This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File:                     k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier:          ihHa3PByBTZgoL6QnBHw6GL4EWavL1iXNjJjfQofG3I=
Subject key identifier:   33:29:07:A0:54:05:58:47:E4:9C:84:A8:52:C1:A9:7E:6E:06:29:BC
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer:       /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number:          24
Signing time:             Sat 17 Jan 2026 06:42:51 +0000
Manifest this update:     Sat 17 Jan 2026 06:42:51 +0000
Manifest next update:     Sat 24 Jan 2026 06:42:51 +0000
Files and hashes:         1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: BeBOr0sVZFFspfzRjDltw0v4bNMzPsFILNuiMlFAj/U=)
                          2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: WMpjwelneu59KCwsFhtoJENKBFdbJa7sC91eiRfTIfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
        Validity
            Not Before: Jan 17 06:42:51 2026 GMT
            Not After : Jan 24 06:42:51 2026 GMT
        Subject: CN=696b2f6b-2198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:b1:3d:11:1c:d3:bc:87:7d:23:95:15:3d:
                    de:0f:3d:4e:aa:cc:c9:c4:cb:03:e0:35:8a:12:03:
                    5f:13:7e:fa:09:41:e7:5e:89:82:9c:48:a4:ef:19:
                    6c:91:2c:0d:09:aa:14:a0:3b:4d:22:6d:01:4f:34:
                    3f:e1:d0:a9:ae:21:c6:c2:47:2d:9f:0c:2f:d4:11:
                    78:e8:e1:a4:b7:15:5b:51:3c:c4:69:d2:da:46:2e:
                    98:93:5b:d0:b8:a9:1a:8c:c4:05:bc:ce:56:7f:6a:
                    93:9e:90:9c:60:99:6c:ba:3a:62:a5:b5:32:f3:e9:
                    56:18:9c:43:b4:bd:e9:e1:12:d5:d6:e4:44:97:9a:
                    c6:ef:a4:6c:2e:91:53:93:a8:c1:c4:33:51:76:f4:
                    6f:03:47:21:ea:31:5e:ad:01:ec:db:1c:d1:b1:48:
                    35:22:2a:cf:ad:f5:70:b6:66:f8:52:b7:89:b1:5e:
                    26:d3:2a:66:6e:c5:57:3f:dd:dd:7b:8c:8c:06:a8:
                    1d:1a:19:c2:eb:dc:8b:f4:76:2c:ec:f0:9f:07:d7:
                    80:d2:f8:55:41:c0:c5:b6:74:55:61:f9:72:c8:a3:
                    ce:45:c1:9d:ed:1c:5e:a7:96:30:42:97:53:a1:1a:
                    b1:53:1b:8d:26:0a:7c:2b:01:8c:c9:cb:dd:bf:21:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:29:07:A0:54:05:58:47:E4:9C:84:A8:52:C1:A9:7E:6E:06:29:BC
            X509v3 Authority Key Identifier:
                keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:12:b1:22:b2:67:11:ba:53:58:2a:9e:6d:78:89:e2:92:20:
         90:c7:cd:93:0e:0f:56:8f:3f:29:e6:46:a1:9c:70:89:ff:b6:
         fd:9b:2e:d0:6a:f6:ec:67:b6:3f:a0:b3:d0:c9:67:b3:85:76:
         53:33:11:1c:03:e6:48:81:54:f3:35:76:e0:32:a8:21:77:85:
         36:33:74:c1:68:86:99:87:54:dd:de:74:29:a7:ca:20:78:77:
         fd:8f:93:d1:d7:9e:6d:88:e8:fc:c8:8c:3d:c0:ad:71:18:60:
         4e:7e:6c:f2:ec:96:a1:b6:cb:a7:ce:3d:b6:fe:4a:8e:52:66:
         c6:8d:5f:3d:3d:74:80:7f:ad:6b:96:18:6a:ba:77:8b:97:05:
         c6:89:4e:bf:1f:30:4e:ca:ea:5a:e6:2e:ec:be:25:f4:70:87:
         75:5b:e1:ca:d7:c3:72:56:ab:ca:31:9e:4e:05:90:88:e6:9d:
         35:98:f6:a8:ca:2c:06:d8:10:44:d0:bb:71:83:51:d7:09:a1:
         12:28:06:40:6f:ae:37:f7:25:a2:8c:5c:bb:86:6f:d0:0f:6b:
         39:dd:ab:d4:46:26:27:bd:00:be:8e:71:fa:80:62:18:f3:58:
         88:06:ed:90:23:19:8c:82:df:d8:b6:78:84:bf:12:77:0a:11:
         49:04:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:25 2026 by rpki-client