This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
File:                     CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json)
Hash identifier:          Xhwg1OrlVTlHSj5xT6j+GWUucsi2P+RokIu0EpPjCmY=
Subject key identifier:   FD:53:5D:97:81:1D:2C:96:58:D7:15:1D:A5:88:5A:8F:42:35:A1:C2
Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
Certificate issuer:       /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
Manifest number:          91
Signing time:             Wed 31 Dec 2025 05:32:42 +0000
Manifest this update:     Wed 31 Dec 2025 05:32:41 +0000
Manifest next update:     Wed 07 Jan 2026 05:32:41 +0000
Files and hashes:         1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: VhdiWrau1j5hXH2RV1XPsfBOPDK1NP2+LOkjqBVUOP8=)
                          2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: lfdyi++bWKTqNq0AntGKkt45cnrhAjp+IKIVrz1KfzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 05:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
        Validity
            Not Before: Dec 31 05:32:41 2025 GMT
            Not After : Jan  7 05:32:41 2026 GMT
        Subject: CN=6954b57a-c70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:3f:04:11:01:bd:7c:99:0e:ee:9b:39:17:
                    6a:73:89:2f:5c:6d:d0:f0:13:c3:d0:bd:a9:ee:20:
                    1c:55:41:ca:61:fe:b9:f6:6c:49:65:e9:a0:55:38:
                    b8:5a:99:55:ca:f0:54:be:ee:c9:6b:e8:35:bc:ba:
                    75:c1:72:f8:77:0f:0f:88:78:50:46:69:18:5b:9e:
                    4e:fa:20:31:c4:81:b0:9e:a9:af:2e:52:0c:c6:d0:
                    a9:29:b7:30:a0:0e:ff:62:ad:8c:e0:5e:7b:44:79:
                    a8:56:d9:34:c7:49:3b:e6:98:30:e2:fb:f2:fd:ad:
                    d5:9d:c7:a1:35:bb:d9:c6:1d:76:d2:be:8d:1d:a8:
                    24:46:47:e7:be:aa:97:8e:b3:13:8f:82:be:bd:7e:
                    e0:28:a3:68:da:ef:35:e9:08:a5:5e:62:8d:86:b1:
                    c6:fb:2d:b4:a1:00:98:38:65:f1:a9:a2:03:93:d8:
                    f1:09:43:e1:dd:80:45:f3:ea:7b:9c:19:3d:7a:7b:
                    e7:b1:eb:14:ad:07:d0:1f:81:a1:58:66:d7:d6:e0:
                    07:96:fe:72:c9:f4:00:71:1e:ac:ef:d6:db:7e:38:
                    b3:e9:78:b1:1c:98:72:98:89:04:a2:21:32:a5:e4:
                    3f:21:2d:00:fc:46:79:ff:f7:ab:67:35:88:d1:27:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:53:5D:97:81:1D:2C:96:58:D7:15:1D:A5:88:5A:8F:42:35:A1:C2
            X509v3 Authority Key Identifier:
                keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6b:08:31:4c:26:cc:0a:3b:9c:82:35:66:02:25:fe:6b:5d:
         13:4c:53:be:2c:41:62:07:9d:36:ba:77:a2:b7:44:d2:87:09:
         b1:ae:a7:c8:67:e5:29:ee:7d:7c:a3:36:c5:88:49:2c:d0:27:
         e4:38:2b:ea:c5:ed:6b:e9:a2:7a:80:c6:c3:15:1e:09:10:c4:
         68:9e:06:6f:3e:80:1b:b9:38:56:cb:e9:82:c6:4d:55:ae:b3:
         39:a4:51:a8:1a:24:c1:e1:8d:c8:4d:c1:d5:f0:d4:ac:c6:fb:
         ae:b7:e2:e1:91:47:18:a8:91:5d:b7:b4:87:fb:68:9a:76:d2:
         c1:05:24:0d:da:2a:d1:87:26:8d:93:86:6b:e6:d3:b9:5b:b9:
         e0:ad:c4:a8:25:64:3d:0e:29:19:c5:96:f6:31:40:e4:31:ba:
         cc:c9:ca:65:d1:84:6a:11:f1:0e:7a:fd:9e:fe:22:6b:b4:3c:
         95:bb:bf:3b:e5:58:70:7c:7d:32:db:86:17:ba:17:99:ca:14:
         62:ff:1f:99:98:f5:7b:a8:da:32:87:a1:6d:b9:22:7a:12:53:
         e0:f8:fe:41:b0:9c:8a:94:40:75:32:be:2d:39:27:c2:79:c3:
         88:17:46:04:b5:41:b2:96:6f:c8:9e:63:fe:35:8c:75:07:6b:
         0f:6e:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:55:15 2026 by rpki-client