This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File:                     KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier:          50eVJc9x6ZUmXcHTgnMIkVVvSUxAvenV3RKC/jYIgfE=
Subject key identifier:   7D:26:EA:F6:B5:81:B7:82:22:45:E8:53:F3:F6:F0:6B:1A:05:5C:57
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       046A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number:          03FB
Signing time:             Thu 18 Dec 2025 23:59:31 +0000
Manifest this update:     Thu 18 Dec 2025 23:59:31 +0000
Manifest next update:     Thu 25 Dec 2025 23:59:31 +0000
Files and hashes:         1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: VTSpAWwzk0SBPbJ2db5dgPFDJHs5cAs0J80AfWtMZRA=)
                          2: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: baAQ8jjbDnd+yIywZELKI/f+fLzoC+yEEVRka25c/bE=)
                          3: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: kMVjaoh/nl+HaXtTqo7eTliBreBhvFCgfQya7sUAs84=)
                          4: 2F24736869C111EF92B54060C4F9AE02.roa (hash: 3Y7RO9a921W0m0+KGz0aqJiJml6RthEQD034mrQPM14=)
                          5: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: oEcJmw9GBlLPpcX10UQcg9xp3RCQZJ+XOY7mrRgn4Bk=)
                          6: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: j6YHhVIdNkPdVV6kIT6wpzB9Muw42P+/9W2kK5xhqXo=)
                          7: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 3biVBRmslEYYBK7sgaVOapllwelbsd+exeLENbjHwjc=)
                          8: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: MZXl+TpE4PKXHu+CHp6bbz53wt0k4JzbyBQBboqTIP4=)
                          9: F83786F4030011F0984B974FC4F9AE02.roa (hash: dZbjlWTe8fWMRR6qgpL+ZoRL9VFsmU1Nz8661bmlCro=)
                          10: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: riBHCo9Gmq1D+0u/pG7iCc4xDo8oVc7na3FG+hNveUk=)
                          11: F1930FBAEFE011ED81AE706DC4F9AE02.roa (hash: NP4Z7Tt6CY/HSXNtbW7GXldzu9mQG/LCVCiq7fXDLJ8=)
                          12: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: wASZh3+a4jtcXdGHzHa3qDgrJcrhUIDBhkIcjHP+VMU=)
                          13: 04AB651469C211EFA06F8562C4F9AE02.roa (hash: YV6zDgOh2QMJi+TbqoW1Wt5O6E3eSYJDwfMJ3aJ2a10=)
                          14: 458AC21A684111EEA6632877C4F9AE02.roa (hash: rQlxlSsLfUnZ/IhD06ff6PZ8dH3kW3qdosnvLtL69I4=)
                          15: A336FE62609111EFB751B771C4F9AE02.roa (hash: 52bkXRq+LzImcNciZMVc/RbkFDyxds03UT8vcrTtvWc=)
                          16: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: e+M4adDsVVtiBfslPnOBJOSyjq+6gRCvAtKsdhjHrg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Dec 18 23:59:31 2025 GMT
            Not After : Dec 25 23:59:31 2025 GMT
        Subject: CN=69449563-4593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:96:f4:5d:e5:44:8c:a1:4b:29:f0:10:3c:
                    94:33:69:b0:04:6c:ae:2c:7c:ab:77:ab:9a:2b:11:
                    a0:55:06:2f:7a:b6:40:66:c6:8e:c7:ac:64:aa:b6:
                    3a:4f:68:ac:1a:e3:fe:76:52:75:82:63:5a:af:1b:
                    46:06:fc:1e:07:d4:2a:36:de:08:58:b3:f8:be:44:
