This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File:                     KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier:          t3eA3OE8vjLmSSgUt02n75i1IiqHzAHgjR0yePMn5zM=
Subject key identifier:   08:3A:3D:C4:4A:41:7D:45:81:FB:D8:CB:B2:46:C3:1D:73:7F:79:7E
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer:       /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number:          0203
Signing time:             Sat 17 Jan 2026 01:35:44 +0000
Manifest this update:     Sat 17 Jan 2026 01:35:44 +0000
Manifest next update:     Sat 24 Jan 2026 01:35:44 +0000
Files and hashes:         1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: 8yJjfEVyyjgkvgvq9mlZpLD1rylefT44UakSJT5yFcE=)
                          2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: KmbLnAg6ov5pbSc4GHHtI4bgompHpB3w8fab5eJbYog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
                          rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 01:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
        Validity
            Not Before: Jan 17 01:35:44 2026 GMT
            Not After : Jan 24 01:35:44 2026 GMT
        Subject: CN=696ae770-6528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:c2:5f:87:5c:e8:1d:f2:77:14:6b:2a:6c:
                    56:da:9a:3c:6a:77:58:ed:68:a5:fa:df:a0:c8:5b:
                    e1:99:d3:a3:cd:e4:53:bb:30:da:3f:85:e1:91:da:
                    57:3f:e7:0f:ca:8d:c4:5d:69:b7:74:af:74:1d:23:
                    d3:2d:64:3a:e4:4d:b4:21:a8:bf:b0:df:4b:1d:b4:
                    fb:ff:0e:de:b3:1f:fc:e1:31:df:3f:c3:14:aa:55:
                    b1:65:e5:88:83:f6:f0:0a:65:14:f0:62:30:20:dd:
                    09:69:b6:8f:7b:9f:97:9a:b0:1e:01:25:33:de:c4:
                    12:65:1c:25:e5:ba:21:81:51:c5:1b:a1:2b:a4:d2:
                    8d:99:5b:46:82:1f:b9:24:05:38:16:8e:6b:87:77:
                    5f:c7:62:db:bb:35:d4:6c:0c:d9:3e:77:5d:5a:0b:
                    82:c6:ce:0c:97:99:f8:38:69:d8:bc:04:ca:b2:06:
                    aa:da:f0:ea:af:6f:02:0d:b9:a8:bf:f9:19:26:19:
                    06:b7:39:a1:2f:a7:16:8e:22:43:bf:52:bd:3d:53:
                    b1:fd:79:d8:81:08:db:1a:e3:9e:60:2e:23:6b:f2:
                    b8:ea:5f:09:ae:52:5a:bc:a5:c3:04:26:95:90:ac:
                    98:48:2d:65:59:f7:2c:0e:de:09:a8:e4:5a:7f:7f:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3A:3D:C4:4A:41:7D:45:81:FB:D8:CB:B2:46:C3:1D:73:7F:79:7E
            X509v3 Authority Key Identifier:
                keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:54:eb:36:30:d0:67:de:46:8d:6c:86:4b:4a:85:d4:65:7c:
         2d:69:4d:c3:5b:81:e6:33:b3:3d:ae:84:bf:9a:75:89:d2:79:
         d4:52:40:78:ed:78:7c:7e:a7:59:a1:ca:b1:b0:4b:dc:0b:e5:
         9f:d8:aa:e7:16:0b:4c:c7:e7:56:4d:ce:1d:42:b9:7c:c5:74:
         c5:a6:2a:0d:94:1b:bc:2e:5e:42:3d:c1:ed:b5:2f:27:0e:03:
         f6:75:49:2f:6d:27:37:4e:f4:21:70:25:a2:04:3c:a9:61:95:
         9e:69:58:65:1f:9c:cb:23:50:ed:e3:26:eb:91:d9:13:83:f2:
         b3:54:5b:a7:f2:ef:ae:1d:df:e1:1b:bd:44:5a:41:0a:70:d4:
         19:88:94:ae:14:dc:e8:16:10:fd:5e:1e:b4:26:26:52:cc:be:
         4f:f3:2b:8d:58:a0:dc:81:5f:f4:39:67:57:71:dc:b3:ce:94:
         e9:56:5d:5e:45:8b:57:60:4b:35:4c:f8:6a:c2:35:78:ac:d3:
         51:2c:67:b1:b1:64:ec:0e:76:84:bb:11:a1:64:d4:4c:bd:52:
         df:73:de:a1:a7:2e:9d:bb:db:52:08:14:02:2c:d6:18:d1:5c:
         8b:bd:ed:95:b9:33:42:3e:cf:95:25:2c:e5:29:03:63:dd:42:
         99:50:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:25 2026 by rpki-client