This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
File:                     K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json)
Hash identifier:          M4ykDZNV5SIINjQWHAh0I6xaB1MkzUXjkhr/2T2bXkU=
Subject key identifier:   E4:76:39:99:A5:CB:4E:5A:2C:5C:37:19:26:78:34:B6:08:68:13:40
Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
Certificate issuer:       /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
Certificate serial:       083F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
Manifest number:          0832
Signing time:             Sat 10 Jan 2026 20:15:13 +0000
Manifest this update:     Sat 10 Jan 2026 20:15:13 +0000
Manifest next update:     Sat 17 Jan 2026 20:15:13 +0000
Files and hashes:         1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: XS/FaayEDLSPYnKmOGup1ol4X14tT5KrGUATCYhMBqA=)
                          2: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (hash: RLRjH/J0+me+Vx3yyTHl66wKq7FxNXMRxmdR2kAu53U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 20:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
        Validity
            Not Before: Jan 10 20:15:13 2026 GMT
            Not After : Jan 17 20:15:13 2026 GMT
        Subject: CN=6962b351-0a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:e6:20:c0:5e:a3:70:1a:0a:61:13:32:50:
                    f8:ea:db:30:81:5f:99:9d:ae:b8:3a:03:58:af:09:
                    b7:9c:89:2c:ee:df:28:f1:b2:02:dc:7b:3c:ba:46:
                    b5:68:61:8d:b9:dd:c7:44:6d:9c:86:c5:f0:6e:00:
                    c3:98:13:43:1e:49:4a:e2:6a:77:28:24:19:89:62:
                    ff:90:d4:b9:3d:ba:45:c8:59:3e:cb:7d:04:3f:c7:
                    58:8e:a5:40:9f:8c:f6:ee:d8:22:14:81:91:da:0d:
                    d8:7c:58:99:60:58:1c:e9:11:2d:87:c4:38:89:7a:
                    e5:37:1a:9a:39:f9:43:c4:90:f8:ff:a8:06:be:6f:
                    07:ea:62:5a:21:30:38:0e:fc:8d:b9:31:1f:7d:a0:
                    ed:89:4e:57:6d:0e:68:e0:2d:2c:02:3f:fc:4d:8d:
                    94:c1:ac:9c:5b:67:1b:86:ab:ff:e6:f8:fe:9e:74:
                    9e:1c:6f:96:ca:be:69:f8:08:a9:7b:cb:35:17:0d:
                    16:1f:81:2d:1d:dd:44:25:0d:6c:60:60:26:7c:00:
                    c9:6b:5b:34:11:f6:ef:9d:e0:0d:86:ef:ff:4d:f5:
                    91:85:6d:3d:2f:2d:94:92:d4:c1:12:e8:28:d0:fc:
                    e5:f9:14:5a:44:03:4a:cc:10:f1:5e:37:4c:c1:dc:
                    80:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:76:39:99:A5:CB:4E:5A:2C:5C:37:19:26:78:34:B6:08:68:13:40
            X509v3 Authority Key Identifier:
                keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:a0:93:fb:56:f7:f5:8f:7a:95:6f:6c:a8:8d:eb:f2:c1:
         7a:7a:95:0d:15:26:81:fc:e9:f9:78:3f:bf:aa:5c:62:6b:8e:
         c3:9b:99:8a:b7:26:72:0f:e5:fd:41:57:36:2a:c4:05:b2:ff:
         49:ab:34:4c:72:69:ea:05:1d:44:5f:86:8a:c2:12:f5:7a:af:
         37:25:cf:d7:95:7d:06:24:97:70:82:32:cd:fe:a6:b3:45:b5:
         76:70:c8:0b:06:72:2a:02:5d:9b:a7:b4:5a:b4:c0:ac:15:9f:
         d3:11:7c:ee:73:ae:2c:06:b1:80:6e:f0:13:bc:81:9f:89:f3:
         06:f4:5e:e5:96:72:e3:cf:06:54:31:5f:ce:90:d3:89:01:e7:
         e2:9c:17:28:72:4d:44:3d:6c:f3:44:b3:5d:b4:aa:4d:c7:81:
         5c:9f:e6:51:c2:1a:a0:f1:5e:21:c5:85:9a:41:0b:8a:9b:36:
         eb:d3:cb:0c:ed:3d:55:a5:4e:4d:8e:dc:ea:7a:d4:63:03:d6:
         f2:54:52:4e:01:1c:1f:43:33:ab:9b:1a:e2:1e:58:60:13:5c:
         37:75:41:71:60:6a:fa:ec:2f:3f:68:ee:be:77:ff:0f:38:07:
         cb:a2:21:5d:b2:6f:9d:5d:e6:1d:7a:c4:ab:d0:94:a3:a9:22:
         89:44:11:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2
NTM4MjM0OTIwHhcNMjYwMTEwMjAxNTEzWhcNMjYwMTE3MjAxNTEzWjAYMRYwFAYD
VQQDDA02OTYyYjM1MS0wYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArV/mIMBeo3AaCmETMlD46tswgV+Zna64OgNYrwm3nIks7t8o8bIC3Hs8uka1
aGGNud3HRG2chsXwbgDDmBNDHklK4mp3KCQZiWL/kNS5PbpFyFk+y30EP8dYjqVA
n4z27tgiFIGR2g3YfFiZYFgc6REth8Q4iXrlNxqaOflDxJD4/6gGvm8H6mJaITA4
DvyNuTEffaDtiU5XbQ5o4C0sAj/8TY2UwaycW2cbhqv/5vj+nnSeHG+Wyr5p+Aip
e8s1Fw0WH4EtHd1EJQ1sYGAmfADJa1s0EfbvneANhu//TfWRhW09Ly2UktTBEugo
0Pzl+RRaRANKzBDxXjdMwdyACQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOR2OZml
y05aLFw3GSZ4NLYIaBNAMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD
Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ
Yy16dWRkWjFnMVJsT0NOSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvLqCT+1b39Y96lW9sqI3r8sF6epUNFSaB/On5eD+/qlxia47Dm5mK
tyZyD+X9QVc2KsQFsv9JqzRMcmnqBR1EX4aKwhL1eq83Jc/XlX0GJJdwgjLN/qaz
RbV2cMgLBnIqAl2bp7RatMCsFZ/TEXzuc64sBrGAbvATvIGfifMG9F7llnLjzwZU
MV/OkNOJAefinBcock1EPWzzRLNdtKpNx4Fcn+ZRwhqg8V4hxYWaQQuKmzbr08sM
7T1VpU5NjtzqetRjA9byVFJOARwfQzOrmxriHlhgE1w3dUFxYGr67C8/aO6+d/8P
OAfLoiFdsm+dXeYdesSr0JSjqSKJRBGL
-----END CERTIFICATE-----
Generated at Sun Jan 11 07:38:06 2026 by rpki-client