This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File:                     rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier:          OkbkNfS82CXFHXnjOgXUWoShqZk9TqUj6HPANQbJB3M=
Subject key identifier:   63:84:73:21:97:FB:A7:77:96:27:BD:D3:F4:D1:9E:08:41:6E:35:1B
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer:       /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number:          39
Signing time:             Tue 23 Dec 2025 06:20:09 +0000
Manifest this update:     Tue 23 Dec 2025 06:20:08 +0000
Manifest next update:     Tue 30 Dec 2025 06:20:08 +0000
Files and hashes:         1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: 606UwyWwSczgZCzErZ10EgEbM6WuvYfpE80u7UvA/vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
                          rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
        Validity
            Not Before: Dec 23 06:20:08 2025 GMT
            Not After : Dec 30 06:20:08 2025 GMT
        Subject: CN=694a3499-9218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:44:2f:45:f0:51:81:93:b9:b9:af:c1:23:
                    a1:a2:14:9f:12:7d:1f:18:1b:27:99:04:fc:99:45:
                    3f:de:c7:13:4d:3a:52:a2:b8:d8:97:65:06:83:0a:
                    cc:27:7e:d3:72:8d:48:2a:21:3a:8d:9d:60:32:12:
                    57:93:e2:18:be:95:09:d2:89:4f:2d:82:b7:c6:8a:
                    0e:90:52:e0:c1:98:59:ac:db:e9:02:86:38:ba:a9:
                    c7:10:44:ca:c2:b9:e5:0f:6e:aa:e1:9f:58:19:f1:
                    2d:01:d9:c6:ca:78:59:1b:37:d8:d1:11:72:73:c3:
                    7c:7d:f1:03:92:7a:fd:e9:ee:d5:d0:e9:57:38:2f:
                    92:36:d9:b4:60:00:20:ea:70:ab:cd:24:4a:5c:83:
                    ff:d7:8f:a6:4a:ab:2a:89:47:cd:54:a6:49:28:54:
                    09:7d:48:42:56:a3:3b:86:45:2a:5e:d5:6c:69:9c:
                    c4:40:78:d0:e5:7f:7a:9c:dd:29:23:3b:8c:ca:a3:
                    63:2e:6c:53:cd:4a:b4:3c:22:b2:ee:00:b8:c0:7d:
                    3e:5f:1c:65:5b:9e:f3:a7:ea:ae:68:fb:93:b8:df:
                    41:d8:94:5c:76:48:e2:cb:4e:5f:6b:a8:0b:36:fa:
                    b4:52:fb:f0:d3:51:07:fb:31:80:c7:7f:9d:78:05:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:84:73:21:97:FB:A7:77:96:27:BD:D3:F4:D1:9E:08:41:6E:35:1B
            X509v3 Authority Key Identifier:
                keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b8:cf:aa:05:29:bc:4a:35:ab:07:b8:5d:9c:19:e3:67:ec:
         c1:67:0c:02:c2:18:ee:ab:eb:ca:d8:78:9e:34:1b:be:38:13:
         6e:ad:a6:a0:29:4c:7f:95:da:6c:83:8e:8b:7f:2b:6c:c3:87:
         21:f7:be:6f:79:21:00:8a:df:5e:79:88:07:f4:75:80:93:dc:
         3b:fa:17:27:90:0e:71:ac:26:73:d6:6f:f4:8f:f1:b2:88:7a:
         58:f3:97:3a:ad:a4:04:4d:2e:93:a3:90:93:3b:71:a5:22:a0:
         59:6c:01:7a:7e:e2:2f:53:48:57:10:d1:ba:dc:af:55:92:f0:
         1b:43:88:0c:67:2e:b8:96:83:42:77:eb:5a:30:64:b6:48:79:
         a2:3b:32:67:64:39:e6:b8:f4:69:bd:fc:4d:31:4b:c0:66:03:
         ce:d7:20:53:21:bb:43:5d:24:a3:5c:c1:07:cb:ad:b3:84:f5:
         70:cf:34:62:23:f4:bf:7d:fc:d8:b8:43:09:b3:dc:23:97:06:
         95:2c:a4:4e:30:58:cf:51:65:97:86:67:6c:81:82:b9:7b:0b:
         79:a3:c3:1b:59:7e:5a:d7:47:69:85:66:32:c3:24:14:ff:38:
         f7:05:36:b2:af:8a:4e:2e:35:94:84:af:e2:01:72:ac:64:7a:
         61:14:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:55 2025 by rpki-client