This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
File:                     KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json)
Hash identifier:          sFfbvBe3i1lUnrgHYyVwnrk9Wm8d/ZE5lVrGemUMWJ8=
Subject key identifier:   80:BB:82:51:8F:45:57:96:78:50:48:1F:14:95:EC:77:5A:F3:06:EA
Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
Certificate issuer:       /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Certificate serial:       043B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
Manifest number:          054A
Signing time:             Mon 22 Dec 2025 23:21:04 +0000
Manifest this update:     Mon 22 Dec 2025 23:21:04 +0000
Manifest next update:     Mon 29 Dec 2025 23:21:04 +0000
Files and hashes:         1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: 00LSOfpmvMRtBW1UlDHRPmopGTrGGGryWu51H3BHnzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
        Validity
            Not Before: Dec 22 23:21:04 2025 GMT
            Not After : Dec 29 23:21:04 2025 GMT
        Subject: CN=6949d260-dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:8b:73:33:31:ea:f4:e6:5e:36:86:20:23:
                    15:1d:76:07:90:82:b0:d3:8e:74:6b:3e:fc:d2:d4:
                    c9:49:03:6d:43:1f:ed:f7:06:04:0a:43:b2:53:6b:
                    76:d4:8e:02:b2:9d:62:bf:32:31:d3:85:62:3b:10:
                    25:e3:13:62:b9:dc:87:99:25:a3:1d:86:83:d0:37:
                    da:d8:36:41:44:af:59:c6:55:82:1b:6d:f0:46:63:
                    52:d2:44:6f:33:8b:96:1a:ac:36:7a:70:15:8f:3e:
                    7f:3e:d3:f3:0f:6c:8a:2d:e2:58:63:58:e9:47:c3:
                    c8:4f:42:16:65:b6:70:8a:52:e8:11:4c:de:a0:9b:
                    d8:48:91:70:08:0d:2d:c7:ef:1a:b5:bd:ad:4d:be:
                    de:e1:30:87:b8:e6:73:98:c8:76:00:77:ba:7b:5c:
                    ad:01:a6:65:c9:e9:cd:de:b0:8d:a8:c9:d9:50:14:
                    ab:73:e0:e7:41:cc:2e:bf:3a:da:53:bb:f1:7a:a3:
                    78:66:ae:38:5a:fd:39:65:05:e7:c3:71:ac:f3:ed:
                    f3:e9:91:96:12:7e:6b:62:6d:b7:0a:13:c8:9f:35:
                    19:6e:f5:62:49:6b:16:cf:06:c2:65:61:28:bc:c1:
                    18:a7:f6:52:33:81:77:03:e4:44:e5:2e:29:ea:29:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BB:82:51:8F:45:57:96:78:50:48:1F:14:95:EC:77:5A:F3:06:EA
            X509v3 Authority Key Identifier:
                keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:49:7d:c2:0f:85:ff:cd:49:c6:64:b3:66:f1:da:37:28:41:
         25:89:6c:7b:8c:d5:12:d1:c5:37:c8:4b:49:df:52:3e:0b:d1:
         95:b5:8f:f6:52:83:cb:1f:ee:31:0c:fd:b5:11:40:ce:01:ba:
         45:d0:09:09:7c:32:d7:7c:28:da:45:1d:e8:b7:4b:3d:2f:60:
         5f:02:72:75:45:80:31:ca:ee:14:c5:78:25:86:b3:ca:7b:1f:
         37:a0:0d:76:85:cf:28:d1:a5:49:c0:4f:70:fe:82:5d:d0:ee:
         e5:d4:25:c0:b6:dc:75:cb:d7:1c:0f:bf:5e:35:bb:55:d6:f2:
         35:69:71:9a:78:c3:e7:3a:d6:a8:38:72:7c:38:2d:01:8f:d0:
         bb:9c:c9:b5:ff:75:75:38:10:85:6f:be:f0:ab:36:29:5d:a7:
         2a:48:02:61:02:32:65:ff:62:b4:bd:87:8e:0c:cb:a4:22:30:
         b0:2e:76:91:18:af:2d:05:c4:ee:25:63:34:53:9e:bd:a9:ce:
         97:4a:3b:ab:bc:16:63:aa:17:05:d2:c8:e5:40:c1:15:ce:46:
         06:34:05:b3:f0:e1:e8:56:61:25:91:43:73:7f:5d:9b:da:14:
         49:50:22:6f:a5:92:5e:18:a7:92:1f:8b:52:f3:62:81:0b:7b:
         ff:28:81:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:30 2025 by rpki-client