This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          WSc0MW017NtTT1lBpIrPRxO80j/cGTN3L6sDe4MnboM=
Subject key identifier:   F4:8A:37:2E:4B:42:58:08:B3:65:1F:EF:9A:A0:06:4C:F7:0A:1A:7A
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          0118
Signing time:             Mon 15 Dec 2025 04:10:46 +0000
Manifest this update:     Mon 15 Dec 2025 04:10:45 +0000
Manifest next update:     Mon 22 Dec 2025 04:10:45 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: U90z/Cph1tGvbXmIzyb+DiTDTM6T4uCQj1qqrYEF3s4=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: CCiK9Z7hOvpBEdDuVHROFOhxvRBudD3Mcnii4SWAHa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 04:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Dec 15 04:10:45 2025 GMT
            Not After : Dec 22 04:10:45 2025 GMT
        Subject: CN=693f8a45-3142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:e8:89:43:ce:d5:90:d8:ae:fd:7c:c5:fb:
                    4e:74:d6:0b:12:f6:ae:28:43:8a:3e:12:9d:92:76:
                    b8:6b:92:f2:c7:c8:02:51:fe:33:9b:9a:44:98:d2:
                    21:41:36:db:a1:f0:c3:a1:87:9c:5b:23:62:2c:89:
                    b7:f0:80:2a:29:1d:ea:b8:83:40:2a:c5:70:10:29:
                    1e:e6:bf:86:1d:43:41:0a:5d:1d:e3:38:f6:87:a2:
                    9e:a5:59:a9:1c:f3:8f:20:3d:32:b0:22:cf:95:fe:
                    22:56:7c:9c:13:ac:1f:a1:11:ab:a2:04:fe:0c:b1:
                    6e:01:a4:d9:85:06:fd:93:75:1d:85:4b:a9:df:58:
                    f5:1c:81:30:38:dc:00:65:3c:a9:ed:50:a1:f7:09:
                    f3:ec:21:09:b8:30:d8:b2:4f:1b:23:49:77:e4:bf:
                    08:3c:f0:8d:df:c8:5e:36:df:d5:42:b0:ae:18:56:
                    24:4f:d7:c4:0b:10:e5:16:4e:6c:0a:81:ce:14:d8:
                    b1:fe:be:84:8c:3e:d7:0c:51:c7:49:72:d8:4e:38:
                    1a:fb:75:35:80:1a:c6:47:27:11:e1:f0:d1:26:2b:
                    5e:89:da:d1:b9:a9:c3:d9:f0:8a:a9:79:0e:f6:36:
                    ee:c6:0e:71:28:92:8d:c6:53:1a:11:31:91:69:6f:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8A:37:2E:4B:42:58:08:B3:65:1F:EF:9A:A0:06:4C:F7:0A:1A:7A
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ac:72:6c:a4:52:f5:6b:dc:c1:b8:5a:4f:ab:b0:65:0e:28:
         44:88:56:d2:7c:9a:eb:86:af:77:dd:b1:9a:f3:ae:87:15:fd:
         f7:66:1e:51:93:b3:d2:18:3e:3b:13:62:ce:91:1d:77:ce:90:
         c0:ba:a0:e5:5e:71:ab:25:9b:03:9a:9d:fd:d7:ff:1e:18:2b:
         89:fd:33:e3:0f:41:d6:bf:8e:5e:81:86:5b:f8:9e:d5:25:be:
         9d:0f:e3:1f:ae:ef:62:d9:32:c9:18:c4:85:f2:a1:23:a5:98:
         59:18:83:2c:28:91:a4:5f:d9:44:e6:7f:19:99:20:b2:ca:2b:
         ed:69:a3:b1:fd:09:0e:fb:64:70:51:e7:0c:f9:5c:a5:72:4e:
         aa:66:49:e8:ee:8f:cb:8b:13:14:a1:6d:5e:d5:7d:44:63:3a:
         21:62:95:2c:b5:bd:7a:c5:5c:ff:36:d7:b2:d2:33:f0:fd:38:
         e4:c8:da:8f:0c:4a:d9:1b:20:67:03:d4:87:4e:2a:c5:12:62:
         4d:3f:f7:0a:cc:94:ef:90:55:ac:8b:48:27:20:e2:a0:be:fc:
         ed:bc:97:b7:79:a6:59:a6:3e:60:16:18:d4:54:78:36:8a:23:
         95:28:42:52:57:92:ef:f8:a4:12:20:9d:cb:92:25:94:a2:5d:
         e6:92:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:49:14 2025 by rpki-client