This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File:                     ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier:          R0yueisKIM2Rf15k+sgo5alg+xuYPbG+tOQDpaSDyOM=
Subject key identifier:   0C:54:F9:B2:EA:CD:35:C7:DA:C3:14:CA:6C:0D:86:AB:AC:0B:35:BE
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number:          01E8
Signing time:             Fri 19 Dec 2025 01:57:23 +0000
Manifest this update:     Fri 19 Dec 2025 01:57:23 +0000
Manifest next update:     Fri 26 Dec 2025 01:57:23 +0000
Files and hashes:         1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: nEzajItN+76/qqMf7QiaD1p9ppw1X2Mg1lzMMwoi6DA=)
                          2: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: R6zicuGc5j5WIEznRKzKMEUHTEcekYg+eZaMy/xb74A=)
                          3: 9F79846406E911EE88450147C4F9AE02.roa (hash: LvbEefo/jIzRbw1qkY9iXb8amhsCn8ZD4oSsz6Ev0wA=)
                          4: E5925096093911EEABCFA170C4F9AE02.roa (hash: COVvPwRRBQaYkijAL/8dGT7ATCUM7/oNgeAZamGV0AU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Dec 19 01:57:23 2025 GMT
            Not After : Dec 26 01:57:23 2025 GMT
        Subject: CN=6944b103-0a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:fb:90:56:9d:3b:70:26:df:db:ce:5e:0f:
                    7a:21:4f:a1:bb:f5:df:20:6c:43:bf:7a:79:d2:d8:
                    54:30:a2:45:24:b9:dc:06:97:f6:ab:f2:e5:b8:61:
                    19:4a:ef:d9:f3:dc:3f:68:01:af:3b:42:90:93:1e:
                    89:c6:d6:5e:40:62:c6:54:f3:22:8f:bb:03:3c:21:
                    80:15:da:81:70:e0:88:e0:be:0c:b1:a2:02:8b:a0:
                    51:af:4d:2a:51:15:65:a9:78:f3:96:ec:89:80:a5:
                    37:e0:25:37:2e:d6:8a:e9:4e:73:97:13:18:a4:8c:
                    40:cd:99:b3:fc:42:6c:54:08:a8:10:de:ad:ed:b9:
                    93:aa:dd:53:81:ed:ab:72:69:51:53:8f:b2:10:6c:
                    59:69:4a:1f:73:68:91:47:1a:0d:23:09:2c:c2:9c:
                    49:cf:45:86:bb:69:26:da:da:71:96:e3:b7:66:91:
                    16:3b:eb:8d:75:f5:d6:89:ac:ce:44:ac:b1:5d:af:
                    0b:19:ed:50:2e:9a:a7:3b:07:61:e5:f1:52:f8:ca:
                    cc:95:3d:53:16:e7:4c:31:d3:bb:4a:63:d2:17:6c:
                    9e:69:d3:8f:d6:6d:5d:5d:03:c3:ae:42:01:90:c7:
                    1c:3a:96:64:7b:4a:c4:2d:29:1b:dc:66:6b:59:b4:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:54:F9:B2:EA:CD:35:C7:DA:C3:14:CA:6C:0D:86:AB:AC:0B:35:BE
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:b2:ec:65:7e:80:db:32:8d:01:8b:7a:c4:c7:bc:88:60:
         32:9b:55:64:4a:02:3c:eb:c4:47:70:7d:15:b7:1c:54:d7:b2:
         5b:8c:22:ce:0b:68:1a:54:43:c5:2f:dc:5b:80:d5:2a:73:c7:
         00:83:8e:b5:6a:28:ac:9a:11:c2:1a:bf:4d:0c:c4:41:91:17:
         ae:77:c2:32:99:d5:78:a9:e9:45:c2:db:a4:28:49:35:eb:ec:
         99:3c:9d:40:16:61:bc:7e:4b:a0:7b:0d:89:82:eb:f3:b3:67:
         d9:60:ac:86:4c:a8:ce:57:f1:06:e7:9a:23:63:54:bb:df:77:
         89:0b:8e:bc:cb:14:db:e4:8a:b0:eb:ee:6c:9f:51:85:16:33:
         87:e4:24:14:64:01:cb:87:89:90:5d:b2:68:ed:56:4e:97:a3:
         f9:f7:a6:a3:f0:35:a4:e8:b8:48:f6:69:4d:88:eb:27:43:fd:
         73:19:94:d0:3b:85:f0:14:28:07:bd:b7:16:70:3f:d1:32:22:
         69:21:d8:a1:92:94:2b:43:08:23:6a:f3:7c:7d:6f:25:9f:11:
         43:c7:93:78:ae:73:4e:06:28:84:dc:a5:24:db:f7:19:48:ac:
         5f:73:40:be:5a:f0:15:fe:f3:d1:be:06:28:88:ce:b2:8e:9c:
         e1:05:71:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:50 2025 by rpki-client