This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File:                     KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier:          GK9+5ZJTaR6hkynSJjttp3Zlrdqch37pGNX9VswvbOE=
Subject key identifier:   A0:95:B6:68:F2:32:A2:6B:37:FF:84:B6:D8:78:2A:D2:8F:B0:52:AC
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer:       /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number:          76
Signing time:             Fri 05 Dec 2025 04:47:12 +0000
Manifest this update:     Fri 05 Dec 2025 04:47:11 +0000
Manifest next update:     Fri 12 Dec 2025 04:47:11 +0000
Files and hashes:         1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: pDduxBCdrycl0qPwFIhP2Kgq2h1EAHZiHRyAEgfBb2k=)
                          2: FAA72960259911F0953E0023C4F9AE02.roa (hash: e7nzxpCTQBDCIg5PEDtZeqSUVMOKuiFn7Ttj5SwjEWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
                          rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
        Validity
            Not Before: Dec  5 04:47:11 2025 GMT
            Not After : Dec 12 04:47:11 2025 GMT
        Subject: CN=693263cf-f6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:50:2c:d3:00:4a:41:3c:50:71:41:4f:f6:
                    0c:50:b9:ef:a4:3d:91:48:30:63:93:4d:1f:07:39:
                    1c:6b:82:c7:14:ba:76:9c:a9:2a:a0:2d:e7:9e:ed:
                    7c:ad:31:59:8b:36:ed:11:16:5e:f7:15:a1:b1:d7:
                    43:08:28:db:d3:6f:2b:15:61:47:d9:4f:46:ee:ff:
                    de:9a:25:05:e4:fd:c1:4c:c8:a3:a4:6e:23:af:9c:
                    3b:9a:df:88:ca:58:5e:eb:f3:7f:3c:5f:b4:f7:bf:
                    8f:be:69:1c:b9:b7:e2:79:f9:22:6a:7a:f5:75:2a:
                    d8:41:46:a1:b8:9a:48:0e:80:62:b0:20:d5:1e:4b:
                    fd:48:95:9a:d6:34:ea:f0:6b:80:49:f5:e3:5a:7e:
                    b7:cd:65:84:fb:e7:8a:de:d9:8f:e9:50:80:00:54:
                    8e:cd:d3:df:1d:b3:9e:48:06:22:6d:49:c8:de:3c:
                    f2:85:bf:1c:6e:5b:f9:a4:17:ad:c5:87:02:57:2c:
                    2b:95:17:df:2c:71:56:05:04:df:a2:c6:76:bd:ec:
                    7c:9e:41:88:0b:4f:c1:de:e4:95:a6:be:2d:6d:0b:
                    2c:da:6c:2b:c1:e9:a9:70:33:2c:8e:1a:22:77:da:
                    9c:30:34:43:7e:d1:cb:97:26:79:d2:89:96:50:30:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:95:B6:68:F2:32:A2:6B:37:FF:84:B6:D8:78:2A:D2:8F:B0:52:AC
            X509v3 Authority Key Identifier:
                keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:4a:8f:28:04:ce:72:83:a5:73:44:98:a6:d2:86:96:5e:30:
         d6:22:55:29:e7:b5:84:a7:f1:71:21:02:68:aa:69:d3:81:6f:
         f2:f7:7f:2b:33:b0:da:18:7b:db:f3:db:b7:7b:77:f8:f3:e7:
         76:e0:91:d0:52:b9:ae:48:73:e2:b6:66:84:db:1d:99:0e:30:
         e8:86:ff:85:12:02:7a:99:7a:9c:6a:24:cd:ac:c0:c9:74:ec:
         9a:0e:42:da:5a:9f:d0:a0:45:0f:71:13:ee:e4:b3:9b:79:f3:
         45:56:6e:71:47:36:fd:26:4e:a2:21:29:72:67:e0:2a:cf:0d:
         32:a9:1b:3d:56:a4:6c:f5:32:5b:59:ad:0b:1f:a9:62:dd:d5:
         8d:e3:e1:69:a4:bb:39:41:00:9b:b0:c3:5b:43:be:76:7d:53:
         f5:a6:a5:05:29:2c:15:de:ca:c4:71:3e:38:e7:c8:9a:8c:d5:
         b7:fa:b5:ea:80:93:2e:21:29:58:41:1f:b5:ba:a8:52:4e:53:
         53:ea:13:e5:c5:1a:62:ac:31:19:ee:9c:f0:86:a1:21:1e:7c:
         35:01:88:14:c6:9e:1e:2c:5c:ea:19:e0:04:07:43:7e:77:f2:
         57:52:c0:6b:4a:65:25:de:24:fb:c5:12:7f:b8:22:7c:af:ad:
         18:38:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:07 2025 by rpki-client