This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
File:                     kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json)
Hash identifier:          ntjfbg5xnJ1G/GhEss5UbFaxDbnZc04c+vAvD65Ugmk=
Subject key identifier:   8C:FA:1D:C4:7D:A2:29:9F:05:DD:BE:83:3C:AA:85:3A:FC:8F:AA:2F
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Certificate issuer:       /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial:       0A51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
Manifest number:          0A41
Signing time:             Sat 06 Dec 2025 15:48:54 +0000
Manifest this update:     Sat 06 Dec 2025 15:48:54 +0000
Manifest next update:     Sat 13 Dec 2025 15:48:54 +0000
Files and hashes:         1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: jm7DuMPvAFmtD7s0G7kVBlDJ1256V1fQnXSbcRYPQwg=)
                          2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=)
                          3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
        Validity
            Not Before: Dec  6 15:48:54 2025 GMT
            Not After : Dec 13 15:48:54 2025 GMT
        Subject: CN=69345066-4230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:83:50:f6:fd:f9:36:97:47:f3:43:50:9e:
                    97:de:3e:02:39:d0:1d:d8:aa:41:a3:6f:d3:08:0d:
                    91:35:94:97:18:3e:86:ef:45:c3:f6:9e:d1:7d:bc:
                    c2:11:3f:36:cb:8b:94:e9:a2:31:5b:b6:0a:8d:ce:
                    bd:04:2b:ff:a3:a3:86:ff:e8:78:8d:13:6d:c4:49:
                    1f:71:3d:96:0d:97:4f:46:37:f8:72:2d:40:ef:54:
                    ac:94:26:07:98:8c:6a:f0:73:1d:57:43:7c:d9:17:
                    dc:26:0a:51:6b:94:2a:87:b2:f6:9c:2e:28:cd:ac:
                    5a:12:c3:80:d4:27:dc:95:c8:b5:ea:94:99:fa:ff:
                    3f:39:cc:34:a8:9a:51:df:e5:23:e8:ed:99:07:95:
                    ef:17:9b:64:7a:ef:94:cf:a0:30:fd:d5:4d:0e:6f:
                    a2:b5:78:49:60:d4:91:9e:ab:bd:d0:c0:38:b4:83:
                    4d:15:8d:a3:3b:a5:ce:4c:a2:99:2f:1b:3f:f5:2f:
                    4a:5a:10:1d:82:e2:36:7b:26:8f:18:e4:94:35:63:
                    71:09:93:0d:9e:3c:76:22:7f:0b:31:85:ca:1b:2d:
                    59:df:24:fc:10:d9:2f:75:45:56:a9:9c:4b:16:f3:
                    1c:1c:4c:13:07:ef:bb:3a:41:83:36:43:34:35:7f:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FA:1D:C4:7D:A2:29:9F:05:DD:BE:83:3C:AA:85:3A:FC:8F:AA:2F
            X509v3 Authority Key Identifier:
                keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:7b:c0:2f:93:e8:f2:80:35:d1:b6:be:82:34:78:f6:65:
         93:86:a6:a8:77:8a:72:e0:e8:59:dd:ed:8c:95:71:d8:b5:63:
         ac:99:bb:20:79:59:d1:33:88:22:e4:c1:70:a9:51:d8:74:d7:
         1d:75:23:d9:e3:f8:14:8e:15:14:3e:c8:a8:ea:2c:71:44:34:
         40:df:3d:0a:2d:4e:4e:1e:b1:b1:8f:b0:88:40:86:14:e2:b1:
         72:ce:76:2d:9b:67:c8:a3:2c:82:57:b3:98:94:9b:bf:6a:11:
         1a:c5:a2:19:08:0c:c0:67:63:36:10:05:07:8b:d8:0b:a8:b9:
         36:6f:30:b5:05:4b:6f:9a:10:71:61:da:07:6b:da:70:2f:ca:
         0f:d8:3d:80:93:57:b0:6e:4d:da:23:4a:ea:6b:cd:01:2d:db:
         ee:51:83:b9:ef:ca:0a:a6:5e:03:1f:a7:35:b1:26:75:e5:bf:
         92:54:0f:6c:64:6a:f5:5b:68:53:45:cd:ce:0f:6a:4d:54:20:
         b8:ba:9b:03:bb:e9:56:26:93:40:2f:9c:69:b2:8c:d8:dc:50:
         f7:ee:90:84:de:4b:f8:d7:ce:f9:b8:65:2c:20:6d:28:53:68:
         0b:37:7f:cf:fe:bd:16:42:fd:55:3b:40:a6:1d:73:13:45:81:
         df:66:b9:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICClEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx
MzE3NEJGQTcwHhcNMjUxMjA2MTU0ODU0WhcNMjUxMjEzMTU0ODU0WjAYMRYwFAYD
VQQDEw02OTM0NTA2Ni00MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNWDUPb9+TaXR/NDUJ6X3j4COdAd2KpBo2/TCA2RNZSXGD6G70XD9p7RfbzC
ET82y4uU6aIxW7YKjc69BCv/o6OG/+h4jRNtxEkfcT2WDZdPRjf4ci1A71SslCYH
mIxq8HMdV0N82RfcJgpRa5Qqh7L2nC4ozaxaEsOA1Cfclci16pSZ+v8/Ocw0qJpR
3+Uj6O2ZB5XvF5tkeu+Uz6Aw/dVNDm+itXhJYNSRnqu90MA4tINNFY2jO6XOTKKZ
Lxs/9S9KWhAdguI2eyaPGOSUNWNxCZMNnjx2In8LMYXKGy1Z3yT8ENkvdUVWqZxL
FvMcHEwTB++7OkGDNkM0NX90fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz6HcR9
oimfBd2+gzyqhTr8j6ovMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF
RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN
ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnnXvAL5Po8oA10ba+gjR49mWThqaod4py4OhZ3e2MlXHYtWOsmbsg
eVnRM4gi5MFwqVHYdNcddSPZ4/gUjhUUPsio6ixxRDRA3z0KLU5OHrGxj7CIQIYU
4rFyznYtm2fIoyyCV7OYlJu/ahEaxaIZCAzAZ2M2EAUHi9gLqLk2bzC1BUtvmhBx
YdoHa9pwL8oP2D2Ak1ewbk3aI0rqa80BLdvuUYO578oKpl4DH6c1sSZ15b+SVA9s
ZGr1W2hTRc3OD2pNVCC4upsDu+lWJpNAL5xpsozY3FD37pCE3kv41875uGUsIG0o
U2gLN3/P/r0WQv1VO0CmHXMTRYHfZrm2
-----END CERTIFICATE-----
Generated at Sun Dec 7 15:07:17 2025 by rpki-client