This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File:                     kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier:          fIDIXmNfh1L/QqIiS4q6nYOX+FoIQ9GZi3L7oCaeaRE=
Subject key identifier:   51:C0:08:A0:14:C6:59:74:5E:A4:29:EF:3C:F8:4E:D7:D8:FE:42:81
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer:       /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number:          F0
Signing time:             Sun 21 Dec 2025 04:28:12 +0000
Manifest this update:     Sun 21 Dec 2025 04:28:11 +0000
Manifest next update:     Sun 28 Dec 2025 04:28:11 +0000
Files and hashes:         1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: 47MaKcA5FMURW2Tvhy/x4d508AOb3PBqaE4mY7XSgFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
        Validity
            Not Before: Dec 21 04:28:11 2025 GMT
            Not After : Dec 28 04:28:11 2025 GMT
        Subject: CN=6947775c-8c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:11:79:03:61:c0:31:a2:a2:46:48:7a:c0:
                    25:94:e9:3a:7d:4c:15:8c:a3:6e:81:33:14:ca:2a:
                    7b:c3:37:6d:b4:88:8c:b8:50:73:d7:9d:8e:6d:4f:
                    0a:59:58:3b:c1:3f:45:4c:a3:53:bd:c6:66:d3:96:
                    bf:27:41:c9:fe:a0:ce:1b:82:ac:7b:fb:33:de:f4:
                    6f:fc:17:b8:d4:e9:73:10:a8:fa:98:c7:94:74:98:
                    4e:52:13:b1:9d:68:31:cf:65:01:c5:a0:34:e7:0f:
                    4e:13:86:2c:17:ee:97:49:61:e9:7d:49:0f:87:73:
                    d0:b5:33:78:24:45:c0:86:0a:ce:50:ff:3a:77:a6:
                    ca:3b:b6:f2:11:19:72:4b:fd:bf:ae:07:99:73:80:
                    28:4b:6c:79:fd:77:e5:27:a6:e4:b1:d2:33:7b:fd:
                    90:c0:5a:90:06:f6:6a:ea:ec:ab:de:a1:33:c1:fa:
                    97:73:98:88:01:ba:b6:3a:87:69:20:1a:f5:c3:11:
                    98:b2:5e:d2:6e:c4:9e:2e:4c:68:0c:15:58:1b:5f:
                    a7:96:87:66:23:3e:5a:92:ec:0b:45:eb:16:da:88:
                    4e:b8:75:eb:4c:db:dd:28:5a:cd:bc:29:b6:d4:97:
                    0d:e1:66:55:7f:16:68:e7:3c:b4:60:25:97:8d:cd:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C0:08:A0:14:C6:59:74:5E:A4:29:EF:3C:F8:4E:D7:D8:FE:42:81
            X509v3 Authority Key Identifier:
                keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:0a:01:4c:48:e3:df:4d:97:9d:65:8f:4f:76:6d:8d:2a:
         37:6d:c6:49:70:83:b6:11:f9:e4:86:52:8a:11:59:35:14:a9:
         05:5a:02:81:08:9e:cd:d9:2d:cb:2d:96:3b:50:7a:4a:19:16:
         05:35:e0:a7:59:ee:f7:7a:56:f9:7b:68:f0:fc:8a:fb:c0:b8:
         b5:06:17:fc:41:43:7d:59:3e:0e:1a:58:4f:49:9f:5e:c8:ee:
         17:00:51:7a:43:67:5e:50:c9:06:4a:ce:71:0f:0e:4e:11:bf:
         a2:95:de:44:15:1c:1c:76:e7:05:bc:a8:21:48:b4:38:a7:06:
         a0:a5:bd:09:1d:21:bc:d6:fb:82:dd:01:44:3c:c5:09:c4:28:
         64:55:d3:e9:f7:d2:b6:75:d2:c0:17:1e:68:e6:b0:85:35:6c:
         e0:0f:cb:fc:1c:2a:99:ce:fa:2c:d9:ed:d2:49:fe:44:dd:3c:
         c7:69:ef:cb:48:9f:6b:cb:56:d5:7d:45:26:c6:7f:8a:00:30:
         5f:e8:14:41:fa:2f:80:9e:1a:6f:1f:76:3c:c8:4b:e4:f1:4c:
         e6:e0:6a:8f:37:5a:b7:dd:2e:36:49:2a:2b:e0:a1:88:8b:7b:
         f8:91:56:13:4d:d7:6a:ed:50:02:02:9c:1f:f8:c5:35:1e:26:
         c5:50:37:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU4MDYxMTAvBgNVBAUTKDkxNDZCNzgyRUI4MjQ2N0IxOUQ4QjQxRDFDQzQwRUJG
MDQ4OTkwNjYwHhcNMjUxMjIxMDQyODExWhcNMjUxMjI4MDQyODExWjAYMRYwFAYD
VQQDDA02OTQ3Nzc1Yy04YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmOoReQNhwDGiokZIesAllOk6fUwVjKNugTMUyip7wzdttIiMuFBz152ObU8K
WVg7wT9FTKNTvcZm05a/J0HJ/qDOG4Kse/sz3vRv/Be41OlzEKj6mMeUdJhOUhOx
nWgxz2UBxaA05w9OE4YsF+6XSWHpfUkPh3PQtTN4JEXAhgrOUP86d6bKO7byERly
S/2/rgeZc4AoS2x5/XflJ6bksdIze/2QwFqQBvZq6uyr3qEzwfqXc5iIAbq2Oodp
IBr1wxGYsl7SbsSeLkxoDBVYG1+nlodmIz5akuwLResW2ohOuHXrTNvdKFrNvCm2
1JcN4WZVfxZo5zy0YCWXjc1nKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHACKAU
xll0XqQp7zz4TtfY/kKBMB8GA1UdIwQYMBaAFJFGt4LrgkZ7Gdi0HRzEDr8EiZBm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9EMEM1RjRFMjZF
OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Juc1oyTFFkSE1RT3Z3U0pr
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTgwNi9EMEM1RjRFMjZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Ju
c1oyTFFkSE1RT3Z3U0prR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUPQoBTEjj302XnWWPT3ZtjSo3bcZJcIO2EfnkhlKKEVk1FKkFWgKB
CJ7N2S3LLZY7UHpKGRYFNeCnWe73elb5e2jw/Ir7wLi1Bhf8QUN9WT4OGlhPSZ9e
yO4XAFF6Q2deUMkGSs5xDw5OEb+ild5EFRwcducFvKghSLQ4pwagpb0JHSG81vuC
3QFEPMUJxChkVdPp99K2ddLAFx5o5rCFNWzgD8v8HCqZzvos2e3SSf5E3TzHae/L
SJ9ry1bVfUUmxn+KADBf6BRB+i+AnhpvH3Y8yEvk8Uzm4GqPN1q33S42SSor4KGI
i3v4kVYTTddq7VACApwf+MU1HibFUDeP
-----END CERTIFICATE-----
Generated at Mon Dec 22 05:19:14 2025 by rpki-client