This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File:                     iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier:          zwl12ZKpm/UYF/OWtV4r1UCX/3iDJ6qWNr6a7djcza4=
Subject key identifier:   F3:1A:33:74:A9:D6:15:3A:E9:2C:D9:47:95:42:EE:61:C2:62:80:C8
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer:       /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number:          019E
Signing time:             Tue 09 Dec 2025 01:31:40 +0000
Manifest this update:     Tue 09 Dec 2025 01:31:39 +0000
Manifest next update:     Tue 16 Dec 2025 01:31:39 +0000
Files and hashes:         1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: iRv+Y4uQhh6yCyRaC1GXAv1/yXcY+lJra5se5Uv9h+0=)
                          2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=)
                          3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 01:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
        Validity
            Not Before: Dec  9 01:31:39 2025 GMT
            Not After : Dec 16 01:31:39 2025 GMT
        Subject: CN=69377bfb-2120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:8c:9c:80:a4:1f:30:16:c7:76:0b:03:79:
                    6b:08:ba:59:e0:79:58:7c:99:ef:67:86:56:d3:c4:
                    66:a9:c1:cb:87:4e:84:d8:66:e0:85:09:f4:d4:0c:
                    ec:b3:1c:57:16:9b:23:bf:64:26:34:c2:94:a5:b5:
                    d2:4d:df:55:50:2b:a1:b6:92:6d:65:5f:b1:e2:ad:
                    0a:c7:60:41:03:06:1d:bd:94:76:83:6b:ef:b0:25:
                    43:e2:82:a3:c5:27:e7:dc:62:7a:c6:88:c1:53:a7:
                    a1:e3:eb:27:dc:9d:2a:6b:48:0d:08:f5:34:04:31:
                    c2:ae:f5:cc:c4:6a:7d:7b:69:ec:74:c0:cd:b3:a5:
                    a6:1b:eb:8e:4f:a5:27:06:58:f4:d6:60:e5:76:18:
                    6c:b3:7f:60:c2:2b:8f:ec:c6:66:b9:97:17:fd:a5:
                    6b:d2:84:d0:c7:12:68:21:71:6a:84:79:cc:f6:31:
                    b8:76:a9:81:ca:dc:12:16:31:4d:c8:69:ee:12:11:
                    cf:59:75:5d:d8:9d:8e:5a:9e:eb:1f:16:b2:37:09:
                    cc:ca:d5:85:68:83:2d:4b:60:75:61:9d:6a:0e:23:
                    fa:25:52:06:f5:6f:10:87:85:04:79:65:5c:f9:24:
                    dc:fb:6e:ab:44:5b:ae:8a:a8:e3:68:49:95:0d:d5:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1A:33:74:A9:D6:15:3A:E9:2C:D9:47:95:42:EE:61:C2:62:80:C8
            X509v3 Authority Key Identifier:
                keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:0e:8c:41:4a:72:90:d3:48:a6:14:b4:39:ed:d2:e3:fe:
         60:61:c9:a1:d8:8a:5f:d0:09:30:0c:26:f1:84:a5:2e:65:bd:
         7a:67:38:20:6c:87:9f:30:ef:bf:d5:76:7a:77:6e:23:f5:92:
         a9:c5:39:a7:5c:67:ed:1d:95:d7:d7:8f:09:b2:c4:1f:6d:03:
         b6:10:78:0f:eb:25:d9:28:d7:14:83:32:8b:ca:b8:f9:f9:c4:
         8b:31:99:04:f9:e8:7b:6e:15:ed:77:e7:77:b1:99:0b:bf:0a:
         19:05:3c:65:89:40:d2:0f:bc:65:b3:4b:24:67:84:3c:23:13:
         c1:d8:68:d1:9b:ab:db:5b:84:18:65:b0:59:ac:62:8a:e0:78:
         b6:44:58:c8:11:20:fe:38:64:87:9c:f6:e6:7b:63:82:5a:71:
         55:a7:fd:af:0a:87:ab:60:36:ec:1d:94:8d:e3:69:be:99:80:
         12:fb:f9:f9:b4:6b:24:38:75:01:21:ef:22:64:d0:b4:b3:ab:
         a9:49:78:d1:45:45:d9:25:30:8d:c2:98:44:b0:fd:1a:09:54:
         bc:36:83:dd:45:7f:10:64:b1:c7:36:67:0b:55:7e:b6:e0:e3:
         7f:4e:d0:d1:33:9b:11:74:90:3c:71:ea:fd:66:95:5a:24:c6:
         ba:b1:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 04:30:31 2025 by rpki-client