This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
File:                     kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json)
Hash identifier:          ZBB7NLezCct6uIb+8xa2PXnsuFG666irf5hjjQuo+1k=
Subject key identifier:   5A:D3:D5:45:38:19:32:13:23:ED:4E:05:55:1E:77:05:60:C7:87:28
Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Certificate issuer:       /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
Manifest number:          0114
Signing time:             Fri 05 Dec 2025 02:54:17 +0000
Manifest this update:     Fri 05 Dec 2025 02:54:16 +0000
Manifest next update:     Fri 12 Dec 2025 02:54:16 +0000
Files and hashes:         1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: Fh1Y4o35fRNP7EoA7IbCl2Po8HpVzUmNQIDQ5o+ld7c=)
                          2: 6B9D491C379A11F0B3AC7740C4F9AE02.roa (hash: RLph3rOI+XvGrIXc+VEb/mig9QwsOBw+jIRI25aGTLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
        Validity
            Not Before: Dec  5 02:54:16 2025 GMT
            Not After : Dec 12 02:54:16 2025 GMT
        Subject: CN=69324959-cf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:41:d5:f0:b7:26:00:be:04:99:73:72:be:
                    4b:be:03:7a:82:89:36:5c:b6:f5:87:4e:9a:cf:42:
                    b3:b8:2b:e1:47:25:6a:b6:83:11:49:a4:26:81:8f:
                    6e:1e:5c:b6:be:46:de:c1:71:a4:4f:47:aa:c8:18:
                    97:f0:24:a6:05:19:86:4c:21:2f:c0:ce:c5:7b:32:
                    31:9e:0c:31:2b:21:f3:e7:c7:63:6b:61:8f:ec:97:
                    1a:69:d4:f1:c5:c1:23:97:2e:d3:46:14:8a:a0:db:
                    1d:81:9c:dc:d0:e9:27:97:d3:d3:75:3d:c8:15:41:
                    b1:4d:b0:d2:f3:fd:33:50:f5:f2:1e:05:11:d1:e0:
                    80:36:ac:6a:58:1e:3f:ca:5e:9f:68:b7:15:60:fa:
                    7a:68:f6:22:f5:b3:70:c7:f2:18:15:cc:a1:a8:4e:
                    5c:50:9b:ce:b9:3f:f1:95:c5:28:7a:f4:ab:29:94:
                    61:b7:5d:27:b0:79:e3:fa:e1:54:08:06:46:71:92:
                    7a:2b:bf:7d:8c:31:5d:7f:2a:5c:2a:78:a9:4f:78:
                    48:95:e3:60:28:41:89:06:15:dd:de:fe:a0:f0:7d:
                    c3:77:f8:7b:96:90:82:80:3f:8e:ad:00:fe:da:54:
                    58:0b:9a:44:52:2c:88:b3:b8:e6:05:33:fc:d3:a3:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:D5:45:38:19:32:13:23:ED:4E:05:55:1E:77:05:60:C7:87:28
            X509v3 Authority Key Identifier:
                keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b7:5e:4f:83:c2:a7:84:bc:39:22:47:22:e4:b3:28:6b:62:
         fd:6d:f3:0e:de:1d:2c:f5:54:48:91:65:c5:48:0a:69:90:43:
         3e:3d:f0:28:19:91:ac:d7:09:7f:b9:16:05:f3:d3:ba:f3:c8:
         81:f8:07:7b:61:60:e9:d1:75:a9:51:33:b3:4e:5e:43:60:7a:
         92:67:ab:b1:53:57:2d:ae:9b:4d:fd:4b:ff:7f:bc:fd:86:67:
         8d:2f:c8:b9:5a:85:45:be:a9:ce:cd:55:d8:01:04:e4:62:30:
         88:4d:07:dc:f6:fd:9c:9f:78:ec:55:00:00:e8:23:b4:dc:b3:
         59:ae:c9:e8:50:8c:9c:1d:4b:18:6c:0c:36:d5:3a:f5:b3:3b:
         87:68:f9:c1:fe:c9:6c:0d:b7:21:af:ea:4a:fe:5a:cd:9e:18:
         c7:2e:b1:68:52:29:37:63:7f:b9:49:46:32:b0:f5:9e:bc:b7:
         82:bd:36:02:41:85:49:1f:ff:a8:28:cc:a8:0b:e6:9d:83:07:
         31:87:5f:48:27:07:f9:1c:af:c2:4f:7d:c4:80:d7:38:85:e0:
         d5:0d:ae:a4:14:3d:20:33:bc:5c:bd:93:14:77:38:fe:3a:d6:
         2f:a5:43:e7:24:34:68:d7:95:19:ab:32:f2:c3:d7:14:7f:e0:
         95:b7:32:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc5QTIxMTAvBgNVBAUTKDkxMzNBQ0JFQ0ZERUVDRjREQTNBMjIyMjgyNzgzNEY1
QjczQUZBQTcwHhcNMjUxMjA1MDI1NDE2WhcNMjUxMjEyMDI1NDE2WjAYMRYwFAYD
VQQDEw02OTMyNDk1OS1jZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAteJB1fC3JgC+BJlzcr5LvgN6gok2XLb1h06az0KzuCvhRyVqtoMRSaQmgY9u
Hly2vkbewXGkT0eqyBiX8CSmBRmGTCEvwM7FezIxngwxKyHz58dja2GP7JcaadTx
xcEjly7TRhSKoNsdgZzc0Oknl9PTdT3IFUGxTbDS8/0zUPXyHgUR0eCANqxqWB4/
yl6faLcVYPp6aPYi9bNwx/IYFcyhqE5cUJvOuT/xlcUoevSrKZRht10nsHnj+uFU
CAZGcZJ6K799jDFdfypcKnipT3hIleNgKEGJBhXd3v6g8H3Dd/h7lpCCgD+OrQD+
2lRYC5pEUiyIs7jmBTP806MwTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrT1UU4
GTITI+1OBVUedwVgx4coMB8GA1UdIwQYMBaAFJEzrL7P3uz02joiIoJ4NPW3Ovqn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzlBMi8xQTA1RTZFRTJE
MkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQVGFPaUlpZ25nMDliYzYt
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tUT3N2c19lN1BUYU9pSWlnbmcwOWJjNi1xYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzlBMi8xQTA1RTZFRTJEMkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQ
VGFPaUlpZ25nMDliYzYtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWt15Pg8KnhLw5Ikci5LMoa2L9bfMO3h0s9VRIkWXFSAppkEM+PfAo
GZGs1wl/uRYF89O688iB+Ad7YWDp0XWpUTOzTl5DYHqSZ6uxU1ctrptN/Uv/f7z9
hmeNL8i5WoVFvqnOzVXYAQTkYjCITQfc9v2cn3jsVQAA6CO03LNZrsnoUIycHUsY
bAw21Tr1szuHaPnB/slsDbchr+pK/lrNnhjHLrFoUik3Y3+5SUYysPWevLeCvTYC
QYVJH/+oKMyoC+adgwcxh19IJwf5HK/CT33EgNc4heDVDa6kFD0gM7xcvZMUdzj+
OtYvpUPnJDRo15UZqzLyw9cUf+CVtzIg
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:12:16 2025 by rpki-client