d:0d:7f:fe:fa:13:0a:b0:d6:62:51:fa:a8:
                    85:87:93:70:b8:1a:9c:fc:a6:68:22:9e:18:b4:1b:
                    71:1b:ee:e5:a5:46:b2:62:cf:d2:ed:54:30:cf:46:
                    89:df:1d:8b:53:97:1c:2b:02:1d:20:d3:dd:32:8b:
                    1b:6d:7c:7b:66:fd:2e:f2:09:7c:18:ca:ec:56:8e:
                    63:90:ef:4d:db:6f:e2:ef:7e:fe:77:84:b9:96:eb:
                    bd:f8:1b:f7:43:f7:c7:0d:60:80:57:e1:fd:ba:7f:
                    f7:b1:1b:f7:e2:e8:f7:a4:4f:f4:3b:82:e5:5a:7a:
                    85:54:25:04:8f:ca:30:f4:4c:19:c6:95:36:a0:ee:
                    62:15:a5:e3:cb:d8:3d:58:4c:03:5e:b0:e2:90:e8:
                    0d:dd:73:36:9f:6d:04:12:e7:af:7b:48:d1:04:e2:
                    26:a2:19:3c:f7:de:98:00:0b:b0:af:54:b8:ca:d8:
                    75:76:93:1f:cd:39:8a:8e:d1:81:f8:99:ba:f2:00:
                    5f:db:c8:5e:a3:f7:2f:1f:f5:e1:b1:a0:4f:a3:3d:
                    df:d5:7e:df:4c:70:65:4a:5a:c0:37:a6:f3:27:11:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:AA:7E:EF:B4:FF:BE:4D:4C:AA:2E:74:DE:88:25:58:AF:0B:B0
            X509v3 Authority Key Identifier:
                keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:76:d8:0d:dc:7a:06:f8:8d:97:4c:9d:48:36:47:25:d8:5e:
         4a:cb:88:1b:15:b1:0f:70:21:65:57:0c:79:34:c2:fd:6a:59:
         3b:40:94:eb:fd:b8:8b:3f:19:d0:1c:9e:70:6d:d5:44:60:29:
         e2:3e:36:6d:5e:54:c8:8d:23:ee:c0:6f:83:06:23:42:eb:31:
         50:a0:ea:44:7d:ff:d9:17:36:0e:d1:d4:67:6b:78:4d:ca:48:
         b2:83:90:98:88:b3:80:73:a0:a7:24:89:c5:36:35:d7:6a:6c:
         15:8f:ab:34:78:ca:a9:6f:af:2b:61:e0:7e:76:63:73:55:df:
         37:77:ee:ec:d4:5d:bb:85:57:29:9b:b5:1b:7b:7a:fb:f5:9d:
         56:5a:50:dc:58:ad:95:13:1b:21:fc:15:41:82:37:55:aa:1b:
         8f:12:fd:8e:71:e2:8d:53:de:64:68:82:a9:be:50:49:91:ff:
         19:fa:0a:90:76:bd:e2:ac:9c:29:7a:3d:36:22:38:28:be:a5:
         25:26:c7:5d:c8:d8:61:87:23:13:56:85:ab:17:48:73:01:31:
         2d:7e:6d:f2:13:26:2f:1e:07:34:90:b9:3a:cb:41:22:5c:31:
         11:e7:b7:9c:81:07:ee:82:9b:4c:4f:d7:89:ed:4e:7e:27:a5:
         cb:9b:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:20 2026 by rpki-client