This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
File:                     ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json)
Hash identifier:          FvtETHblnZQfIHYgVBa6kNloUBpHf9Mo9KacZcnHkgk=
Subject key identifier:   66:C8:2F:31:18:EB:D6:DA:C3:43:DA:C5:9A:9A:73:37:49:91:38:BD
Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
Certificate issuer:       /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
Manifest number:          015E
Signing time:             Fri 19 Dec 2025 03:16:33 +0000
Manifest this update:     Fri 19 Dec 2025 03:16:33 +0000
Manifest next update:     Fri 26 Dec 2025 03:16:33 +0000
Files and hashes:         1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: TRPAiuZmwz/Vq9KBdcqcxrNZut0LSdstH4/zSq4K7Fw=)
                          2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
                          rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
        Validity
            Not Before: Dec 19 03:16:33 2025 GMT
            Not After : Dec 26 03:16:33 2025 GMT
        Subject: CN=6944c391-7df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:7f:98:40:05:94:7d:48:9d:a1:72:7f:41:
                    01:ba:5c:42:27:94:1d:8f:80:f7:3c:de:d7:27:99:
                    f2:2f:24:e9:78:26:75:cc:bc:47:c0:d0:80:e5:a6:
                    dd:5c:c9:d3:9e:91:19:47:48:32:40:1d:23:91:d9:
                    3d:55:7d:46:f8:30:de:88:96:a6:eb:0a:b7:6d:4e:
                    dd:66:96:2e:d3:6e:e3:14:f5:94:6a:69:c4:77:ac:
                    50:73:07:f1:9b:b2:49:91:96:62:1c:8e:40:88:bf:
                    19:4c:d8:92:5b:16:cd:0c:cc:99:78:c8:0b:f0:7b:
                    75:b9:21:aa:ef:80:ba:e4:dd:22:19:20:c1:7a:aa:
                    61:16:08:4e:f6:fc:88:a7:2e:17:da:f7:ab:59:f0:
                    b5:60:6f:0c:40:50:c2:57:a8:d3:91:12:7b:75:7a:
                    82:2b:43:fe:a8:26:b3:08:26:e2:89:5e:3e:b9:6a:
                    b9:af:f7:cb:6f:78:78:e6:11:28:31:05:24:92:b2:
                    13:f1:e0:4b:59:26:50:b5:f7:32:a3:df:54:70:c6:
                    f8:d4:09:60:ef:1b:51:89:6b:cb:74:67:44:6d:de:
                    9f:23:5e:29:d0:59:21:a3:b4:68:a7:78:8e:68:62:
                    4a:15:08:be:39:25:dd:90:5d:e7:e0:52:b6:bf:7d:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C8:2F:31:18:EB:D6:DA:C3:43:DA:C5:9A:9A:73:37:49:91:38:BD
            X509v3 Authority Key Identifier:
                keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:4a:a6:4d:98:b2:1d:34:55:82:1e:3e:13:1b:17:2a:55:
         d3:33:8a:5f:ac:3b:e0:97:12:f4:83:12:44:ff:8d:a2:50:3c:
         0f:27:b6:6a:16:34:f3:15:18:80:07:6d:6b:72:7b:e2:b2:e3:
         7a:00:cb:92:45:c9:52:ca:ef:f6:46:6d:e2:7f:07:2e:48:2c:
         c4:2e:49:6b:e5:c9:c7:ef:c7:19:73:91:c1:1d:4d:f7:a7:39:
         56:e1:58:17:90:b2:85:2d:ec:69:37:df:2b:7c:29:9a:eb:1d:
         dd:8c:45:3a:b1:64:6b:ac:4a:f1:e4:93:f3:10:36:c6:76:ca:
         34:4e:67:2a:88:d5:18:be:aa:f3:80:65:11:33:c0:45:99:b3:
         b6:31:54:b2:15:f2:cd:4a:ba:7f:ba:d7:67:00:11:bb:12:dd:
         f5:ad:20:46:c7:cb:39:a4:b2:c2:15:4d:88:0d:81:2f:3b:15:
         df:6d:3a:13:03:d0:c6:23:8d:ce:30:e8:94:8d:68:05:03:2d:
         03:44:48:4d:dd:ee:07:a3:f0:0d:33:b0:90:bd:e2:77:b1:f5:
         8c:f5:b1:21:8c:0d:18:d5:0e:0e:95:03:cf:da:68:1a:b6:b9:
         23:de:63:ed:c8:5f:8f:88:0f:1a:2e:9f:b5:73:a2:9a:e0:bf:
         ca:7c:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:01 2025 by rpki-client