This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File:                     kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier:          m3WjFzkXU5UBgrrbIOW+ExX4iZVAm+Y7BdYG8t0UmdE=
Subject key identifier:   23:4A:50:AA:61:75:6F:8B:DF:49:B2:D9:CD:09:28:EB:DA:DF:64:9F
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer:       /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial:       1051
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number:          1051
Signing time:             Thu 18 Dec 2025 17:13:22 +0000
Manifest this update:     Thu 18 Dec 2025 17:13:21 +0000
Manifest next update:     Thu 25 Dec 2025 17:13:21 +0000
Files and hashes:         1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: 86IFwtrEXUVfEUUhyz8R95NBu1XZQOnHWq2IhOTs9Rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
                          rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4177 (0x1051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
        Validity
            Not Before: Dec 18 17:13:21 2025 GMT
            Not After : Dec 25 17:13:21 2025 GMT
        Subject: CN=69443632-3c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:6b:f2:2d:89:48:06:fa:11:c2:f2:08:df:
                    28:a1:58:65:21:c0:f8:05:31:c6:ce:b3:3e:34:11:
                    72:d1:87:5f:6f:ea:d0:3c:20:ac:9d:37:cc:99:a9:
                    5e:1e:a8:e3:ed:56:55:47:a9:7f:bb:73:2c:14:17:
                    b3:74:4a:aa:59:cf:d2:ac:5b:8e:cb:9e:6d:84:18:
                    c5:67:88:3d:2f:50:e5:d9:b5:b7:b2:38:ad:ca:8c:
                    91:fc:96:d5:2e:df:c9:e1:e5:f1:b2:67:b3:cb:39:
                    5f:f5:7a:c8:43:ba:22:37:36:dc:ef:45:a6:63:ef:
                    0d:60:90:c2:ff:be:8b:15:69:af:43:0c:5d:a5:82:
                    49:4b:ff:8a:38:f9:61:95:42:70:a7:6a:57:89:33:
                    a5:b8:29:4f:7a:bb:f1:d8:3c:1a:b9:a9:8e:4c:1c:
                    ab:22:c7:63:dc:78:a3:6a:82:5d:37:e2:ec:b0:00:
                    38:79:8e:85:21:a3:ef:c0:f6:12:ae:f0:dd:ce:ab:
                    70:43:cb:77:c4:58:4e:ff:18:43:a1:75:8b:18:f7:
                    48:c0:60:c8:c5:3b:74:2b:e3:9a:42:07:f9:33:4e:
                    67:f5:4d:cc:df:2e:24:b3:1b:99:f4:71:81:f3:e5:
                    f8:1b:bc:9e:55:88:35:2e:e5:0d:b1:c8:35:3b:cc:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:50:AA:61:75:6F:8B:DF:49:B2:D9:CD:09:28:EB:DA:DF:64:9F
            X509v3 Authority Key Identifier:
                keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:68:4b:c2:79:d1:bb:07:06:4b:a8:4c:17:99:2e:f5:4b:
         4c:97:42:f3:0d:e1:0b:78:88:ef:19:7b:2f:79:b0:70:7f:54:
         01:59:a6:ec:21:70:17:db:c2:91:fa:4e:d9:c7:09:48:9d:9a:
         5e:7a:65:3e:58:49:a8:87:22:c6:4e:47:1b:ca:81:56:5b:40:
         f2:44:6f:34:c5:7a:7a:09:b0:cd:98:37:9a:80:5d:3b:6b:30:
         b7:a5:98:27:ea:a4:7f:e1:88:b5:1a:42:60:0b:80:45:88:0a:
         fa:4a:c2:4a:e9:8f:1d:56:66:c9:c4:36:d4:0a:3a:90:ef:f2:
         95:2a:db:7d:11:6a:e3:e6:c0:b1:a3:ac:02:07:da:3d:06:7c:
         48:28:c5:92:2d:f4:ce:f0:f0:e2:04:64:a3:54:fa:8d:7d:e0:
         38:f4:e1:ab:f4:ce:a1:49:c1:a6:44:1b:f5:73:44:af:00:e1:
         28:9f:68:96:ed:18:14:1b:a1:c2:31:03:40:ed:35:0a:c2:3f:
         e6:b8:ed:7b:77:f2:6b:38:19:85:2d:70:4b:51:3d:8d:bf:43:
         09:f5:dc:30:3b:54:20:2f:09:9a:67:6a:d9:54:62:fb:26:72:
         d4:e8:0a:6c:b3:b2:22:fa:63:34:cc:ba:1d:1d:e3:0f:df:1c:
         3b:e3:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:02 2025 by rpki-client