This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft
File:                     Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json)
Hash identifier:          F03QQzEwZMRYN6A5P0lWnzEown7Htdebq1xlGRUIm5c=
Subject key identifier:   6C:0E:A7:AE:54:CF:7D:15:C8:7D:17:F5:FD:91:1F:94:60:B8:2B:52
Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68
Certificate issuer:       /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68
Certificate serial:       0B0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft
Manifest number:          0B01
Signing time:             Wed 31 Dec 2025 19:04:28 +0000
Manifest this update:     Wed 31 Dec 2025 19:04:28 +0000
Manifest next update:     Wed 07 Jan 2026 19:04:28 +0000
Files and hashes:         1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: dS/Q1h8diLiFw0ilASpiZ6ExDTE/x4bCXzToiBRfBkg=)
                          2: 08FFFEEAB4A811F0B6628E78C4F9AE02.roa (hash: JbWNNhA20d+dAoRyypjRFzGhqwrye4eeN4qT6OW5LWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl
                          rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 19:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2830 (0xb0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68
        Validity
            Not Before: Dec 31 19:04:28 2025 GMT
            Not After : Jan  7 19:04:28 2026 GMT
        Subject: CN=695573bc-723d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a9:fb:46:3a:28:46:46:d7:3c:f2:62:be:d7:
                    cf:0e:85:56:49:75:de:b2:7e:cd:e3:35:ab:cc:97:
                    8b:4b:70:13:fc:81:79:ea:f6:e5:f3:b8:8c:d8:ea:
                    90:35:27:a5:a6:06:3b:c5:ab:24:8c:b4:fa:24:3b:
                    5c:04:28:51:7e:28:be:56:97:cf:e2:38:5b:8a:9b:
                    02:ca:37:94:b4:6b:93:a6:b4:b8:03:8b:c8:26:c9:
                    94:0a:a9:99:8f:79:39:48:ec:1d:53:c7:9d:c9:63:
                    5c:2e:a7:6f:13:11:a3:9a:98:4a:5f:f1:3e:60:e1:
                    18:98:cf:69:5a:e5:1b:2e:71:ab:9f:94:4a:57:85:
                    0f:aa:3c:0b:21:a4:81:6c:d5:bb:61:c2:20:5e:c1:
                    93:86:b6:35:ff:06:a5:ec:b6:91:ed:cf:3c:a1:e4:
                    09:3c:1f:f1:a4:ae:0b:7f:77:19:9b:04:7a:2e:d0:
                    54:08:ea:2b:76:aa:a7:9a:dd:c4:85:f8:d2:63:19:
                    1d:64:5c:17:37:5c:ed:ca:ac:b7:f2:15:0a:26:d6:
                    f3:57:fa:49:bf:4f:e9:9c:cc:f1:0a:e8:8e:18:9e:
                    fe:a5:38:b8:1a:5d:cf:26:d4:41:b4:a5:72:a4:68:
                    75:59:51:74:d4:69:66:8f:e4:80:58:89:5f:a8:29:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:A7:AE:54:CF:7D:15:C8:7D:17:F5:FD:91:1F:94:60:B8:2B:52
            X509v3 Authority Key Identifier:
                keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:6e:52:59:aa:c0:c3:be:0e:b5:11:7c:43:57:4d:c7:6a:
         72:a8:25:71:a0:24:8b:ca:de:29:fa:ba:2f:a3:56:6d:45:de:
         2a:91:5d:03:7b:28:22:f8:e8:7c:60:69:5a:45:3f:f5:1a:04:
         75:d1:63:6e:48:4d:da:8d:ee:42:99:d6:f5:4e:c3:eb:4d:ee:
         19:21:56:fc:f9:15:0c:fb:cb:b1:6e:8f:db:ff:b1:90:b7:6a:
         b4:3f:c9:ce:c5:09:8a:09:62:10:b4:a8:1e:c7:dd:8e:c3:39:
         6a:ec:2a:f3:98:54:97:c1:83:61:87:7b:59:c8:b4:bf:89:70:
         0a:ba:c1:45:f6:ce:93:fa:e7:b3:95:6f:1b:e2:be:f4:93:bc:
         e4:c2:0c:3d:71:27:2a:94:92:47:73:3a:a8:87:4d:fd:7e:94:
         b1:48:ec:82:a0:95:2b:1a:b4:b1:2c:24:54:8c:89:c9:cb:18:
         f9:ab:af:1e:1c:e5:77:ef:5a:3d:40:48:7b:de:36:28:56:e9:
         71:b0:f7:a0:e0:2b:81:c4:f5:41:3b:cc:a1:e6:77:c7:34:d5:
         b6:92:32:ff:51:04:26:a0:fc:38:ad:b7:ed:e4:08:a4:06:b6:
         7b:97:12:24:95:5b:0d:7e:99:7c:31:af:23:91:84:f9:7d:19:
         86:d2:ba:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG
QkJEMjdCNjgwHhcNMjUxMjMxMTkwNDI4WhcNMjYwMTA3MTkwNDI4WjAYMRYwFAYD
VQQDDA02OTU1NzNiYy03MjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl6n7RjooRkbXPPJivtfPDoVWSXXesn7N4zWrzJeLS3AT/IF56vbl87iM2OqQ
NSelpgY7xaskjLT6JDtcBChRfii+VpfP4jhbipsCyjeUtGuTprS4A4vIJsmUCqmZ
j3k5SOwdU8edyWNcLqdvExGjmphKX/E+YOEYmM9pWuUbLnGrn5RKV4UPqjwLIaSB
bNW7YcIgXsGThrY1/wal7LaR7c88oeQJPB/xpK4Lf3cZmwR6LtBUCOordqqnmt3E
hfjSYxkdZFwXN1ztyqy38hUKJtbzV/pJv0/pnMzxCuiOGJ7+pTi4Gl3PJtRBtKVy
pGh1WVF01Glmj+SAWIlfqCn5AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwOp65U
z30VyH0X9f2RH5RguCtSMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB
RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp
QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBy5W5SWarAw74OtRF8Q1dNx2pyqCVxoCSLyt4p+rovo1ZtRd4qkV0D
eygi+Oh8YGlaRT/1GgR10WNuSE3aje5Cmdb1TsPrTe4ZIVb8+RUM+8uxbo/b/7GQ
t2q0P8nOxQmKCWIQtKgex92Owzlq7CrzmFSXwYNhh3tZyLS/iXAKusFF9s6T+uez
lW8b4r70k7zkwgw9cScqlJJHczqoh039fpSxSOyCoJUrGrSxLCRUjInJyxj5q68e
HOV371o9QEh73jYoVulxsPeg4CuBxPVBO8yh5nfHNNW2kjL/UQQmoPw4rbft5Aik
BrZ7lxIklVsNfpl8Ma8jkYT5fRmG0rqw
-----END CERTIFICATE-----
Generated at Thu Jan 1 21:59:09 2026 by rpki-client