This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
File:                     kDo4Q2eaCxBdykhcPWSPPREnL7c.mft (raw, json)
Hash identifier:          WoFB+hCj4ieozGLO2DhXbx1j8usspxK9nR3eJysrkIo=
Subject key identifier:   D9:D0:0B:DA:09:2C:D9:72:69:86:CC:40:FC:4D:B2:77:CA:99:59:A4
Authority key identifier: 90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7
Certificate issuer:       /CN=A914E488/serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
Certificate serial:       02B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
Manifest number:          02B1
Signing time:             Sun 11 Jan 2026 00:36:53 +0000
Manifest this update:     Sun 11 Jan 2026 00:36:52 +0000
Manifest next update:     Sun 18 Jan 2026 00:36:52 +0000
Files and hashes:         1: kDo4Q2eaCxBdykhcPWSPPREnL7c.crl (hash: 1hRAsEG9S/wPv4TqVUNBhZJO2q7i8LmqBrVQfBcLM5Y=)
                          2: 606EB6AE240911EDBFA59C27C4F9AE02.roa (hash: NNo4SAwO23W3h7iwFhvtQVGgAhn5LQhxSRbEa+xKr7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl
                          rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 00:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E488, serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
        Validity
            Not Before: Jan 11 00:36:52 2026 GMT
            Not After : Jan 18 00:36:52 2026 GMT
        Subject: CN=6962f0a4-6c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:2e:ff:54:1c:68:bc:1c:bd:42:42:2e:9b:
                    bf:ec:fa:81:ab:75:c9:78:26:74:cd:48:4b:06:be:
                    51:e7:d0:94:29:fa:f5:7f:ff:70:2c:2d:1c:e1:c1:
                    df:94:e7:81:2b:70:04:bd:3a:6f:7a:c9:fa:31:91:
                    96:0b:e1:4f:50:d0:ee:bd:0f:97:1f:3e:6b:9f:82:
                    fa:fc:f3:f0:78:aa:27:e6:92:6d:c6:76:96:f9:18:
                    58:ab:32:33:d2:11:86:5c:1f:1d:3d:78:2b:9e:ac:
                    84:18:54:d6:43:8d:6e:c0:f4:98:9d:5b:1e:75:e6:
                    61:f3:84:85:e7:04:09:45:fc:77:1d:cf:8f:03:43:
                    cb:9a:37:7e:c4:94:aa:91:54:e5:17:0c:6f:ba:15:
                    26:6b:a0:28:98:9d:54:6c:58:61:af:08:1f:0a:4c:
                    64:c9:6b:6d:cb:ba:07:06:bd:b6:81:63:db:6a:bb:
                    17:5c:88:44:09:e6:8f:51:82:80:25:9d:ac:46:5a:
                    2d:28:3e:eb:82:46:01:fd:aa:91:d8:0f:44:ac:d0:
                    b6:df:ab:6c:18:3d:04:0c:67:9b:85:61:06:93:a5:
                    d6:71:e7:8c:02:fc:14:c1:42:5c:73:e5:c9:c4:01:
                    ca:ac:44:25:cf:50:a4:2c:47:49:0e:78:03:cf:f4:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:0B:DA:09:2C:D9:72:69:86:CC:40:FC:4D:B2:77:CA:99:59:A4
            X509v3 Authority Key Identifier:
                keyid:90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:65:2e:f9:5e:11:c0:81:de:89:6d:dc:95:9e:03:c0:80:7a:
         2c:22:cf:ae:4f:7a:1c:26:a4:3d:6f:cf:50:4a:98:2d:2f:1a:
         9d:b3:62:73:2e:b1:0a:a4:6b:24:60:a7:5b:c3:d8:48:05:14:
         41:65:d6:d9:95:ea:ac:7f:23:40:2e:cb:f2:db:c1:38:1a:59:
         cb:1d:d2:88:01:4f:66:d5:b6:a8:f7:96:0a:6a:ca:9f:ce:5c:
         ed:92:f2:a2:67:df:d0:79:e3:59:60:1a:65:fe:01:ca:03:17:
         3a:3b:6b:b4:7f:3d:20:3e:b3:14:46:a8:6f:c9:29:24:43:27:
         39:06:9d:3e:b9:36:75:30:8a:00:5b:a6:17:45:b9:12:07:e4:
         7e:e9:e4:aa:d2:25:e8:e6:3a:bd:40:64:34:0d:fe:5f:62:87:
         94:ac:38:fc:41:f0:68:29:4a:97:64:e4:f9:8c:3b:4c:93:d6:
         8b:0c:0f:90:21:63:ed:d9:c3:22:85:8e:23:71:5b:ab:b2:86:
         67:99:db:e3:36:5d:ec:74:8e:2c:7d:9f:40:d3:59:0f:3f:4b:
         ea:47:33:9c:6f:f4:d3:ec:4f:29:92:7d:56:64:33:1c:63:ec:
         58:42:fc:be:e8:ce:1f:58:fa:0c:41:14:0f:d1:fa:ef:c0:a0:
         7d:2a:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:34:04 2026 by rpki-client