This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File:                     KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier:          S6CGWPHcUn+QMPYCavp88GClVNRFieTWnCpHbkoZmgU=
Subject key identifier:   C2:D0:3A:4E:9A:59:E0:31:19:0F:B0:F6:AF:46:44:D9:24:12:88:47
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0B76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number:          0B6E
Signing time:             Sat 20 Dec 2025 18:41:36 +0000
Manifest this update:     Sat 20 Dec 2025 18:41:36 +0000
Manifest next update:     Sat 27 Dec 2025 18:41:36 +0000
Files and hashes:         1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: M0u+Ucch0jP1t5zQclPVziluqe9Fi4yJoGQ9MTrw07U=)
                          2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2934 (0xb76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: Dec 20 18:41:36 2025 GMT
            Not After : Dec 27 18:41:36 2025 GMT
        Subject: CN=6946ede0-58ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:01:d3:2d:94:73:f9:95:a6:7b:63:d4:74:
                    5c:7b:d7:95:4e:8c:e9:d3:bd:9e:32:36:dc:bc:bf:
                    58:08:99:37:b3:96:d2:70:12:1d:01:00:27:2a:6c:
                    18:81:58:b3:77:cb:71:ae:2b:6b:03:b2:a3:39:36:
                    05:a7:d8:4f:d2:94:22:8e:8a:9e:e9:af:7f:bb:ff:
                    ec:86:a3:9d:d2:23:dc:0c:8c:02:8d:5e:57:03:4e:
                    89:14:44:d0:dd:65:27:2f:9f:ad:22:6a:8a:2f:6c:
                    85:2c:15:76:35:61:25:37:41:51:1e:29:b8:d3:01:
                    e8:19:b4:3f:a6:e9:86:55:45:19:84:01:a1:58:98:
                    c3:c7:95:98:a1:ea:f2:e1:25:09:95:59:f0:c2:24:
                    85:e1:d6:00:86:d0:39:f1:54:31:c6:e9:81:ae:0d:
                    1e:86:53:aa:ab:1f:e7:a2:07:f1:55:47:f1:05:b2:
                    3e:7b:e7:34:b7:52:7e:a5:80:05:af:50:32:66:ca:
                    63:1e:e1:37:46:9d:db:04:f7:f0:46:4b:6a:c8:10:
                    78:b7:a0:87:42:d5:5c:3a:25:6a:f0:3b:cc:d9:c4:
                    03:f7:96:c7:91:5e:0f:ee:2c:ae:3f:1e:05:0b:33:
                    16:fa:bc:53:9e:f7:01:9a:ba:9c:37:78:b5:03:e5:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D0:3A:4E:9A:59:E0:31:19:0F:B0:F6:AF:46:44:D9:24:12:88:47
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6b:84:71:36:ae:e4:60:1e:7e:38:9e:97:f7:e5:c9:07:56:
         0c:50:01:fc:64:89:a2:a1:77:f8:e2:3f:f9:0a:90:6f:ee:60:
         73:9e:fd:f4:91:9f:c6:e1:ae:ed:58:3d:2e:48:0e:56:9e:ea:
         d4:4a:e2:c5:9e:5c:fb:d7:0b:f5:ab:7c:03:a6:a8:13:73:1d:
         c5:f9:80:13:21:b3:f9:6f:62:52:e9:dc:8b:0e:b8:fe:48:a7:
         2b:cb:9b:7a:d4:c3:13:7e:9f:d9:6b:87:7f:0a:bb:90:c1:27:
         4f:25:50:7a:f5:e7:18:07:c7:e1:fc:1d:bc:11:ce:44:2a:9a:
         fc:50:38:97:e2:d2:dd:61:4d:b3:64:be:b8:a7:ff:f4:af:c0:
         7e:b2:02:b9:d2:6d:63:81:0d:5c:90:74:86:f4:0f:d1:58:5e:
         60:a5:98:75:8b:fb:be:d5:8f:66:04:c9:88:40:c0:58:37:af:
         57:27:1b:99:2a:df:10:0d:5d:56:55:f7:c8:54:f2:e8:46:40:
         1b:76:3b:97:31:01:68:08:fc:7a:18:7e:62:3c:3b:ce:12:69:
         4e:10:b5:0c:6f:ff:fd:97:50:9a:c9:6d:0b:7c:42:62:35:0a:
         fa:04:d3:56:61:b2:87:3e:7f:54:e7:33:c4:5e:b4:b3:a9:95:
         e3:d3:03:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:25:13 2025 by rpki-client