This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File:                     KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier:          GtQqd1c0J3OCtsNvOjeO/hUdtuff1bXd6nft0wVFa+s=
Subject key identifier:   23:43:B8:EE:1E:7B:4F:D7:54:9C:FD:44:DF:08:79:F3:6C:C1:AE:46
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer:       /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial:       0720
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number:          0715
Signing time:             Sat 06 Dec 2025 20:50:54 +0000
Manifest this update:     Sat 06 Dec 2025 20:50:53 +0000
Manifest next update:     Sat 13 Dec 2025 20:50:53 +0000
Files and hashes:         1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: CnUqraP+fLzwXPthXhLJHGQRyoNfXL5Z710L/Qyq5ik=)
                          2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: U9jox4hBqmt6Ecd6jG1wCd/lzs7u1yZA99lQIN9ctng=)
                          3: 9398F508619611EBA485B448C4F9AE02.roa (hash: CFEUDF+dG6qKnpU1eHBX9Jqx9Z184q8fTNLy6tKeF1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
                          rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
        Validity
            Not Before: Dec  6 20:50:53 2025 GMT
            Not After : Dec 13 20:50:53 2025 GMT
        Subject: CN=6934972d-a77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f2:eb:9c:8e:50:f2:b5:76:30:d6:72:27:e0:
                    e2:18:3b:d7:a1:42:fa:77:75:e1:19:97:04:01:07:
                    34:75:0d:c9:05:44:9c:05:b3:74:80:cc:1a:54:76:
                    41:62:c2:e4:8b:0f:1a:1a:c2:37:84:21:bc:46:82:
                    a3:4a:23:8b:62:18:d1:54:ad:9f:97:4b:04:fc:82:
                    b7:6a:55:85:55:82:f9:48:2c:17:97:4e:23:83:8c:
                    6e:09:af:d9:30:80:2b:4c:a0:a9:06:d4:4e:1d:71:
                    3e:4e:86:16:23:2a:ae:50:1f:d7:61:79:46:88:6a:
                    7e:99:83:d8:d4:06:0e:2c:ef:b5:f2:83:ba:26:2b:
                    8d:ee:7c:17:e5:37:bc:4b:bd:8d:48:55:a0:f5:3a:
                    be:10:12:44:49:51:10:1a:ce:d9:70:b2:0c:f4:23:
                    9e:f4:90:e7:d4:da:84:2e:39:72:0b:d0:4b:0f:a4:
                    26:a6:e4:5d:5c:7f:15:0d:47:86:9a:76:40:db:64:
                    ab:57:44:d9:1d:3a:0d:fd:d0:47:48:ae:4c:ef:0f:
                    04:62:14:47:d8:ac:a8:83:15:57:6a:69:71:0c:16:
                    30:e7:5c:b2:1a:3e:29:a1:ec:f0:14:80:bc:b1:28:
                    fa:ff:f9:11:b6:f7:17:0f:57:30:31:4a:a4:9e:40:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:43:B8:EE:1E:7B:4F:D7:54:9C:FD:44:DF:08:79:F3:6C:C1:AE:46
            X509v3 Authority Key Identifier:
                keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:26:03:75:07:4b:41:18:de:fa:f6:92:20:59:e6:44:03:
         29:9a:85:d5:a5:fb:2a:14:1a:b8:10:df:41:1b:e5:b9:c7:16:
         aa:ce:be:04:4f:ff:0d:0a:19:d9:dd:b7:86:3d:8c:77:99:64:
         eb:a9:9e:6c:05:5d:27:83:44:d8:78:d7:9c:47:db:6e:02:a7:
         f1:92:0d:e3:41:90:7a:27:4b:a9:60:8a:3f:ab:4c:ba:4e:5a:
         d0:52:3f:b1:a6:83:04:3c:3c:b6:22:c8:88:bc:19:3b:29:a3:
         be:75:1e:32:a4:82:00:41:44:f5:19:f6:e8:eb:29:fd:d6:ec:
         8c:37:b9:7f:5c:a1:c1:b7:f2:93:13:f5:63:11:9f:05:f9:03:
         2d:82:9b:14:5b:e6:92:45:a1:44:1d:48:56:13:f4:4b:71:c0:
         66:37:39:d3:cf:b1:60:85:24:c1:b9:a6:3a:63:2e:7a:dd:47:
         aa:66:9d:37:0b:05:3f:37:86:e7:81:27:e7:0f:58:86:7c:36:
         26:a6:96:04:13:aa:31:6f:b2:e9:9c:b2:15:33:74:a5:91:21:
         32:6f:86:ba:67:03:6b:59:08:16:a7:e5:3e:98:f8:21:09:b2:
         81:39:0f:57:78:65:3d:82:1b:b4:c1:33:e4:fe:8d:3c:79:b3:
         79:d8:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:58:29 2025 by rpki-client