This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File:                     K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier:          4G/SSu4U9ZBbvVnUnOxmDv65Xso5NXdJuAwJF2EwWXo=
Subject key identifier:   EB:CC:28:E6:38:D9:71:C8:01:01:EA:45:A3:3B:60:9D:39:C1:BC:DE
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer:       /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial:       3526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number:          3515
Signing time:             Thu 18 Dec 2025 14:23:12 +0000
Manifest this update:     Thu 18 Dec 2025 14:23:11 +0000
Manifest next update:     Thu 25 Dec 2025 14:23:11 +0000
Files and hashes:         1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: FG+Yu7TasbfB40z2OWsI6wNlkHsDCzI3wuy7dzECQ94=)
                          2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: 393XehekPeHbrV2Jp2q+bd44TtCVra3Kkby1+LNFgLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13606 (0x3526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
        Validity
            Not Before: Dec 18 14:23:11 2025 GMT
            Not After : Dec 25 14:23:11 2025 GMT
        Subject: CN=69440e50-2156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1d:3f:db:dd:aa:68:93:33:39:cc:68:d5:2a:
                    11:32:43:4b:ed:b1:c0:5c:42:59:bf:df:40:a8:51:
                    b6:68:c9:59:5f:d7:e9:bc:0d:1d:84:20:2a:04:f9:
                    25:16:4d:72:59:8e:03:1d:cb:c2:8e:67:2b:25:ea:
                    e4:bc:d4:bf:f8:46:be:1b:fa:d4:cd:bb:15:47:cf:
                    4d:96:37:25:86:6e:5f:d2:6a:24:09:39:61:b7:01:
                    fe:f4:0c:54:85:ed:c2:a2:de:e3:91:1e:cd:0d:3b:
                    b4:10:c7:9e:71:f4:4d:c4:8e:28:4b:50:38:c0:61:
                    b3:a8:7c:1c:cd:b5:4d:c5:0f:34:c8:fd:7e:76:7f:
                    38:7b:c0:bc:82:d1:fa:e4:97:44:b4:b8:02:18:05:
                    dd:8d:63:cc:c4:cd:f0:e5:10:d4:5b:cf:4d:d7:71:
                    06:55:14:46:20:e1:ef:c6:06:91:f5:97:5c:90:54:
                    71:34:9b:01:d5:8b:b4:89:d8:72:92:85:a7:f7:7e:
                    6b:c8:5e:89:fc:80:09:71:b1:a8:9d:f2:35:c7:1b:
                    ee:f8:5b:91:7d:a3:28:b7:83:34:4e:b2:06:bd:a3:
                    df:e9:2c:01:04:46:94:93:9d:0a:47:e5:c3:ab:b0:
                    4b:27:2e:35:87:ec:9b:78:45:af:08:b8:f0:b4:14:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:28:E6:38:D9:71:C8:01:01:EA:45:A3:3B:60:9D:39:C1:BC:DE
            X509v3 Authority Key Identifier:
                keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:49:ba:aa:3b:f6:4c:72:f2:c2:ff:9f:5c:eb:cc:84:08:
         e8:40:6a:85:05:3e:ec:48:b7:d9:75:04:e0:ea:1c:4c:42:d7:
         e8:f1:90:60:f6:0e:c9:fa:33:42:f4:46:97:ca:68:9a:5a:6f:
         28:4e:80:9d:03:ad:2a:24:71:a7:3e:6b:aa:0a:da:e6:cd:88:
         b5:d2:dd:27:d5:42:55:38:ac:9f:9f:95:92:3f:b3:24:dd:f4:
         4e:e2:05:92:d6:f3:32:15:33:16:c2:a8:17:7f:1c:3d:be:57:
         bc:4e:de:64:73:6d:ab:c5:ed:65:c1:a8:f0:9a:8d:5d:8c:c7:
         e0:f4:7a:34:53:88:bd:05:91:89:11:65:d7:18:18:cd:da:ef:
         b6:06:33:bc:e7:d2:60:98:6c:63:7e:49:1e:e3:9e:6f:92:eb:
         f0:53:6b:c7:7e:96:c5:1a:6a:5c:8b:d7:fe:9f:06:44:50:61:
         5e:24:c0:3e:0a:3c:aa:35:ac:33:b1:85:a9:89:04:2b:b2:4e:
         33:76:87:66:df:1d:60:41:0a:7b:ee:e3:df:cd:9a:52:7e:1c:
         4a:41:60:b2:c2:7c:bf:bf:00:60:ef:fb:c7:6f:84:72:a1:04:
         af:f8:14:6c:56:87:a9:ac:a8:85:55:5a:5e:11:f6:08:09:89:
         b5:15:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:52 2025 by rpki-client