This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
File:                     kQglePceS4YFfcPrBwP-ZYnmaJE.mft (raw, json)
Hash identifier:          T3iop5FxKPUDpiMDGFdak8WO+p0z16lt+mARCvJbPuc=
Subject key identifier:   5A:E5:49:5F:4D:64:AD:07:78:49:4A:85:0D:21:EF:27:26:1C:CB:9D
Authority key identifier: 91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
Certificate issuer:       /CN=A91BC039/serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
Manifest number:          E0
Signing time:             Fri 16 Jan 2026 22:40:27 +0000
Manifest this update:     Fri 16 Jan 2026 22:40:27 +0000
Manifest next update:     Fri 23 Jan 2026 22:40:27 +0000
Files and hashes:         1: kQglePceS4YFfcPrBwP-ZYnmaJE.crl (hash: oOXHQp2qy6g3PL7Tn4JeUr0uAmtVLddLnGiBzA3S/uc=)
                          2: 1167F6B2A18211EFA7475221C4F9AE02.roa (hash: Ifm3IRESO4IiNyy88ffJnkP8xwASc9gofSuSR7nlwHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 22:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC039, serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
        Validity
            Not Before: Jan 16 22:40:27 2026 GMT
            Not After : Jan 23 22:40:27 2026 GMT
        Subject: CN=696abe5b-ab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:9b:6f:b4:72:58:b7:17:91:a7:43:cb:74:
                    93:42:17:28:2f:f5:76:48:0e:d7:a1:34:38:ab:3a:
                    bc:d1:e0:8b:cd:98:84:a7:43:2a:1b:a4:52:c4:9b:
                    bb:f0:e9:22:2a:59:65:78:ec:72:70:4b:50:40:e5:
                    bd:92:b6:be:3c:c1:38:68:eb:9a:3c:b1:f8:1a:b7:
                    be:1e:71:81:88:c9:37:0f:a8:b6:68:b9:e4:fc:b4:
                    38:59:46:40:b1:d5:f4:e9:e9:67:97:f8:b7:cb:d5:
                    94:41:5c:95:6c:74:84:83:61:76:c5:3e:52:30:91:
                    91:78:d2:ec:75:79:ac:4c:cf:33:8c:6c:84:e2:30:
                    9e:0a:fb:db:89:99:cd:39:76:de:dd:c7:56:cb:bc:
                    79:e7:31:b1:a5:d6:20:6b:f0:74:04:38:a5:d1:27:
                    e1:e4:5e:41:83:73:8d:ff:af:ac:5c:5f:90:e8:89:
                    e0:cb:a1:d7:69:6f:d2:2d:9d:25:7e:e3:d8:8e:76:
                    6c:c0:12:02:17:67:38:44:9b:c3:08:4c:35:e2:d4:
                    70:25:64:2c:61:a5:13:b4:28:ec:9f:7f:98:50:59:
                    09:aa:42:ba:87:18:09:16:53:dd:fb:a2:8a:3e:92:
                    16:25:f1:06:62:d3:1d:83:99:6a:bf:2b:5e:55:5a:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E5:49:5F:4D:64:AD:07:78:49:4A:85:0D:21:EF:27:26:1C:CB:9D
            X509v3 Authority Key Identifier:
                keyid:91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f0:57:c3:5f:9e:07:5d:a3:91:c5:8a:7b:d8:49:15:c9:1d:
         79:6c:1a:69:05:7e:f0:c4:82:0c:4a:79:fc:38:c4:68:35:9e:
         6c:6a:e0:b4:ca:97:8b:05:e7:08:d3:01:24:e1:fd:cd:a8:2d:
         c7:35:d1:18:34:6b:ac:65:d5:9e:7b:49:a1:74:e0:6e:4f:78:
         1a:fb:79:3f:86:f9:75:94:37:46:e5:29:3d:b7:d4:ff:83:98:
         06:e1:15:1f:e7:a0:d0:c3:0b:f9:5f:84:25:e4:c3:97:b1:a5:
         c7:eb:36:21:9a:39:86:a1:82:25:e6:92:92:c0:26:9d:2f:da:
         6c:dc:b5:e8:0c:a5:36:90:ea:a5:d7:fe:47:74:b4:8a:49:0f:
         61:7d:e2:df:3e:b2:d7:48:e1:22:ad:b2:0c:7c:2d:f5:fd:61:
         92:d4:7e:c1:1e:ba:93:3b:cd:7a:7d:20:76:8e:9a:46:19:93:
         38:71:2f:23:d1:2d:d1:16:12:4e:ac:60:26:ff:f9:0b:2e:a1:
         d5:4e:66:a6:a3:fb:e5:60:c3:8e:3e:83:0d:28:2a:ca:23:e3:
         12:bc:da:0d:2e:9a:85:26:e1:08:e6:54:1e:b8:38:b0:1f:dd:
         fb:06:c8:a4:71:ec:bd:8b:28:60:cb:ba:42:df:c2:63:af:3c:
         0f:1f:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:03:09 2026 by rpki-client