This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File:                     Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier:          8HSCOeN9HS7ly7PXE7EfREDLAdm0SkzhlfugyVq1/vw=
Subject key identifier:   2D:86:C0:CE:A5:91:5F:1E:16:52:7E:27:17:4A:6F:15:9A:E1:61:68
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer:       /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number:          CC
Signing time:             Sat 17 Jan 2026 04:56:18 +0000
Manifest this update:     Sat 17 Jan 2026 04:56:18 +0000
Manifest next update:     Sat 24 Jan 2026 04:56:18 +0000
Files and hashes:         1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: 2TIyg/EVSXw8ylA+07zTJzEW8YenWz6p99qVcDa2OK8=)
                          2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: jqm9AvgV4FxQG5X3y3xKe8muOycM02nLSK2i0VaGmmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
        Validity
            Not Before: Jan 17 04:56:18 2026 GMT
            Not After : Jan 24 04:56:18 2026 GMT
        Subject: CN=696b1672-b30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:86:ef:58:73:5c:30:fe:a9:98:fe:c8:4b:
                    4d:df:ba:90:f2:24:17:a0:a0:4c:ca:87:18:ae:a1:
                    dd:7e:09:1b:5d:bd:97:b0:4c:5f:c1:d7:9b:c6:9f:
                    54:3b:08:80:57:2e:e5:36:de:e5:6a:03:9f:e8:e0:
                    cc:bc:52:dd:34:3b:21:8f:03:fa:dc:11:f0:7f:07:
                    9a:42:3d:79:30:00:18:62:d9:a5:ec:d7:69:01:5e:
                    4f:39:df:6a:3e:00:20:e7:b2:66:60:d6:9d:f4:4c:
                    3b:c0:cf:f9:8e:b3:ff:c6:ce:f1:ff:df:52:fc:1b:
                    40:86:6d:44:71:97:e4:e7:bf:c6:33:55:ac:ee:70:
                    fd:b9:fe:7e:48:7a:0b:29:47:0e:a3:ff:80:b9:ab:
                    81:87:61:56:d3:05:20:d8:bb:74:56:2d:04:76:a3:
                    7d:b4:22:89:c0:c4:af:73:56:ac:d8:f0:39:86:2d:
                    20:67:4e:2b:2a:76:c6:e6:d2:8f:aa:0b:5d:cc:c5:
                    d8:3d:71:bd:63:65:1c:4f:f6:4d:9f:0e:b2:ba:43:
                    cf:df:a3:11:3d:81:40:bf:3a:2c:04:23:17:16:97:
                    4e:15:9f:ae:39:ce:06:13:c2:9c:1a:ee:1c:0b:6a:
                    f5:d0:6c:e5:ba:94:00:2a:a5:4c:c2:d1:91:7f:f2:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:86:C0:CE:A5:91:5F:1E:16:52:7E:27:17:4A:6F:15:9A:E1:61:68
            X509v3 Authority Key Identifier:
                keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:27:87:4b:dc:fe:0e:92:f3:00:b6:86:79:aa:a2:46:04:
         0e:3e:c5:ee:81:4c:45:43:b3:67:e1:b3:af:68:6b:4a:e9:e8:
         ed:94:1b:38:c8:8b:0e:2a:2c:33:bb:24:5e:9c:d6:7d:a5:2e:
         d8:d3:76:b8:79:fd:b5:66:80:42:66:8e:8b:b2:0b:aa:ed:22:
         bf:ed:3e:49:f1:bb:70:ad:64:d2:f9:06:dc:54:4c:ff:7a:cd:
         de:f0:74:4e:5b:fe:72:b8:85:12:ae:59:11:a7:19:ea:eb:45:
         17:9e:33:3b:f2:69:77:1b:3b:f9:c9:ab:a4:f9:19:6a:e3:e1:
         99:ed:75:79:1e:c6:7b:7c:bc:4a:43:16:e5:e5:14:25:4f:ec:
         85:cb:9a:3f:19:ab:2e:f4:bb:ae:29:3c:4e:ed:26:8f:d8:81:
         3b:ad:bd:6c:bc:6d:08:dd:6f:da:96:15:42:70:3f:b4:0e:c4:
         d8:2c:be:e5:8a:d3:57:16:38:40:d4:20:a3:08:89:58:a5:d3:
         ff:b4:3b:c7:2c:d0:8c:f1:a5:ed:80:4e:c2:ad:8f:65:f0:bb:
         51:cf:e7:35:8e:10:00:70:f1:ca:63:7e:3c:b1:3a:ac:9a:a2:
         3b:be:c2:de:39:9e:fe:b1:4f:75:2b:91:cd:d5:61:fd:0e:22:
         7c:0f:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:56 2026 by rpki-client