This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
File:                     K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft (raw, json)
Hash identifier:          GEt1lR6FWeUSaA5lZEbjEJ9Ygr18WWjvCgwgzOuumXo=
Subject key identifier:   36:B8:96:81:1C:24:1E:65:91:10:6C:90:89:3B:01:96:A5:58:3A:9B
Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
Certificate issuer:       /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
Manifest number:          012E
Signing time:             Fri 05 Dec 2025 02:42:34 +0000
Manifest this update:     Fri 05 Dec 2025 02:42:33 +0000
Manifest next update:     Fri 12 Dec 2025 02:42:33 +0000
Files and hashes:         1: K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl (hash: BPtNSs/wVvr6j+T/4XmXMZEeHj1vGyZGhTMivhPkv9U=)
                          2: C820C000061E11EFA13A0F4AC4F9AE02.roa (hash: 0DUWhAlOmYMH58y7cT6IWqOSq8FJJK/e/LROrKNRNG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1E4, serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
        Validity
            Not Before: Dec  5 02:42:33 2025 GMT
            Not After : Dec 12 02:42:33 2025 GMT
        Subject: CN=69324699-faec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:79:a1:df:a3:1f:97:de:74:e9:a1:40:5e:
                    0f:ec:d6:98:9b:76:80:0f:b0:76:b0:16:a5:e0:b1:
                    d3:8d:3f:ff:87:16:6f:c1:ce:6a:2c:5c:f0:a6:80:
                    15:d7:68:64:d8:4a:cd:48:a3:e8:5b:65:a8:b3:60:
                    36:3f:00:79:37:77:1c:c2:64:a3:99:70:db:05:a2:
                    5a:51:c6:40:ee:d4:6f:fd:6b:54:af:ab:b2:3a:e8:
                    bc:a8:ea:dd:15:a3:bd:c4:10:8f:16:9e:e2:b8:fc:
                    10:a5:92:8d:f0:36:78:0d:b5:a6:51:55:c5:28:9e:
                    7c:89:c0:ac:b8:c0:1c:1e:b3:f5:6a:45:a8:bd:5b:
                    ed:93:0f:a8:66:9f:3e:56:b0:7f:90:ed:a2:0f:32:
                    bd:a9:bf:c3:67:b2:67:f7:b3:6a:e5:3e:a2:11:4f:
                    3e:cd:29:fd:40:64:45:90:b5:b4:2f:27:3f:59:82:
                    46:d1:d0:34:47:dc:c0:79:02:4c:68:0b:2f:ff:d1:
                    d4:da:b6:4a:4c:70:82:79:ea:a1:c8:12:4d:6e:93:
                    1c:8f:4e:e5:7f:93:43:fa:e4:3b:bb:7c:9f:79:a3:
                    b4:c5:66:f0:ce:91:d1:5c:52:26:a3:59:53:2d:1a:
                    95:4b:9d:16:d9:18:41:3d:42:40:37:15:3f:4f:e4:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B8:96:81:1C:24:1E:65:91:10:6C:90:89:3B:01:96:A5:58:3A:9B
            X509v3 Authority Key Identifier:
                keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:0c:ce:80:9a:d9:0f:51:ef:c0:61:91:4e:30:c7:50:2a:
         89:a6:12:64:a2:b5:01:c6:58:21:0f:60:46:59:e4:c8:6e:37:
         7d:7c:d0:2c:a7:1b:22:05:3f:9e:d1:84:00:1a:e4:8a:2b:f0:
         71:0a:82:17:56:3e:08:c0:fa:1a:cf:46:b8:22:c0:cf:a7:db:
         b2:5d:68:7e:86:76:33:69:07:b9:6d:b0:b4:62:0f:82:ec:0e:
         0b:b8:ff:0d:18:9b:51:45:69:62:97:8e:74:80:76:4b:b6:a2:
         b1:ca:ac:84:d6:54:08:80:95:2f:29:f1:fb:1b:ec:df:ee:eb:
         55:b5:96:7f:4f:57:2e:4e:ec:0a:13:d9:3e:37:c7:ee:5f:f8:
         8a:8b:05:ba:60:9c:35:2e:1f:20:d6:be:1d:83:3f:14:b7:18:
         bb:a9:5c:ae:7c:0d:30:c7:cb:8e:12:59:fa:9b:c8:1d:7e:a4:
         ec:90:b9:ce:05:3c:91:d9:b9:67:9c:c2:af:eb:cf:c4:a1:05:
         e9:08:ea:c3:4c:99:5a:bf:fa:61:41:7d:fd:73:48:55:65:e2:
         c4:11:1d:1b:0d:10:1e:43:7a:6a:98:28:42:15:01:e9:5b:b8:
         8c:66:c0:2d:8b:da:86:f4:c0:1e:7f:a5:46:92:83:e7:c4:d4:
         e0:1f:9a:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkMxRTQxMTAvBgNVBAUTKDJCQTc4QkZFRDlDMTQ3RUZGRUM4ODFEOUM3MzZGNjhG
NTg1NTM0Q0IwHhcNMjUxMjA1MDI0MjMzWhcNMjUxMjEyMDI0MjMzWjAYMRYwFAYD
VQQDEw02OTMyNDY5OS1mYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Cx5od+jH5fedOmhQF4P7NaYm3aAD7B2sBal4LHTjT//hxZvwc5qLFzwpoAV
12hk2ErNSKPoW2Wos2A2PwB5N3ccwmSjmXDbBaJaUcZA7tRv/WtUr6uyOui8qOrd
FaO9xBCPFp7iuPwQpZKN8DZ4DbWmUVXFKJ58icCsuMAcHrP1akWovVvtkw+oZp8+
VrB/kO2iDzK9qb/DZ7Jn97Nq5T6iEU8+zSn9QGRFkLW0Lyc/WYJG0dA0R9zAeQJM
aAsv/9HU2rZKTHCCeeqhyBJNbpMcj07lf5ND+uQ7u3yfeaO0xWbwzpHRXFImo1lT
LRqVS50W2RhBPUJANxU/T+S4MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa4loEc
JB5lkRBskIk7AZalWDqbMB8GA1UdIwQYMBaAFCuni/7ZwUfv/siB2cc29o9YVTTL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFFNC8yRkQwQ0E5ODA2
MTkxMUVGQTkyNkE3MjNDNEY5QUUwMi9LNmVMX3RuQlItXy15SUhaeHpiMmoxaFZO
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s2ZUxfdG5CUi1fLXlJSFp4emIyajFoVk5Ncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzFFNC8yRkQwQ0E5ODA2MTkxMUVGQTkyNkE3MjNDNEY5QUUwMi9LNmVMX3RuQlIt
Xy15SUhaeHpiMmoxaFZOTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAyQzOgJrZD1HvwGGRTjDHUCqJphJkorUBxlghD2BGWeTIbjd9fNAs
pxsiBT+e0YQAGuSKK/BxCoIXVj4IwPoaz0a4IsDPp9uyXWh+hnYzaQe5bbC0Yg+C
7A4LuP8NGJtRRWlil450gHZLtqKxyqyE1lQIgJUvKfH7G+zf7utVtZZ/T1cuTuwK
E9k+N8fuX/iKiwW6YJw1Lh8g1r4dgz8Utxi7qVyufA0wx8uOEln6m8gdfqTskLnO
BTyR2blnnMKv68/EoQXpCOrDTJlav/phQX39c0hVZeLEER0bDRAeQ3pqmChCFQHp
W7iMZsAti9qG9MAef6VGkoPnxNTgH5q2
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:44 2025 by rpki-client