                    4f:94:bc:94:76:1d:2f:90:a9:63:ed:39:ce:45:6e:
                    d3:2d:63:a0:72:6b:5d:df:2b:45:32:ca:6a:30:15:
                    88:32:75:58:29:b4:4c:e7:37:42:0b:9c:5f:82:94:
                    6a:44:ed:68:56:9f:96:54:ad:6d:7d:3e:d2:35:2a:
                    83:e6:76:c5:f8:48:e2:11:26:a8:cf:a1:cc:c0:f0:
                    69:35:71:8c:b3:7f:76:b7:15:8f:67:68:c5:84:65:
                    5b:4e:ca:b1:0c:49:19:b7:2f:90:09:b4:90:c2:1d:
                    f7:f3:42:24:96:0e:6c:34:8f:e1:3a:2d:8d:07:08:
                    92:65:aa:0a:ab:86:6d:82:b2:a9:62:3b:42:d1:81:
                    05:1b:76:59:f0:c0:e3:db:e7:56:c7:a9:80:b8:78:
                    be:8f:62:9a:3a:3a:56:0c:27:69:6b:be:33:b4:a4:
                    ed:88:77:92:43:d9:9f:69:34:c5:e0:b4:2d:43:f0:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:26:EA:F6:B5:81:B7:82:22:45:E8:53:F3:F6:F0:6B:1A:05:5C:57
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:31:72:36:71:c7:bc:71:99:f3:f3:c8:f6:10:cf:34:2b:7b:
         fc:28:7a:47:25:4d:89:90:2f:69:95:cb:7b:f1:3e:af:90:ce:
         e7:be:db:33:29:26:df:a0:8b:01:f1:b3:3d:49:5f:dc:3b:dc:
         e7:67:04:59:1a:8f:dc:e1:96:fe:07:6d:5a:f2:55:89:85:b0:
         34:dc:6b:6a:dc:15:03:3d:9e:81:c3:4d:3d:09:8b:9b:f7:1c:
         8f:31:15:9e:1c:a1:ee:37:fe:9f:d4:8f:0a:05:18:71:66:12:
         15:75:19:72:1c:3c:b9:b0:8f:a4:a0:f3:8e:e0:e8:af:d6:21:
         a1:df:a5:f7:ca:92:ee:2b:9c:28:15:c6:6d:01:e0:b1:df:33:
         b1:bd:8a:23:de:eb:f5:d8:f8:21:af:9f:2c:1e:9a:e2:1d:31:
         43:45:3d:b7:c1:10:b1:f2:43:52:1a:e6:e4:e9:db:e8:a1:ef:
         c8:2c:cc:45:99:b6:b7:72:2f:6c:91:68:fb:f9:62:36:44:13:
         56:e5:4a:33:9b:ed:85:10:b3:10:f5:62:d1:ca:ee:33:7e:dd:
         32:8e:bb:96:a0:06:95:e7:fc:7e:79:6c:9c:89:ee:27:8e:1f:
         eb:39:4c:8c:47:63:12:42:b2:36:8c:8e:2d:a9:d6:c9:cf:f8:
         fd:43:70:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjUxMjE4MjM1OTMxWhcNMjUxMjI1MjM1OTMxWjAYMRYwFAYD
VQQDDA02OTQ0OTU2My00NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQWW9F3lRIyhSynwEDyUM2mwBGyuLHyrd6uaKxGgVQYverZAZsaOx6xkqrY6
T2isGuP+dlJ1gmNarxtGBvweB9QqNt4IWLP4vkRPlLyUdh0vkKlj7TnORW7TLWOg
cmtd3ytFMspqMBWIMnVYKbRM5zdCC5xfgpRqRO1oVp+WVK1tfT7SNSqD5nbF+Eji
ESaoz6HMwPBpNXGMs392txWPZ2jFhGVbTsqxDEkZty+QCbSQwh3380Iklg5sNI/h
Oi2NBwiSZaoKq4ZtgrKpYjtC0YEFG3ZZ8MDj2+dWx6mAuHi+j2KaOjpWDCdpa74z
tKTtiHeSQ9mfaTTF4LQtQ/CogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0m6va1
gbeCIkXoU/P28GsaBVxXMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTU3Qi84REE3MjY0MEMxRkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVda
cUV3d2xURU9hYl9TWUtxWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjMXI2cce8cZnz88j2EM80K3v8KHpHJU2JkC9plct78T6vkM7nvtsz
KSbfoIsB8bM9SV/cO9znZwRZGo/c4Zb+B21a8lWJhbA03Gtq3BUDPZ6Bw009CYub
9xyPMRWeHKHuN/6f1I8KBRhxZhIVdRlyHDy5sI+koPOO4Oiv1iGh36X3ypLuK5wo
FcZtAeCx3zOxvYoj3uv12Pghr58sHpriHTFDRT23wRCx8kNSGubk6dvooe/ILMxF
mba3ci9skWj7+WI2RBNW5Uozm+2FELMQ9WLRyu4zft0yjruWoAaV5/x+eWycie4n
jh/rOUyMR2MSQrI2jI4tqdbJz/j9Q3CA
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:55:37 2025 by rpki-client