This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File:                     kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier:          r9TASQ7i/ec3VeY16/qXCU+M2Av3ryfJ7d1yX8lYXZs=
Subject key identifier:   91:29:B5:C3:37:A2:5C:20:FB:12:3A:EA:25:72:5E:4D:CA:59:C6:EA
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       105B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number:          103C
Signing time:             Thu 04 Dec 2025 17:00:18 +0000
Manifest this update:     Thu 04 Dec 2025 17:00:18 +0000
Manifest next update:     Thu 11 Dec 2025 17:00:18 +0000
Files and hashes:         1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: FfizyyCoJt8IcE2dO6oViOKDC7/ygkwN3ziWkDW5ZE0=)
                          2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: b5DdIZNxNs7SwL8wjURZkRL1TSIObO5dLWDMjnjAx3A=)
                          3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: PaWzEjqV0/ZjDMICjXWt//TzGL+Dv5IFMyDSpR6aZdg=)
                          4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fGi0j+kZLxX+sDKoi6qsiuh9Ro/0HWo7bGmH8+R6rpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4187 (0x105b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Dec  4 17:00:18 2025 GMT
            Not After : Dec 11 17:00:18 2025 GMT
        Subject: CN=6931be22-1a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:b0:00:d6:4d:5d:22:02:62:fc:55:8b:88:
                    15:f5:fb:bd:a9:07:f2:10:a0:62:40:13:ee:9a:ab:
                    f3:6d:2e:29:65:e2:08:bc:5d:f6:6c:a6:39:75:32:
                    ef:9a:50:e5:c4:e8:8d:c3:b0:61:e5:dd:1c:30:cd:
                    ce:e1:1e:d0:33:bb:11:9b:03:c6:95:21:c4:0a:35:
                    e7:ae:91:40:05:e0:dd:e8:e4:e7:26:22:da:c9:09:
                    7b:86:07:f4:98:11:11:6c:77:a0:94:fa:ec:48:b8:
                    9f:74:1f:e0:a3:2a:f6:43:87:e1:c6:a0:46:32:8b:
                    5c:4c:53:d8:2a:55:77:ee:fb:9b:88:79:6f:9f:6b:
                    2d:e1:86:60:5e:8f:af:91:73:89:2c:96:95:23:c2:
                    d0:70:76:40:5e:df:1d:ef:a2:29:80:72:39:09:08:
                    90:e4:a2:8d:c3:4c:a7:75:fb:d6:95:b3:6f:3f:b1:
                    da:18:63:ad:b3:1f:20:2f:9a:da:4a:69:93:7d:e3:
                    34:41:dc:20:fc:36:50:a9:1b:2e:6c:f5:33:f5:03:
                    b0:e2:c4:27:81:23:0c:3d:9e:00:4a:86:89:96:79:
                    62:46:fe:60:08:55:bb:fb:77:29:36:46:08:24:a9:
                    7f:7c:96:5c:c1:71:df:f0:e2:36:fe:ff:8c:7e:03:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:B5:C3:37:A2:5C:20:FB:12:3A:EA:25:72:5E:4D:CA:59:C6:EA
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5b:c7:60:3f:7b:e3:f0:ed:f8:42:a0:1d:27:49:43:5b:8b:
         8b:dd:1a:20:aa:58:f8:ea:75:19:60:33:66:a2:b1:7e:d9:3c:
         f3:d3:61:9a:38:3e:51:50:ea:38:82:79:49:bd:66:0e:47:7c:
         80:94:ee:57:91:7b:74:03:d3:05:aa:1e:8a:4a:c6:99:e2:68:
         3c:77:3e:1e:3e:8f:ca:53:26:1f:65:c2:55:6d:20:3c:02:45:
         a9:a6:03:63:97:ea:72:7d:73:84:27:f7:79:e2:2f:f5:8f:bf:
         e8:aa:33:8b:4a:a5:e5:eb:7c:72:93:f5:7a:19:6e:a1:6a:95:
         33:89:c1:81:89:64:ab:16:d8:d3:3a:92:ea:85:c3:70:f1:db:
         5e:a8:ce:c8:b5:b3:e0:1c:db:b7:c7:08:3b:94:b2:0b:6f:59:
         06:d9:f9:7e:78:e0:f4:24:d0:67:ad:c8:43:e7:a5:87:fa:1a:
         ca:78:19:9e:20:28:93:19:e0:ea:a1:c5:48:a8:50:70:a9:fa:
         24:0e:61:d5:f2:a8:cb:b4:b3:cc:84:9b:93:9a:2e:b3:74:4d:
         a6:80:26:02:60:2f:1f:46:07:98:8a:0a:24:a2:71:4e:77:ab:
         df:e3:68:82:82:b8:42:b7:46:77:31:09:02:8a:b5:fe:c8:88:
         f2:ec:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:53 2025 by rpki-client