This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
File:                     K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json)
Hash identifier:          DsiPtW+/7Mye5ze9QejicoMEd4+XuuCgmRcX8toOAQY=
Subject key identifier:   06:0D:BF:CB:B4:CB:83:09:89:67:43:9C:8E:4C:6F:C0:E7:37:C3:70
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Certificate issuer:       /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial:       04D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
Manifest number:          04D2
Signing time:             Tue 30 Dec 2025 22:58:44 +0000
Manifest this update:     Tue 30 Dec 2025 22:58:44 +0000
Manifest next update:     Tue 06 Jan 2026 22:58:44 +0000
Files and hashes:         1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: Ym68do63Ud6uI0dxgATv2ZslCBIlEqjoWo9jeOR0V3c=)
                          2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: 8h3Fcn9zCfGj652v4nJxVKS7wYl2fmSD4heI9aLrZzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
                          rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 22:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
        Validity
            Not Before: Dec 30 22:58:44 2025 GMT
            Not After : Jan  6 22:58:44 2026 GMT
        Subject: CN=69545924-594b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:63:33:91:72:5a:33:4e:f3:45:7f:07:0f:
                    d5:64:b9:62:a4:3a:b7:67:cd:5c:ce:89:98:f4:6b:
                    99:e2:ea:e4:5b:1a:7d:cf:5c:02:a3:00:f6:6e:c0:
                    02:2f:c4:c3:cf:b4:7b:88:4c:75:59:17:cd:80:1f:
                    68:dc:79:14:80:98:18:dd:57:6b:67:dd:5c:d2:b1:
                    29:4a:ba:59:6f:45:4f:7f:53:87:8c:f1:27:c5:a9:
                    50:6c:eb:e4:1e:57:b1:38:32:c0:1d:73:61:34:27:
                    18:b7:8e:3a:94:60:a1:94:91:38:5c:49:00:e9:d8:
                    f6:f6:e6:69:8e:07:5c:95:8c:af:e0:b8:b5:94:2d:
                    62:40:c5:fd:b8:c6:af:4c:5a:9b:33:65:f7:9c:4c:
                    a7:86:56:3f:a8:7f:ca:ef:6a:cc:30:29:73:46:59:
                    ff:e5:df:ab:62:d5:fa:f8:30:8b:99:55:ed:05:82:
                    92:a9:2b:f4:ed:ff:fa:ad:c7:2b:9b:98:05:87:1d:
                    c8:74:3c:e0:d5:80:af:9c:b5:c5:a0:34:15:d0:06:
                    f9:4c:ca:48:a2:56:9d:7e:35:03:fc:bb:45:0a:38:
                    25:64:3c:70:31:54:d8:40:1f:1b:be:45:a8:3c:20:
                    64:f9:88:ae:07:68:6a:9c:f3:f9:60:b9:62:d4:7e:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:BF:CB:B4:CB:83:09:89:67:43:9C:8E:4C:6F:C0:E7:37:C3:70
            X509v3 Authority Key Identifier:
                keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:70:fb:cd:de:c9:ff:3c:ea:c4:da:ac:6e:1c:3e:4b:3a:79:
         41:8d:20:77:00:16:47:52:64:f0:79:21:c8:65:45:d7:e8:5e:
         ee:fc:5e:88:13:20:2f:d4:bd:78:ae:98:b0:bc:cd:6a:40:93:
         d8:52:18:28:8a:6f:78:ab:6e:1b:57:3d:fe:0b:24:0e:75:e6:
         fc:63:79:2a:e5:0e:b2:69:d1:15:a1:a0:55:0d:13:7f:3d:87:
         45:d6:cc:12:11:2b:c5:f6:5d:29:d1:d2:7b:8f:9e:d3:18:ca:
         71:ca:d3:db:f6:40:59:49:20:df:01:69:a9:64:11:c7:98:da:
         fe:b9:02:5f:0d:97:4e:b5:53:82:ec:2e:fc:89:21:eb:39:e1:
         bc:cd:71:1a:79:47:47:d6:b5:d6:27:b5:ce:f7:53:53:94:41:
         b6:52:cd:67:34:78:d9:26:24:32:4b:9a:8d:33:a5:6d:f9:1b:
         ab:03:cf:4f:5d:20:b8:6a:f2:b0:1f:e8:a1:e8:26:1b:ed:51:
         72:af:d2:bd:93:f9:1f:72:29:80:17:28:b8:62:3c:15:f8:a5:
         76:48:a1:a9:68:11:cf:08:88:54:3a:d0:05:92:c9:23:47:96:
         a2:c9:27:fa:54:69:7d:2f:e0:f9:7f:c4:0f:1c:81:ba:4a:a2:
         43:d4:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:21:15 2025 by rpki-client