This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
File:                     Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json)
Hash identifier:          kJatTIVrpAqDtrNoJ1+UtXRzUUQ4U1T9jDA/C//tPEc=
Subject key identifier:   0D:87:E5:20:01:E6:E8:A5:1A:84:2D:4D:21:CF:D8:CE:57:AC:9A:0F
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Certificate issuer:       /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
Manifest number:          014A
Signing time:             Fri 05 Dec 2025 02:38:05 +0000
Manifest this update:     Fri 05 Dec 2025 02:38:05 +0000
Manifest next update:     Fri 12 Dec 2025 02:38:05 +0000
Files and hashes:         1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: a6njOGsv9a9/j1S1PZVLz5QIfb0gDM53oGlybQ2vpAY=)
                          2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: 5QVyPmB1PRFpCtk6BRZ20HLOXQ8hVyEmcdVKPIlpB7E=)
                          3: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: RlIbmp0Lo/M48Q8XdgnjXEwJZ7614fl+AY4B8ug41tA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
        Validity
            Not Before: Dec  5 02:38:05 2025 GMT
            Not After : Dec 12 02:38:05 2025 GMT
        Subject: CN=6932458d-82aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7c:3a:0c:2a:05:5c:dc:ca:e0:58:ac:29:2f:
                    60:2f:df:4e:d8:cd:f8:16:ee:cb:ca:e5:c9:f0:6c:
                    96:d2:cf:18:56:31:56:06:8c:b0:9b:bd:ca:d3:ef:
                    1d:d3:6b:03:97:1b:27:5a:30:10:f1:96:64:fe:ff:
                    b4:e0:d2:d9:4f:8c:67:b1:c6:83:49:ad:f2:45:08:
                    0f:1b:94:6f:22:e7:67:e2:51:ff:68:46:7d:21:ba:
                    68:a3:85:44:5c:52:35:45:0d:f6:83:7c:4d:7d:c4:
                    6b:fc:36:81:a9:a2:e3:11:2e:0f:d9:48:bf:13:cc:
                    2a:bb:dc:7f:fa:de:81:49:14:95:8d:d7:25:59:8a:
                    6c:24:d1:1f:9f:54:0c:9a:bd:fd:2c:91:2b:e7:8a:
                    f4:5e:e4:82:c3:e1:fb:f6:53:d7:41:ad:d3:a9:96:
                    8d:08:3e:73:68:87:a6:d9:1f:5c:e1:14:ff:b0:95:
                    fc:ea:67:ef:89:01:3a:a0:81:a2:2d:e4:81:a7:c9:
                    fe:6a:26:ac:77:70:df:5d:25:2b:0b:1a:09:ba:62:
                    6e:13:f3:ef:fc:ba:00:0d:55:52:1b:fc:d5:32:a5:
                    65:44:b3:92:2b:e2:12:a7:4c:7f:f8:f8:26:f6:ec:
                    fb:fc:4f:07:1d:92:91:c9:17:b5:25:bd:10:65:ca:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:87:E5:20:01:E6:E8:A5:1A:84:2D:4D:21:CF:D8:CE:57:AC:9A:0F
            X509v3 Authority Key Identifier:
                keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5e:d6:62:d1:8c:3f:e0:13:56:30:01:60:e2:fd:32:9b:c5:
         ef:97:7a:9f:aa:c8:dc:d4:1e:70:4c:8b:5f:39:be:0f:2f:49:
         32:23:0b:d5:bc:90:d8:56:46:24:27:cd:47:c0:8c:17:ff:34:
         13:43:b5:80:39:5e:20:89:7f:6e:ea:88:ae:3a:e0:51:4c:07:
         22:ea:a0:52:d3:1d:79:19:59:84:1d:4f:15:b3:07:4b:8a:57:
         a1:d7:90:b3:35:f2:62:d2:ee:22:a6:43:ae:47:28:9d:52:85:
         22:14:ed:6a:b5:b7:41:bb:ff:90:e7:b4:47:b3:2b:18:fd:26:
         93:85:9e:29:d0:2a:1b:1b:35:58:16:b4:2e:86:fa:fd:d0:ec:
         c1:99:ab:b2:b9:9b:11:3f:6e:e5:6b:c7:e3:46:70:24:8b:a1:
         ea:a1:11:4a:5f:00:4c:5a:27:ab:02:81:b3:92:2b:7c:16:b8:
         25:9f:90:2c:e2:b4:35:63:57:e1:88:e6:be:68:19:be:47:f9:
         8d:78:71:81:ed:33:bd:53:61:21:c2:34:58:e1:78:11:23:ae:
         19:f1:b8:51:06:b7:21:3e:b7:b9:1c:c5:32:d8:61:5a:56:c7:
         34:0a:e6:e7:90:a9:19:a9:ff:0c:65:8d:33:ac:33:34:1f:3a:
         b2:af:2f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:05:25 2025 by rpki-client