This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File:                     Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier:          pEHfxIBsssq17WnfrHwY6g3SENnF74kOJckZlGBt/nE=
Subject key identifier:   F4:F9:F2:7D:A6:F1:85:D0:BF:DA:70:B3:5F:A7:C0:46:F7:B3:13:A2
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer:       /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number:          C6
Signing time:             Sun 21 Dec 2025 04:59:56 +0000
Manifest this update:     Sun 21 Dec 2025 04:59:56 +0000
Manifest next update:     Sun 28 Dec 2025 04:59:56 +0000
Files and hashes:         1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: SmZ3pwhRWWWlPzaJ0pMNti9XA6e6SY2hhpBQ2OBIXk4=)
                          2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: CDlWFm2LtxVmYaaBC5EKvKez8sI4jo8CXca3FR8eDpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
                          rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
        Validity
            Not Before: Dec 21 04:59:56 2025 GMT
            Not After : Dec 28 04:59:56 2025 GMT
        Subject: CN=69477ecc-3408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:57:e0:a5:74:af:24:7d:17:d3:f0:5a:e0:
                    27:af:53:08:85:cd:b9:85:03:8d:a9:4b:e6:b7:23:
                    c2:8d:5f:07:3c:65:a9:28:ca:f6:9a:27:84:8a:1a:
                    e3:68:c3:f0:9e:e8:fd:3d:de:45:67:7f:d8:fd:10:
                    50:5e:68:16:d6:f1:d0:c3:3d:34:01:a6:8b:84:83:
                    ca:57:e4:fe:6e:62:55:bd:62:e5:60:1d:11:f2:d5:
                    1c:85:f4:e1:20:bd:f3:be:36:2f:b4:a0:b5:52:8d:
                    7b:b9:1a:0b:7b:49:b1:45:9f:f9:26:63:d5:7a:7b:
                    29:98:f7:d9:4d:e2:39:ba:9a:51:87:5e:6b:a2:3b:
                    4c:10:db:8c:1c:f4:c2:ca:37:40:ee:a9:b9:71:ee:
                    b6:9d:5a:e5:e2:07:4b:76:82:93:86:2c:42:56:f1:
                    6b:e6:85:23:cc:74:08:0c:5f:21:a4:93:5e:7e:5c:
                    4c:15:27:92:37:d8:5a:90:b4:4b:06:f7:34:5a:cb:
                    a9:95:3d:60:54:94:f9:03:60:07:74:28:c6:d2:7a:
                    3a:ef:26:d1:4a:71:ac:4c:97:ce:6b:58:f1:ad:18:
                    78:3e:37:16:72:d4:82:ba:72:89:da:e0:b3:29:3a:
                    1e:75:53:70:85:14:4c:d4:ca:c0:ad:fd:2f:7f:ff:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:F2:7D:A6:F1:85:D0:BF:DA:70:B3:5F:A7:C0:46:F7:B3:13:A2
            X509v3 Authority Key Identifier:
                keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:5a:fa:49:9d:ae:d3:7a:f1:63:78:c0:d5:9d:23:10:54:
         f0:a5:cd:8a:5d:ec:29:23:47:c4:de:0c:db:df:ff:62:13:10:
         a5:18:39:b7:94:96:fc:c1:d6:20:00:b0:1a:a6:bd:91:23:ab:
         92:6d:88:be:53:fd:13:32:e1:ba:14:e8:b2:06:25:43:e5:8f:
         82:28:b1:03:38:44:cf:8e:6e:9d:bd:d0:ea:ab:9b:c2:10:60:
         3d:9e:4e:71:f3:44:ed:60:d5:8d:e5:1b:15:60:7f:6a:d5:0c:
         4e:e4:b5:af:bf:b1:a2:ea:00:65:bd:19:32:85:f0:ba:2e:0d:
         65:2d:06:8c:8d:91:f6:a2:d6:44:80:07:1c:a0:2c:3e:30:b6:
         f1:58:fa:b0:0b:a3:61:1d:18:07:18:51:04:6c:4f:d8:db:ca:
         9e:d4:b6:a4:aa:11:06:92:2b:55:d8:39:39:c0:75:08:f8:34:
         4b:9c:8b:85:7b:f2:d0:89:03:8c:f9:43:a4:e2:79:49:49:65:
         81:3d:2c:93:26:dd:69:fe:44:e6:d9:3a:aa:a7:8b:53:66:57:
         4d:7c:f9:ce:7b:05:8f:f1:59:89:72:36:46:6e:77:80:c5:70:
         8e:17:90:80:de:3d:d8:cc:8c:34:29:e4:96:22:24:9f:81:89:
         3f:25:a1:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyM0YxMTAvBgNVBAUTKDJBNTlCOTZDMzBBNTVGQkQ2MUQyMjMwMzczQ0VCODlE
MURCMDFBOEIwHhcNMjUxMjIxMDQ1OTU2WhcNMjUxMjI4MDQ1OTU2WjAYMRYwFAYD
VQQDDA02OTQ3N2VjYy0zNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaRX4KV0ryR9F9PwWuAnr1MIhc25hQONqUvmtyPCjV8HPGWpKMr2mieEihrj
aMPwnuj9Pd5FZ3/Y/RBQXmgW1vHQwz00AaaLhIPKV+T+bmJVvWLlYB0R8tUchfTh
IL3zvjYvtKC1Uo17uRoLe0mxRZ/5JmPVenspmPfZTeI5uppRh15rojtMENuMHPTC
yjdA7qm5ce62nVrl4gdLdoKThixCVvFr5oUjzHQIDF8hpJNeflxMFSeSN9hakLRL
Bvc0WsuplT1gVJT5A2AHdCjG0no67ybRSnGsTJfOa1jxrRh4PjcWctSCunKJ2uCz
KToedVNwhRRM1MrArf0vf/+4AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPT58n2m
8YXQv9pws1+nwEb3sxOiMB8GA1UdIwQYMBaAFCpZuWwwpV+9YdIjA3POuJ0dsBqL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIzRi80RUJBNkIzMkIw
NTMxMUVGOUMyQjhEM0ZDNEY5QUUwMi9LbG01YkRDbFg3MWgwaU1EYzg2NG5SMndH
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tsbTViRENsWDcxaDBpTURjODY0blIyd0dvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTIzRi80RUJBNkIzMkIwNTMxMUVGOUMyQjhEM0ZDNEY5QUUwMi9LbG01YkRDbFg3
MWgwaU1EYzg2NG5SMndHb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbb1r6SZ2u03rxY3jA1Z0jEFTwpc2KXewpI0fE3gzb3/9iExClGDm3
lJb8wdYgALAapr2RI6uSbYi+U/0TMuG6FOiyBiVD5Y+CKLEDOETPjm6dvdDqq5vC
EGA9nk5x80TtYNWN5RsVYH9q1QxO5LWvv7Gi6gBlvRkyhfC6Lg1lLQaMjZH2otZE
gAccoCw+MLbxWPqwC6NhHRgHGFEEbE/Y28qe1LakqhEGkitV2Dk5wHUI+DRLnIuF
e/LQiQOM+UOk4nlJSWWBPSyTJt1p/kTm2Tqqp4tTZldNfPnOewWP8VmJcjZGbneA
xXCOF5CA3j3YzIw0KeSWIiSfgYk/JaHH
-----END CERTIFICATE-----
Generated at Sun Dec 21 15:51:21 2025 by rpki-client