This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File:                     k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier:          OQDcOBwjJlZtbNCQtrLnsubYlLhmk8coT4GlSwEsheU=
Subject key identifier:   00:BB:26:F1:90:16:84:51:DB:3F:A0:84:F0:DF:C0:77:63:E7:43:63
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer:       /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number:          15
Signing time:             Fri 19 Dec 2025 06:47:28 +0000
Manifest this update:     Fri 19 Dec 2025 06:47:27 +0000
Manifest next update:     Fri 26 Dec 2025 06:47:27 +0000
Files and hashes:         1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: yl6boKEOsf+qmn3OJXiPgf+nbX7iGi6W/Jz/2LNhHtw=)
                          2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: WMpjwelneu59KCwsFhtoJENKBFdbJa7sC91eiRfTIfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
        Validity
            Not Before: Dec 19 06:47:27 2025 GMT
            Not After : Dec 26 06:47:27 2025 GMT
        Subject: CN=6944f4ff-35d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:6a:10:6d:8c:28:4e:c4:5c:33:24:b3:d3:
                    f0:bc:f3:18:31:f6:1c:38:91:3b:8e:ae:8c:ec:19:
                    7d:a7:b2:6e:25:fe:ef:0e:a4:59:07:5d:99:f8:ea:
                    48:2b:c0:56:f1:4d:2b:be:5f:33:20:c4:1b:e9:22:
                    7e:1d:f3:be:e3:b4:79:9e:b4:1f:11:33:a1:c2:59:
                    c4:d8:30:69:3a:70:50:4d:30:c2:e2:c4:15:be:94:
                    9e:18:f3:4e:15:2d:3d:11:5e:c3:73:ee:7a:f7:80:
                    29:4d:7b:f7:ca:7b:b9:9f:36:ff:d9:25:95:dd:5c:
                    56:a7:98:96:e2:9e:93:6e:33:11:e0:41:95:4d:7b:
                    9a:ec:24:b9:d1:31:f2:a2:54:a1:1f:4c:cd:cb:d6:
                    86:4b:89:55:46:c1:4f:23:57:bf:10:3a:f4:8e:5d:
                    45:03:0e:5d:86:83:2b:08:11:e2:95:42:51:8f:b3:
                    fb:ba:78:23:c0:97:d8:a4:ee:09:74:33:fa:9d:52:
                    67:1c:5c:95:ac:21:1f:97:5a:dc:78:7e:75:b8:22:
                    55:61:db:fe:b8:e3:03:f3:b2:52:43:1c:72:a6:f9:
                    ba:95:4c:d1:0e:ea:2f:61:9f:6a:eb:c8:80:27:5e:
                    46:84:dd:5d:f4:a9:60:34:b9:af:9b:07:2a:35:e8:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BB:26:F1:90:16:84:51:DB:3F:A0:84:F0:DF:C0:77:63:E7:43:63
            X509v3 Authority Key Identifier:
                keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ba:bf:ee:ad:06:b1:ad:63:63:5f:f5:2f:d2:23:77:38:2a:
         f2:eb:cd:1f:78:23:5b:b5:1c:db:f3:a3:b0:ea:89:45:53:0d:
         da:67:ef:de:2b:49:81:76:17:48:a0:92:30:5d:82:96:80:e0:
         73:15:73:fe:96:d1:a9:0a:91:ae:e7:ab:69:86:91:e9:13:2c:
         20:97:30:aa:05:8c:b6:17:ec:10:b8:6e:2c:af:a1:30:e2:37:
         43:07:73:05:d2:77:ea:22:48:12:83:ef:75:76:80:23:56:97:
         c5:b0:96:8d:26:c6:4f:12:b6:ce:f8:bd:13:3e:02:68:49:79:
         b7:ad:da:91:37:6e:89:ae:2c:c7:65:89:be:38:52:cc:31:36:
         f2:a9:0f:ba:01:eb:0f:78:42:05:5d:54:46:42:e7:a2:b6:33:
         d5:fa:67:d4:29:7e:df:d0:37:fe:8c:e1:f8:9c:e8:85:f7:8b:
         82:21:1b:65:e6:b7:54:44:d6:a3:d3:2e:4e:a3:d2:65:2d:d8:
         53:d1:b0:6e:17:e6:5c:3d:f5:f9:b6:2a:ac:b0:13:cd:89:8d:
         cd:86:00:31:4e:8d:d1:9b:10:94:4a:c7:8e:23:a9:c9:6f:77:
         a3:a3:c9:6e:a2:a4:ee:8d:c3:8e:25:eb:6a:ff:e3:aa:dc:4b:
         98:d5:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:38:49 2025 by rpki-client