This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
File:                     bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json)
Hash identifier:          bON45rcRx5lMCzahcACfDGqDiH4pNn6q0wzhdk5hgIM=
Subject key identifier:   EA:A7:31:C4:CE:D8:58:B1:7C:C7:9F:C8:26:9F:22:13:5A:7C:48:48
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Certificate issuer:       /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial:       1352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
Manifest number:          134A
Signing time:             Sat 06 Dec 2025 16:33:05 +0000
Manifest this update:     Sat 06 Dec 2025 16:33:04 +0000
Manifest next update:     Sat 13 Dec 2025 16:33:04 +0000
Files and hashes:         1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: h474CUOQ63DyADbnKlriYOH+sHBOBRDGGEmlJY2M7yw=)
                          2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: RbGdGirRSx8vE2XqFSZoMmFoNMFa3vRAZrBLRz09P8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
                          rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4946 (0x1352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
        Validity
            Not Before: Dec  6 16:33:04 2025 GMT
            Not After : Dec 13 16:33:04 2025 GMT
        Subject: CN=69345ac0-f060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:60:09:6e:63:40:6f:6f:55:22:bb:60:04:
                    e0:d6:f1:31:2f:75:fd:2c:56:b3:bd:c2:59:ce:4a:
                    40:8f:34:68:64:20:d8:37:99:4d:6c:f5:4a:c5:69:
                    a7:17:a9:db:55:be:db:5c:de:19:69:9b:e1:5a:84:
                    35:30:5c:9f:07:91:bf:15:02:2a:12:2f:01:bb:d5:
                    08:db:b0:fd:24:ea:e2:2a:43:3b:b9:fc:74:17:5b:
                    72:fc:9d:21:53:68:62:b7:c8:46:4d:c7:4e:f4:49:
                    10:e0:d6:d7:0a:75:8e:68:48:f8:4b:ce:a4:31:c5:
                    bf:4e:b1:fb:a7:9e:c2:0f:e2:d4:5e:a3:ec:26:d4:
                    1c:d7:8f:01:5d:26:f5:8d:13:b6:db:b7:0e:e0:45:
                    62:d5:da:d7:aa:cf:bd:78:34:d5:87:9f:5a:2d:3d:
                    41:c2:b3:94:b6:66:24:15:b1:20:98:9f:1f:15:70:
                    24:c0:1f:94:a9:93:ad:43:ef:bd:42:e3:5f:a9:01:
                    78:6d:d1:8d:a4:e8:73:e5:fc:40:6d:fe:77:f8:e2:
                    79:7b:d9:07:94:8f:05:d7:d6:a7:78:e3:c0:04:0a:
                    d2:75:40:bf:c9:cf:21:fb:54:3f:00:7a:9f:8a:57:
                    ad:52:a2:73:69:ba:00:54:cf:53:6c:02:b1:6e:f8:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:31:C4:CE:D8:58:B1:7C:C7:9F:C8:26:9F:22:13:5A:7C:48:48
            X509v3 Authority Key Identifier:
                keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4f:8f:5b:9f:c6:e0:64:07:12:4a:ec:e4:2d:88:9a:34:ef:
         d1:4d:16:bc:4b:e0:37:9d:54:87:0d:1d:79:b3:cc:97:39:8c:
         2a:75:65:3a:f9:eb:c1:98:dc:c2:22:1e:24:76:ad:0d:bf:33:
         ed:8d:25:1c:6a:2e:6d:7d:e3:13:85:54:8e:8e:52:12:73:e2:
         99:be:0f:91:a1:89:aa:58:f0:85:81:79:ed:0c:b8:43:fd:30:
         f6:2b:ae:f5:6b:c3:97:50:a4:70:4f:df:c2:ce:08:85:eb:45:
         35:3e:93:84:5e:2a:a5:b2:a8:6b:c2:c5:af:85:95:14:c4:3d:
         f3:35:ed:91:47:73:fb:88:84:b2:0a:aa:62:c0:fc:df:84:04:
         0e:3e:f3:40:6c:98:a6:98:0a:42:74:f4:42:bc:ad:6c:0f:c2:
         50:73:ff:e8:d7:a5:bb:ad:89:ae:91:a4:ef:91:55:ff:2e:dd:
         e6:ea:42:a9:2b:67:5f:21:04:f3:7d:e7:b0:83:93:95:49:34:
         07:9b:8d:80:4b:df:29:57:03:59:d7:f7:a4:05:23:09:a2:e5:
         41:08:b3:5e:18:0c:87:f0:4d:2b:fb:c0:1b:d6:c8:04:fb:8f:
         69:45:71:20:b2:4e:99:d7:a6:8f:15:e8:f5:1b:6b:27:17:01:
         cf:08:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:10:37 2025 by rpki-client