This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File:                     kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier:          duy5A1wt0KB5qV6m3EmesaCkq+wts2r9kj2uGi8yeig=
Subject key identifier:   99:57:7C:5C:32:9D:64:47:46:E3:3E:F9:CD:B4:AC:1D:90:30:37:73
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer:       /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number:          014C
Signing time:             Mon 29 Dec 2025 03:21:13 +0000
Manifest this update:     Mon 29 Dec 2025 03:21:12 +0000
Manifest next update:     Mon 05 Jan 2026 03:21:12 +0000
Files and hashes:         1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: w/XNFtaE8NcEUihHeAX+BGfx5ytOhCahZDf+CNJPWms=)
                          2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 03:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
        Validity
            Not Before: Dec 29 03:21:12 2025 GMT
            Not After : Jan  5 03:21:12 2026 GMT
        Subject: CN=6951f3a9-75bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:2b:30:d8:e9:3f:ba:36:22:10:a3:01:ed:
                    a3:ee:f3:f3:6d:f3:0a:ac:4d:70:a0:c7:cc:a0:83:
                    9a:39:d8:79:2d:04:34:d8:71:3d:1f:ac:a7:00:f6:
                    d9:fa:ff:60:11:1c:a0:5a:7a:e3:f5:26:34:a1:87:
                    d8:30:77:b0:18:76:fd:4c:5c:38:17:80:da:01:56:
                    01:97:bb:9b:8a:58:ac:4e:99:46:a0:35:64:f3:51:
                    24:58:c8:e9:f8:82:ae:ec:cd:f8:ec:85:b9:89:cd:
                    ef:32:1a:29:b3:b0:c4:14:c8:b2:d1:87:49:ed:87:
                    9c:3b:94:52:0a:f8:06:75:8a:8a:f1:b7:c0:47:14:
                    b3:e5:57:9f:56:b6:d3:0b:2e:68:60:74:32:e6:f8:
                    47:ee:16:c3:8a:66:0d:ae:8f:af:11:8d:58:ff:02:
                    2c:cc:8d:bc:89:52:53:b8:9e:9c:93:ff:8b:03:4e:
                    86:8c:8f:af:0c:c2:e9:06:5e:a9:1c:03:8e:3d:d2:
                    a8:ae:53:be:d9:66:a9:3c:ad:e7:47:67:43:d8:f5:
                    02:ea:23:9e:28:37:52:d3:ed:66:0e:68:4f:7b:11:
                    fc:34:bc:1f:5a:58:0f:eb:5b:06:65:1d:a1:48:48:
                    5c:35:25:23:08:04:83:e2:fc:96:c6:b4:94:0c:33:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:57:7C:5C:32:9D:64:47:46:E3:3E:F9:CD:B4:AC:1D:90:30:37:73
            X509v3 Authority Key Identifier:
                keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:6d:a2:8c:b6:82:1e:99:5e:8c:ae:b2:73:5c:50:35:04:
         e9:16:4e:0b:42:71:c4:02:99:3a:f1:d2:0e:3f:a6:dd:78:62:
         ea:39:57:ef:69:ab:86:7d:c9:6a:60:c4:c4:08:46:2b:f2:9d:
         1e:d2:f4:d0:e8:2f:14:f3:5c:84:bf:55:69:e4:9b:38:9a:10:
         4a:2a:55:07:54:17:9c:a3:a6:26:03:89:b2:8a:e5:86:eb:3b:
         d1:61:de:3d:2f:d2:70:40:33:9c:dc:32:94:db:7f:78:99:5b:
         76:20:5b:eb:67:2a:42:88:10:ad:29:e2:60:bb:b4:08:a6:5e:
         bd:71:e2:42:da:fe:05:23:0f:db:6c:9a:27:50:77:56:dd:19:
         83:22:e0:29:a6:0a:b5:c0:83:b6:96:3e:96:cc:6d:1b:66:f8:
         cc:0a:a1:ed:04:49:79:62:4a:f4:2a:f3:56:90:91:a0:fe:a9:
         78:16:d2:e7:46:57:0b:03:e5:86:f3:08:d6:83:bc:92:bc:54:
         f6:e6:ff:da:bb:fd:a7:99:d5:8d:7b:a3:32:f3:90:6c:f7:31:
         47:11:7e:1d:02:20:93:34:1e:4f:2d:b2:69:e1:f1:3f:ef:b9:
         ae:40:71:b2:a4:3a:66:3a:b8:d3:b3:48:8e:bd:03:bd:8d:e9:
         56:08:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 04:15:48 2025 by rpki-client