This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          gWunmfJuGMGAN1/BED+spo43ay1EpBa4do26NCnQvw0=
Subject key identifier:   0B:85:6F:AC:71:A8:56:87:7F:6D:5A:FD:F8:FF:8D:B9:E0:8A:6C:AE
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          0117
Signing time:             Sat 13 Dec 2025 04:21:06 +0000
Manifest this update:     Sat 13 Dec 2025 04:21:05 +0000
Manifest next update:     Sat 20 Dec 2025 04:21:05 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: TQ5/QW9OBsb9vWUH1RLZ709rV7ZWkwa6RLxd60Xw4wk=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: CCiK9Z7hOvpBEdDuVHROFOhxvRBudD3Mcnii4SWAHa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 04:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Dec 13 04:21:05 2025 GMT
            Not After : Dec 20 04:21:05 2025 GMT
        Subject: CN=693ce9b1-d328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:72:1f:e3:0f:04:3d:18:01:00:f3:6a:68:
                    de:15:b8:5d:a5:48:ca:2e:7a:34:0c:3f:91:2f:47:
                    b4:9b:53:24:e8:58:c5:e5:98:43:62:40:c8:ea:18:
                    c8:19:a5:63:52:11:fb:a1:00:7a:8e:5e:aa:d9:7f:
                    68:dd:ed:d5:f3:c1:1f:b0:83:ae:cb:66:fd:61:5b:
                    30:e4:21:b3:e0:23:8a:06:9f:27:b3:6b:0b:b4:5c:
                    39:2b:ff:18:7a:58:30:d0:3b:ba:79:66:61:aa:91:
                    06:58:48:79:07:82:a3:43:e2:78:87:29:8f:f5:b3:
                    68:46:69:2f:59:e9:4a:bb:ad:f5:62:b5:b8:db:95:
                    5b:77:c5:9a:f2:2f:7d:48:da:70:37:f6:54:22:22:
                    af:8d:8c:5d:83:d0:ff:9a:39:e8:02:e5:8e:14:c5:
                    ab:a0:20:d0:56:61:fb:c9:11:7d:00:3c:92:e7:4e:
                    d9:23:fa:25:94:14:40:df:62:3d:f7:ff:f5:b2:42:
                    59:46:ae:5c:1f:f2:18:8f:b4:e9:db:15:38:39:fd:
                    25:be:3e:d2:34:ce:4a:f3:8c:49:41:73:06:db:b9:
                    e8:c6:1a:0d:c9:f5:b7:7d:81:79:9a:e9:39:32:48:
                    80:f2:0f:e0:5d:d3:47:1e:33:c2:9d:82:ce:ce:2e:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:6F:AC:71:A8:56:87:7F:6D:5A:FD:F8:FF:8D:B9:E0:8A:6C:AE
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:ef:36:5e:39:93:79:1e:b7:8a:45:bf:b6:61:71:4c:43:
         dc:cb:e1:2f:2b:6d:09:ae:61:59:99:dc:f5:8d:f9:03:1a:6d:
         f8:3d:0a:9e:d6:07:e2:cc:77:a0:c3:4d:84:b1:ce:a1:c3:e4:
         8c:3d:02:9a:bd:8c:c7:98:67:a8:7c:9d:3b:d0:4e:14:3f:2b:
         1f:c3:44:bb:e5:4e:f8:e0:6c:c3:5b:99:d0:fe:5b:cc:53:63:
         e7:02:90:e2:08:4d:41:55:31:ae:06:34:d3:3a:f4:d4:38:4f:
         9e:ca:ca:2c:f6:7c:50:db:b8:f3:b8:b8:1e:7b:cc:10:4a:cf:
         21:1b:53:cd:23:a9:63:1a:6e:e2:e7:5e:84:04:61:e3:19:00:
         27:89:b6:90:66:6c:ac:2b:15:0b:8d:16:b8:d9:82:66:1b:86:
         43:d5:e7:69:4a:0f:4a:c8:e4:b0:23:7d:bd:e5:f4:2d:e0:cd:
         b9:5f:0e:35:bc:8a:a1:58:4d:f4:9d:27:12:fa:27:c3:45:6e:
         7f:05:8e:2d:fc:62:34:03:3c:fc:3a:bc:4c:33:52:fb:69:d6:
         ef:29:49:88:94:5e:63:b5:a2:7b:12:cc:d9:2d:b3:a4:c4:89:
         f9:1e:7b:c8:23:c4:ca:a7:51:43:1c:9c:e9:9e:f2:53:b0:00:
         ce:20:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:27:55 2025 by rpki-client