This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
File:                     kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json)
Hash identifier:          UUqdt7slCRZrfXS0X+y9jsHQeowXg0IrbWEwPC5daRw=
Subject key identifier:   E7:51:9A:B9:5A:CC:ED:75:9A:C8:BE:25:18:F3:F0:39:F8:B0:58:A4
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Certificate issuer:       /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial:       04AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
Manifest number:          04A8
Signing time:             Sat 10 Jan 2026 23:12:28 +0000
Manifest this update:     Sat 10 Jan 2026 23:12:28 +0000
Manifest next update:     Sat 17 Jan 2026 23:12:28 +0000
Files and hashes:         1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: u8WiujOF1LZT7X9pcDESuXKrHUhUBrJQOu7xOkiLO7Q=)
                          2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: En51wQVhPTzRoGx7r1Oh3OXcO/1NON/tJNYvVfLMz3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 23:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198 (0x4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
        Validity
            Not Before: Jan 10 23:12:28 2026 GMT
            Not After : Jan 17 23:12:28 2026 GMT
        Subject: CN=6962dcdc-5394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:94:3a:d6:24:f4:83:29:46:78:4e:8c:b2:
                    58:25:07:67:87:c5:a2:84:07:f2:8a:2a:ca:4d:61:
                    4f:35:17:55:b0:9d:20:e7:80:f9:1a:d7:9d:c3:57:
                    fc:60:8f:87:2d:23:1d:65:b5:9c:93:d0:92:03:91:
                    a0:0c:dd:49:8f:69:ad:e8:d6:44:86:ab:e4:a7:4d:
                    2d:55:13:7b:dd:9c:05:37:14:7d:e1:99:af:ef:0e:
                    12:ed:7c:6d:9d:26:57:65:62:f6:bf:32:d6:e4:31:
                    71:65:7a:5e:2e:98:c0:3e:fa:c7:97:76:41:d4:03:
                    f5:19:c4:c9:99:fb:15:0b:25:38:a1:a4:a6:b6:15:
                    cc:95:35:8a:db:d8:5c:7e:14:85:24:4f:6f:2b:3e:
                    54:55:c2:bf:5c:d6:eb:9d:92:68:87:5d:8e:07:83:
                    9b:97:7d:5a:77:3f:1f:04:27:a3:44:73:82:13:5e:
                    82:93:53:3e:d7:c6:1c:a8:b7:f8:5a:b0:d4:3c:bc:
                    9a:92:2d:77:f8:df:23:57:ba:53:62:4a:99:63:49:
                    d7:cf:4d:c4:36:52:a0:2b:6c:7e:11:b9:4e:8b:d5:
                    f2:0d:81:90:a0:09:e7:f4:ba:f5:0e:97:ba:94:7d:
                    88:e0:1a:19:eb:77:a1:36:91:d7:f9:5b:38:6d:fa:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:9A:B9:5A:CC:ED:75:9A:C8:BE:25:18:F3:F0:39:F8:B0:58:A4
            X509v3 Authority Key Identifier:
                keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:fd:1c:e3:f8:0e:fa:d3:08:52:2e:5c:14:a6:48:4f:bb:
         2b:35:03:cf:3d:9c:be:a9:df:f3:61:ca:07:4d:a8:5d:1a:ac:
         76:64:7c:18:85:30:2a:a9:2f:01:00:c7:9e:bc:9f:66:51:62:
         d6:ae:11:8b:8e:7f:ef:57:5f:85:fc:b7:c5:73:b3:63:bc:b1:
         1a:7e:40:d3:c8:53:d9:0a:29:f2:12:33:14:f3:8e:2d:8e:5d:
         6f:9d:4c:d9:74:80:fe:73:4d:dd:37:0d:9a:9f:36:d3:61:ae:
         cd:ee:ca:56:20:56:db:12:aa:f4:36:9d:dd:f0:8d:62:8a:e3:
         02:29:c3:ae:82:87:36:50:de:3b:56:7e:6a:bf:01:b9:a6:75:
         23:48:35:55:bc:74:bc:cd:55:82:b8:ce:a6:1c:65:eb:17:d7:
         c7:48:b1:ed:6b:55:58:a6:08:01:e2:b6:0a:26:8c:4f:31:40:
         39:9e:22:6c:43:3f:07:44:09:24:af:ac:ae:cd:0c:db:46:96:
         95:3c:96:26:37:0a:48:6a:75:cd:c3:b3:38:3e:fb:7b:9b:54:
         0f:a2:10:25:f7:1c:93:42:8b:90:af:26:d5:4b:a7:a7:43:8e:
         93:f6:cd:e0:28:aa:90:b9:93:27:e5:39:3e:b7:bc:b5:8f:4c:
         11:ba:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:57:30 2026 by rpki-client