This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft
File:                     KdzyaXujSl1MV_LtlnGNAxu8VjA.mft (raw, json)
Hash identifier:          fV6+PTittnVfPwkUYk3Y6gonmuzmIiDB5wkLkKAzPQU=
Subject key identifier:   B4:E3:31:26:5A:2F:D5:1A:1E:53:E9:50:3D:A5:B8:B1:CE:48:DA:DA
Authority key identifier: 29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30
Certificate issuer:       /CN=A91A1103/serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630
Certificate serial:       167F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft
Manifest number:          1675
Signing time:             Sat 10 Jan 2026 16:28:36 +0000
Manifest this update:     Sat 10 Jan 2026 16:28:36 +0000
Manifest next update:     Sat 17 Jan 2026 16:28:36 +0000
Files and hashes:         1: KdzyaXujSl1MV_LtlnGNAxu8VjA.crl (hash: xjzVfrLLim3n+WSjlAmwbivtF0KXDEmNguBSjcH4nfI=)
                          2: 1C85059C1EB911E88533FA4EC4F9AE02.roa (hash: RqHN2PwZe21iOjQw65O1dXW58VJkxhmOGxQkFQUXslk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl
                          rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5759 (0x167f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1103, serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630
        Validity
            Not Before: Jan 10 16:28:36 2026 GMT
            Not After : Jan 17 16:28:36 2026 GMT
        Subject: CN=69627e34-624d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:50:85:a2:a1:75:12:fa:94:3f:01:66:21:
                    ea:b3:e6:d0:d0:4e:03:42:bc:90:04:21:7c:d0:8f:
                    bb:5c:ec:93:10:5a:8b:a8:76:8c:67:64:6a:d7:38:
                    6a:9d:cb:e5:cb:cc:57:3a:95:74:a4:10:80:55:cb:
                    a0:0b:38:ef:57:39:42:b3:4b:68:4f:b4:a8:f9:08:
                    d0:aa:ac:9f:90:22:a0:4c:eb:23:c6:21:8a:53:a3:
                    b8:1b:e6:bf:00:09:90:22:f9:e5:41:ab:c5:d4:74:
                    68:ed:a5:be:55:f5:83:99:05:d4:a2:1d:f5:63:5b:
                    62:86:77:0a:f5:a4:e3:b6:2b:6c:f2:53:df:e0:3c:
                    f6:5d:a1:e5:12:c6:e4:d8:a6:4d:e5:d0:f0:c7:33:
                    63:18:8d:cb:bd:6c:fc:29:0d:d1:61:b3:67:6b:a6:
                    94:4d:aa:e9:87:8a:74:67:8d:75:ee:01:49:19:44:
                    62:ab:5a:be:8c:a6:f8:2d:7f:be:1a:20:19:12:3a:
                    e9:ca:7e:34:cb:20:61:0a:76:2c:62:ab:ab:ad:1f:
                    b4:7c:ba:30:7c:46:83:24:35:7b:d8:1d:60:3d:85:
                    09:12:f7:ca:4f:84:43:1a:d7:57:dd:3f:73:fe:7f:
                    f4:62:ff:27:3d:4f:e6:ca:4d:f1:e8:07:d1:27:aa:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E3:31:26:5A:2F:D5:1A:1E:53:E9:50:3D:A5:B8:B1:CE:48:DA:DA
            X509v3 Authority Key Identifier:
                keyid:29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:98:73:21:f9:d2:29:91:eb:ee:66:52:2b:4e:63:59:a6:
         2c:fc:44:74:54:4a:41:03:f7:94:9d:85:96:32:93:1d:34:6d:
         43:9c:95:0b:9c:8a:0d:40:5a:36:4e:49:50:42:94:df:7e:93:
         dd:04:d1:83:3f:eb:8c:42:05:45:96:5c:d0:6b:a3:9d:50:6f:
         66:eb:b9:f3:df:22:ff:4c:d6:33:9f:06:90:e1:a7:dc:72:65:
         31:fb:7a:58:98:bd:83:6c:88:f4:eb:31:d3:7a:ea:ea:f6:7f:
         41:d9:ad:6d:c3:48:a3:6a:7f:3a:65:5b:79:21:a1:05:ab:b6:
         1c:2a:7b:de:11:fe:ed:f1:75:3b:7d:00:07:9d:82:2d:bd:1a:
         9a:fc:11:be:29:c7:f3:70:be:a9:49:1c:f9:e0:c7:b0:a9:ce:
         56:b7:ba:f4:a7:6f:29:d1:2a:59:a7:ac:a7:aa:5c:c7:a8:d5:
         82:3f:00:7e:5e:c0:f6:ba:f6:77:0c:0d:20:d5:1b:30:cc:3b:
         3e:4f:b5:30:bd:d6:f0:b5:06:09:e7:04:77:02:0e:1f:68:90:
         5d:df:68:a4:f8:36:3c:1c:05:a1:24:9d:88:d3:73:ba:5f:62:
         bf:e5:19:47:1f:9b:21:c7:82:3e:78:e8:8e:68:01:a8:47:11:
         41:52:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:57:16 2026 by rpki-client