This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File:                     kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier:          dPoGAGOJrRUzZ2/gW5Tm2Vgtim+WHPMsDPAUtMPeXkk=
Subject key identifier:   C8:4D:22:32:12:F4:0B:14:80:ED:B0:33:09:6D:69:D3:EF:E3:95:3E
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer:       /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial:       088E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number:          0888
Signing time:             Thu 08 Jan 2026 20:00:30 +0000
Manifest this update:     Thu 08 Jan 2026 20:00:30 +0000
Manifest next update:     Thu 15 Jan 2026 20:00:30 +0000
Files and hashes:         1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: uLxmmc8cVsBxS7/E1xx/axtH9oBYFhDzEjxkPN30j3w=)
                          2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
                          rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
        Validity
            Not Before: Jan  8 20:00:30 2026 GMT
            Not After : Jan 15 20:00:30 2026 GMT
        Subject: CN=69600cde-e173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:0d:28:c4:b7:e3:3f:f8:af:76:d2:ac:b5:
                    12:78:0b:c5:d8:28:69:cc:a6:3d:02:c6:bf:00:be:
                    ba:e2:26:e6:72:2a:61:e9:6d:67:8b:0d:10:7d:c8:
                    cc:53:86:58:a5:75:ac:36:fa:ca:51:00:9e:f7:75:
                    dc:f8:09:57:af:11:f7:bd:cc:44:1b:85:39:3f:be:
                    82:3f:47:fb:0e:9e:56:81:ef:8d:f0:0c:b0:c9:78:
                    d2:c4:31:a8:54:cd:d5:30:cd:5a:90:6b:62:08:d1:
                    d8:e5:de:fc:67:e5:37:61:d7:21:aa:df:b9:23:6a:
                    e6:e3:fb:75:dc:24:ca:a3:00:45:8c:54:16:00:51:
                    73:ae:42:71:3a:13:b2:b7:ed:71:e7:d0:cf:51:f1:
                    cf:e9:b2:f3:f6:d7:6e:bf:7c:e6:8c:3d:d7:2c:f0:
                    6d:a9:68:70:70:dd:f7:e8:56:26:0d:39:48:5c:81:
                    de:a6:3d:78:ac:a5:d5:0f:b4:15:23:56:ab:d7:24:
                    f3:79:ce:d1:18:7b:1a:3f:ca:a3:0e:95:83:ac:57:
                    6a:1f:c5:ff:ca:ef:5f:6d:99:0f:dd:6b:86:f0:27:
                    ae:1f:cc:35:03:33:2f:10:4a:48:54:c4:72:82:84:
                    4f:37:1b:80:b8:4e:d7:8c:c0:65:88:01:30:81:f0:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:22:32:12:F4:0B:14:80:ED:B0:33:09:6D:69:D3:EF:E3:95:3E
            X509v3 Authority Key Identifier:
                keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1f:89:c9:19:47:a2:5d:df:6b:1d:d7:5e:bf:79:2a:1b:ab:
         04:b5:fc:e0:16:ed:b3:43:41:99:0a:be:a5:5c:01:53:67:5a:
         9d:b3:36:35:26:9e:59:9f:b9:ee:44:e0:41:69:8c:3e:d8:98:
         37:e0:c8:e9:d1:d4:f0:cf:c0:4b:71:08:0c:3c:c8:3e:36:42:
         ed:2c:c3:ad:0c:23:2b:96:02:af:94:4e:5c:7b:ff:db:be:f0:
         a6:cf:3c:ac:c4:1a:1f:46:db:2f:b7:9f:c8:c3:02:3f:20:bd:
         04:4e:30:e6:d8:9e:71:0f:5f:00:46:0f:7d:df:fd:9d:f8:7a:
         ab:e0:93:00:c3:39:79:93:da:69:2e:fa:47:f2:46:7d:d8:7e:
         fb:36:38:44:72:d1:21:a5:bb:4b:80:b3:dc:0b:40:2a:8d:f2:
         6f:af:60:1c:77:0e:3a:16:5c:ad:c6:c6:db:f6:b2:d7:3b:27:
         3b:9b:bd:53:99:3d:3f:0c:5c:f0:b3:05:68:15:f3:b0:0a:e6:
         0e:a9:a6:06:ae:19:7b:94:03:42:ba:73:d5:f3:a9:78:18:3c:
         23:f7:75:52:fb:19:53:f1:3d:d1:eb:7c:ac:b3:d2:e8:dc:47:
         cb:60:ec:bb:0f:f3:53:25:9b:fc:07:f9:d8:22:b9:30:99:b2:
         a9:13:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 15:57:55 2026 by rpki-client