This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
File:                     keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json)
Hash identifier:          R1e/EW3SNcSBbLraTvqD3YsW3UBbxiaBCj5nKy5mgNA=
Subject key identifier:   A3:CA:E5:46:7D:C9:5A:5C:8A:22:B0:37:02:DB:E3:3E:16:8F:79:F4
Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5
Certificate issuer:       /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
Manifest number:          01C6
Signing time:             Sun 07 Dec 2025 01:26:25 +0000
Manifest this update:     Sun 07 Dec 2025 01:26:24 +0000
Manifest next update:     Sun 14 Dec 2025 01:26:24 +0000
Files and hashes:         1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: lWWNmYnaoB1nTlpSzHA3pShDVBTzX6o3EGeAorjRuHI=)
                          2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: tkkYz0ghUklFSNnUvurDs2pFNwSVM0cpaVXq98edoAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl
                          rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
        Validity
            Not Before: Dec  7 01:26:24 2025 GMT
            Not After : Dec 14 01:26:24 2025 GMT
        Subject: CN=6934d7c0-4de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:ff:cb:ae:2d:6f:8c:c7:09:20:47:f1:d0:
                    4b:60:65:a5:da:69:21:0d:4c:d0:74:58:c9:8e:c5:
                    e4:3e:de:2e:58:dd:67:28:f7:f1:12:6b:06:1c:4d:
                    b5:d7:01:e2:cb:b4:1d:b5:c7:c8:6b:18:73:dc:6a:
                    80:15:36:cc:ac:35:ef:8d:01:f7:a6:0d:5c:dc:7a:
                    8e:76:b3:de:c8:5c:00:a2:99:7f:29:38:d2:d1:60:
                    b8:fa:cf:b4:cd:90:a5:4e:a8:d6:b8:5a:35:bd:16:
                    cd:0d:95:84:5a:a5:d8:a2:4e:98:42:f9:11:27:29:
                    5a:6e:ad:e0:50:9e:06:5b:bf:93:52:95:86:e3:28:
                    be:4a:09:03:4c:3d:94:fb:2c:64:bf:60:56:4e:9b:
                    20:bb:db:20:f2:47:f5:8c:eb:4b:80:10:c0:52:b3:
                    04:77:1d:09:b2:d7:32:63:82:f7:6b:1f:f9:75:bc:
                    5d:b5:94:d0:39:d1:a6:c6:ea:af:05:3a:0f:39:03:
                    09:d8:53:07:a6:7d:c3:ec:ff:9a:a3:41:1b:f3:46:
                    b7:a7:69:eb:a1:ba:c7:fd:4e:ac:96:69:3a:52:a7:
                    e6:7b:57:2c:ed:89:92:35:5c:32:85:97:dc:71:12:
                    60:a3:1e:86:40:a0:c6:29:b7:a9:64:a1:25:ed:e1:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CA:E5:46:7D:C9:5A:5C:8A:22:B0:37:02:DB:E3:3E:16:8F:79:F4
            X509v3 Authority Key Identifier:
                keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:27:b5:98:d5:8a:12:11:7a:8a:c4:df:ac:be:f2:ed:d5:
         5c:12:5c:c4:52:c4:07:a0:a0:b7:1e:e3:b4:f1:6c:e3:4d:03:
         f2:67:77:30:c5:11:21:d9:b6:88:bc:1d:6a:cf:0b:de:eb:15:
         b9:38:be:7e:56:42:a2:f1:61:44:bd:60:93:a5:59:18:9a:6c:
         09:d6:5e:1f:29:d8:d1:3b:36:c6:b8:f6:e7:8e:53:19:08:07:
         5b:b5:12:86:2c:aa:70:b5:39:85:c9:c8:c3:3f:40:45:3b:76:
         28:f2:5c:95:1d:d3:d4:9e:e7:36:a0:f1:6b:b8:8c:b9:ff:b1:
         1d:3b:e2:98:e8:e3:a7:e8:93:c6:10:0a:c4:2c:fc:e8:52:00:
         b9:47:9f:a1:12:61:c1:8b:1e:e4:38:6a:e3:8a:7c:c8:3e:30:
         69:8b:78:8a:7b:f0:5a:f9:1a:9f:dc:63:8f:0c:4b:4e:fc:df:
         3d:1e:e5:3b:5f:d0:ec:31:7a:8e:1c:e3:f0:c7:66:f5:0b:0e:
         f9:15:ec:d0:9a:cb:b4:d5:7b:84:29:78:9a:bf:7c:40:0b:86:
         e5:39:be:b9:4d:e0:6e:7e:97:af:cb:9d:0c:24:aa:fc:7f:b7:
         b8:c5:9b:ba:91:34:d2:17:70:61:f6:86:a1:64:82:9d:1d:fc:
         c0:9b:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:29 2025 by rpki-client