This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
File:                     kKmEULnak4EYotWtU02IKPS5RjQ.mft (raw, json)
Hash identifier:          ZWk5wJIfYYh/u3P9i1TbX1/4gpRV1ffDC/E3kDc14d0=
Subject key identifier:   92:E2:7F:C4:A6:7B:AA:BF:77:84:F6:9C:98:25:97:A2:F8:6E:D3:D6
Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
Certificate issuer:       /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Certificate serial:       0C93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
Manifest number:          0C7D
Signing time:             Tue 30 Dec 2025 18:11:45 +0000
Manifest this update:     Tue 30 Dec 2025 18:11:45 +0000
Manifest next update:     Tue 06 Jan 2026 18:11:45 +0000
Files and hashes:         1: kKmEULnak4EYotWtU02IKPS5RjQ.crl (hash: z4P0jq4cxvPtSLCMsTZrOoRaPMyjTAdpyOeEPHcHSc8=)
                          2: E6144BC6F52011EFB886A255C4F9AE02.roa (hash: aEMS3M29hCCeByUCXZ+uvfYFpf4/VBfRmYpl07QvYhY=)
                          3: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (hash: G+U7uQFgAb2U+N/txdaeFUXvdA97Z5VnhrdZ+BD6M4c=)
                          4: C9989D9EF52011EF88416555C4F9AE02.roa (hash: J1Y3R18xnrLrxVnTd6dnJAcJxU9kFVJTgj8vMihGb8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 18:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3219 (0xc93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
        Validity
            Not Before: Dec 30 18:11:45 2025 GMT
            Not After : Jan  6 18:11:45 2026 GMT
        Subject: CN=695415e1-fb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:e0:ec:f3:3b:12:f0:cc:58:33:3a:05:8c:
                    92:07:2e:10:09:f2:82:b9:e5:1a:a9:9d:c1:ba:02:
                    9a:bb:0e:95:d8:fe:d3:5f:07:ad:86:17:43:92:ca:
                    0e:41:35:0b:21:f8:36:48:6d:8f:40:13:37:80:42:
                    23:6e:64:df:10:7d:6f:5d:ae:d4:4e:78:d4:b9:f2:
                    d4:53:8a:2d:b1:57:ea:56:ed:68:d0:2f:7b:96:9a:
                    f0:72:3c:e6:15:5f:48:dd:ac:c7:83:e4:7b:52:63:
                    37:cb:e9:0c:a1:ee:66:b5:37:f0:a6:69:77:6c:b8:
                    cf:06:5e:de:7c:e8:66:0e:b0:14:ec:1b:f4:62:c7:
                    fc:46:66:c1:23:29:9a:ef:00:64:0e:e1:70:f8:88:
                    cc:56:e9:53:1d:5a:2e:46:08:53:e3:2e:cd:ac:a0:
                    dc:a1:b4:9c:8a:d7:b9:8a:b6:dc:44:b8:ca:b2:0c:
                    c6:c7:a9:4c:5f:e7:e7:d5:f0:03:99:47:e6:ac:06:
                    f7:c9:df:cf:e7:d3:0c:14:56:34:62:b2:a0:1d:ff:
                    0e:f2:5a:39:15:2d:13:fc:43:70:2f:89:83:4d:03:
                    99:da:b8:97:90:a1:83:b8:05:c3:09:30:6a:64:a6:
                    e1:72:6e:3f:77:94:59:31:9d:b0:40:ab:4a:38:b4:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E2:7F:C4:A6:7B:AA:BF:77:84:F6:9C:98:25:97:A2:F8:6E:D3:D6
            X509v3 Authority Key Identifier:
                keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:96:e7:49:63:c0:c7:43:4f:ae:c7:0b:42:d6:53:da:92:
         76:87:5e:65:e1:b5:8d:3f:30:e0:25:ec:01:d6:fc:f7:75:da:
         03:7b:d0:34:c2:10:b8:58:3e:3b:12:ca:b8:86:f3:ed:eb:f4:
         a5:b2:1b:84:f8:17:5b:a1:2b:d4:e0:33:4a:01:81:a7:6b:8f:
         1d:85:0c:aa:62:e6:0d:45:48:8f:8b:5e:07:c2:a1:89:29:97:
         17:74:86:c0:c7:47:da:1a:43:f5:ef:94:61:cc:54:44:1e:eb:
         98:40:73:f7:e3:92:bc:bc:26:93:7b:09:6c:78:58:e9:35:01:
         78:61:c3:ed:95:03:2e:6b:8e:8c:43:47:a8:69:01:54:07:6f:
         67:f0:b1:ad:59:c3:50:7f:9e:54:03:ce:75:0e:50:a9:08:66:
         86:0e:f0:5a:07:c9:77:40:62:d0:60:92:8a:b2:f2:37:b4:0f:
         e7:3e:49:42:41:ae:45:9c:72:72:e2:fc:34:a7:de:da:24:06:
         8d:49:ef:b5:62:4d:eb:4c:02:61:ce:a6:32:90:08:4c:ed:07:
         46:a1:be:41:3d:8c:08:a9:0c:0e:1b:6f:d0:57:37:b3:89:eb:
         d5:95:7b:d7:1e:74:00:53:94:53:b3:7d:d0:b0:e1:ec:65:57:
         ac:cf:d6:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4
RjRCOTQ2MzQwHhcNMjUxMjMwMTgxMTQ1WhcNMjYwMTA2MTgxMTQ1WjAYMRYwFAYD
VQQDDA02OTU0MTVlMS1mYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDrg7PM7EvDMWDM6BYySBy4QCfKCueUaqZ3BugKauw6V2P7TXwethhdDksoO
QTULIfg2SG2PQBM3gEIjbmTfEH1vXa7UTnjUufLUU4otsVfqVu1o0C97lprwcjzm
FV9I3azHg+R7UmM3y+kMoe5mtTfwpml3bLjPBl7efOhmDrAU7Bv0Ysf8RmbBIyma
7wBkDuFw+IjMVulTHVouRghT4y7NrKDcobScite5irbcRLjKsgzGx6lMX+fn1fAD
mUfmrAb3yd/P59MMFFY0YrKgHf8O8lo5FS0T/ENwL4mDTQOZ2riXkKGDuAXDCTBq
ZKbhcm4/d5RZMZ2wQKtKOLTrMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLif8Sm
e6q/d4T2nJgll6L4btPWMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx
RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTJDQy9GMjZFMDZDRTExRjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0
RVlvdFd0VTAySUtQUzVSalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAh3ZbnSWPAx0NPrscLQtZT2pJ2h15l4bWNPzDgJewB1vz3ddoDe9A0
whC4WD47Esq4hvPt6/SlshuE+BdboSvU4DNKAYGna48dhQyqYuYNRUiPi14HwqGJ
KZcXdIbAx0faGkP175RhzFREHuuYQHP345K8vCaTewlseFjpNQF4YcPtlQMua46M
Q0eoaQFUB29n8LGtWcNQf55UA851DlCpCGaGDvBaB8l3QGLQYJKKsvI3tA/nPklC
Qa5FnHJy4vw0p97aJAaNSe+1Yk3rTAJhzqYykAhM7QdGob5BPYwIqQwOG2/QVzez
ievVlXvXHnQAU5RTs33QsOHsZVesz9bT
-----END CERTIFICATE-----
Generated at Wed Dec 31 07:59:43 2025 by rpki-client