This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
File:                     KN1yVzxbraKIuDKzmB_0yYsvjFE.mft (raw, json)
Hash identifier:          0JcPPlYWKgGD0viBgGCor5OprPQ/wR6a1sdAfctTYDE=
Subject key identifier:   17:EF:CF:80:F4:8B:12:C0:1F:09:69:E1:41:29:9C:77:25:47:8C:66
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Certificate issuer:       /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial:       0561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
Manifest number:          055A
Signing time:             Mon 22 Dec 2025 22:31:38 +0000
Manifest this update:     Mon 22 Dec 2025 22:31:38 +0000
Manifest next update:     Mon 29 Dec 2025 22:31:38 +0000
Files and hashes:         1: KN1yVzxbraKIuDKzmB_0yYsvjFE.crl (hash: bDy5reaPbgWE/43LQU/W9NMgP6K8LfQ95BrdlSmzFN4=)
                          2: F6750B60168D11EC89C9CB5DC4F9AE02.roa (hash: L229HAjJw9So9Rlreie2EkxQHxnxmVW3pDOMuafdlQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
                          rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
        Validity
            Not Before: Dec 22 22:31:38 2025 GMT
            Not After : Dec 29 22:31:38 2025 GMT
        Subject: CN=6949c6ca-2bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:93:62:51:11:3b:0b:c7:24:14:b9:cf:2a:
                    a0:e7:13:ba:98:94:8c:2f:4e:38:96:a7:c1:54:54:
                    af:d7:04:d2:53:08:72:f0:49:ed:95:6a:5c:f2:85:
                    c3:47:48:07:73:13:66:16:ac:23:c8:f3:22:3c:83:
                    2f:6a:ed:ed:d3:3e:2e:cf:3c:30:00:6c:5a:08:a8:
                    fc:30:f5:28:42:88:96:92:73:69:e0:4e:7e:6a:a2:
                    b8:45:04:85:83:e3:38:5c:65:c6:5c:0e:87:d0:21:
                    e0:83:5b:57:15:15:96:5f:e5:a7:a3:c1:54:27:5c:
                    35:9a:8e:61:78:a2:9b:32:49:27:f3:1f:8c:88:a1:
                    43:59:76:a0:c3:ee:f0:5f:2a:30:40:af:c4:b8:eb:
                    dd:93:e4:d9:75:00:3c:f3:0a:8c:f0:63:58:a1:8a:
                    2d:7d:a6:75:89:dc:b3:78:7a:ad:c4:6b:04:a2:84:
                    9a:6d:88:34:5b:9b:49:cc:2a:b2:7e:d5:48:a1:44:
                    b6:82:06:f6:36:d2:50:db:0d:72:ca:7c:e0:1a:91:
                    7d:71:70:98:0b:38:3d:18:3c:e8:c9:2c:94:56:d6:
                    94:03:58:d6:14:eb:df:08:ad:83:13:cf:35:a0:ca:
                    21:f1:a7:9e:65:9f:d2:9e:82:dd:5b:fd:e3:4c:83:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EF:CF:80:F4:8B:12:C0:1F:09:69:E1:41:29:9C:77:25:47:8C:66
            X509v3 Authority Key Identifier:
                keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:92:d7:1f:71:b1:79:18:c9:ce:f9:bd:0d:95:52:b2:c4:
         fb:e1:9a:ef:19:31:2c:3f:1a:6c:3c:8e:d1:71:fc:c4:c8:54:
         6a:e1:e5:6d:70:cb:5e:e9:19:5d:ba:83:a2:19:a4:ec:d4:f0:
         23:92:2f:3b:0c:50:0d:85:91:1b:fa:e0:76:4b:3f:39:b8:51:
         97:1e:61:03:0f:28:5d:cb:e8:45:cd:d2:bc:4a:ac:6c:0c:77:
         c7:16:a1:43:cb:fa:66:ee:90:2e:3a:2c:8c:ca:1c:86:c2:52:
         e3:f3:c5:b9:75:92:9e:56:a4:75:3c:28:40:04:f5:c1:db:2c:
         07:fb:a0:4a:a1:27:8d:15:80:84:78:e0:5d:a8:31:6b:ae:1b:
         88:ec:0c:a5:c3:24:c6:89:ce:ea:f2:95:7b:99:b8:61:dd:f5:
         0b:80:b0:42:62:ce:a0:af:64:1e:a7:52:4b:24:66:28:5b:94:
         9b:81:b8:8b:af:5c:98:46:51:0d:37:f1:d4:19:78:3a:c8:c5:
         6a:87:54:68:12:da:96:11:53:a2:66:7b:56:e4:39:20:d5:1b:
         19:d1:51:60:68:4d:fb:d3:ae:d6:23:6e:e3:91:6a:2e:9e:a2:
         5a:11:e9:29:f9:d3:5f:81:ce:64:2f:15:fb:e1:cf:b5:04:1c:
         ee:fa:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:57:48 2025 by rpki-client