This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          HKz9IZQlkB4bGBMHVy/ey7dpngc/kPFruJdo1aBJlAY=
Subject key identifier:   EA:23:A9:19:9E:0E:9C:7B:C2:22:64:8C:D7:6F:60:CA:27:9B:7E:D6
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       0657
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          064F
Signing time:             Sat 10 Jan 2026 21:56:31 +0000
Manifest this update:     Sat 10 Jan 2026 21:56:30 +0000
Manifest next update:     Sat 17 Jan 2026 21:56:30 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: yWpsx5PT1NyzzePVexPOUNMbzWsgDT+rMqA6XRs11ZY=)
                          2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: yTRObH5HORzIjpQc8hjpzukLHQFJTBfO9ossVqi4KUU=)
                          3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: 7ouwwfgk28NyLw1cYRcaWcwCb0VnFZR8rpTez7FwTos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 21:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623 (0x657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: Jan 10 21:56:30 2026 GMT
            Not After : Jan 17 21:56:30 2026 GMT
        Subject: CN=6962cb0f-1a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:29:d0:f3:a1:b8:6d:94:d7:52:00:85:ab:
                    f7:cf:13:a4:bb:90:fe:11:63:90:e1:21:ab:02:ec:
                    13:c6:ca:d6:d2:bc:c9:05:cf:03:92:ff:85:c3:db:
                    9e:32:a6:b8:6c:91:cd:63:67:ba:41:1f:bd:fd:e0:
                    a1:49:39:73:20:f7:34:7c:0f:75:87:a8:d7:a4:3e:
                    17:c3:52:69:7f:9b:9a:e3:f0:bf:70:ac:9d:24:90:
                    18:c9:76:d8:4e:2a:d2:ff:8b:90:07:48:2f:38:c4:
                    00:a1:2e:67:3e:dc:4f:3d:02:c6:f8:0f:0a:8c:e0:
                    cd:0d:5a:c5:7e:5e:67:2c:7d:45:4c:b3:c3:ec:2f:
                    d5:30:3a:a6:ea:47:ed:23:3c:4c:6c:be:1f:99:04:
                    a3:1f:a1:e2:09:ef:a7:83:88:97:c2:9e:77:13:cf:
                    38:23:bf:83:1a:6c:46:b0:70:c9:8a:cd:da:1e:74:
                    91:29:7b:31:c6:98:d8:b1:98:ca:16:d8:bd:46:a8:
                    c6:64:27:8a:04:46:7f:5d:22:64:6c:df:3b:8d:a9:
                    c7:88:93:63:bd:53:7b:08:b1:95:6e:e5:65:a1:88:
                    c3:ac:75:84:0e:a0:97:05:64:e9:10:e4:63:7d:04:
                    3f:7d:50:4a:15:5c:7f:7f:58:a7:34:f9:21:2b:55:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:A9:19:9E:0E:9C:7B:C2:22:64:8C:D7:6F:60:CA:27:9B:7E:D6
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:f0:71:a0:89:e0:65:f5:de:9d:47:c4:50:48:07:97:c6:
         3b:46:96:b2:a3:c6:fe:dc:a4:ac:4e:e7:30:5c:7e:30:14:16:
         9b:07:79:fe:cf:1c:b5:5f:c8:6f:e5:d7:08:8a:dd:40:86:e9:
         c0:d4:f5:1e:66:08:6c:d8:35:e8:ed:5d:e5:39:3c:90:eb:c3:
         52:9d:97:93:ef:4e:93:9d:37:2d:7c:e6:98:a2:64:31:10:ac:
         4d:88:4d:62:0b:49:16:5e:d7:a9:a7:74:50:31:94:3a:a3:74:
         44:ed:c6:a9:ee:96:b4:e1:00:93:38:e4:06:43:ba:f1:cb:84:
         ae:8f:31:86:97:ed:58:63:11:96:3e:38:3a:1a:84:99:82:82:
         3c:d5:5a:4d:53:5b:93:9f:94:56:cf:e5:39:5b:40:3c:29:08:
         a3:e0:54:82:cb:de:74:00:9c:2c:6b:73:36:ae:38:26:90:d0:
         44:5d:d0:14:f8:1e:95:2a:2d:67:a1:90:cf:86:43:88:2e:4b:
         29:5b:bd:02:83:d9:9d:fc:66:a2:11:84:e7:20:1b:00:44:15:
         6a:a9:2f:2c:5d:2d:37:82:40:42:a7:46:af:3c:d9:6b:3a:38:
         e4:5a:25:51:82:5f:f1:82:c8:0d:e0:d0:a1:d4:41:7f:6a:66:
         a7:7e:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:57:46 2026 by rpki-client