This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
File:                     mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json)
Hash identifier:          dI3K2kv0rql3yMgTH+rp0/3uI3tXwdFvD9vs837Tyn0=
Subject key identifier:   6C:65:E2:5A:48:9A:70:C2:47:3F:BB:4F:A9:A0:B8:CA:5B:5E:6D:95
Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
Certificate issuer:       /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
Manifest number:          0115
Signing time:             Fri 19 Dec 2025 03:58:27 +0000
Manifest this update:     Fri 19 Dec 2025 03:58:26 +0000
Manifest next update:     Fri 26 Dec 2025 03:58:26 +0000
Files and hashes:         1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: D4JVD03SAXLxPTWpaltY+sixQg4Sz9IQ3NMtN+VZnbc=)
                          2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: FWDEQfcrySfMIWIlPkoTcMajRo2lEM/ZyKql4949RJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
                          rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164D3, serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
        Validity
            Not Before: Dec 19 03:58:26 2025 GMT
            Not After : Dec 26 03:58:26 2025 GMT
        Subject: CN=6944cd63-9d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:2d:4f:c3:26:cd:7c:d0:1f:43:59:c0:d9:
                    ef:26:5d:dc:c5:36:a5:0f:1b:7c:93:c4:a2:b9:ad:
                    2f:6c:c2:ee:7e:fa:08:2a:55:39:2f:6e:a3:9f:0f:
                    60:c1:e7:d2:d1:4a:29:87:35:6c:cf:06:ee:c0:71:
                    c8:19:2f:bf:d0:30:cc:ec:37:67:91:7c:b9:76:bd:
                    d0:d1:b4:cb:24:36:ff:3a:f5:9c:01:e1:01:51:58:
                    d3:4b:0c:84:5d:24:2a:8c:4c:97:cf:cc:65:e1:92:
                    3f:a6:35:1a:f5:43:8f:47:bc:a9:10:8c:7d:4e:40:
                    c6:5d:ec:65:9e:36:46:54:e2:8d:0a:94:ce:24:b7:
                    b7:db:d3:e8:b1:87:07:60:b0:d2:c8:5a:55:45:11:
                    e4:72:bd:9b:7c:de:77:ce:8b:a8:ba:0d:6d:43:a0:
                    c8:63:af:ad:b0:c8:5e:42:b4:79:0f:0d:4a:09:f2:
                    78:c0:54:26:46:9e:31:9e:9f:3e:7b:f9:49:a6:b3:
                    87:34:dc:91:56:2d:61:7d:01:eb:1c:ae:1a:66:4f:
                    68:64:f1:f8:de:6d:d4:b4:85:b1:66:53:0d:56:eb:
                    04:df:41:af:b4:4a:25:21:46:4c:02:44:63:64:97:
                    16:95:74:6c:8e:8c:91:87:36:93:8b:49:de:87:fd:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:65:E2:5A:48:9A:70:C2:47:3F:BB:4F:A9:A0:B8:CA:5B:5E:6D:95
            X509v3 Authority Key Identifier:
                keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:44:b6:8b:55:9d:74:60:e3:88:f8:f0:df:5a:81:90:5d:47:
         1a:80:92:96:56:65:27:b1:35:94:29:a7:e3:b5:35:62:a4:55:
         38:28:83:71:b4:e3:53:59:47:41:94:b3:54:bf:35:6a:78:ec:
         fe:ed:e6:e5:8b:07:cf:fd:37:ae:2b:ea:7e:55:44:7b:b4:e6:
         52:0b:2f:5a:33:77:12:8e:f2:9b:79:80:c7:47:29:6f:d7:f4:
         8b:54:d6:c6:16:81:b8:33:b0:b2:9e:cc:1f:63:e0:52:0f:3b:
         e4:13:82:ad:28:91:38:9f:97:fe:34:50:57:9c:4c:44:b5:ef:
         b8:8d:65:86:ea:67:bb:b5:46:e5:2e:bd:20:8d:33:d7:2c:53:
         d4:4f:17:fa:8a:e5:bd:87:3b:eb:3d:d3:1e:23:ed:b2:62:c0:
         1d:f2:fa:dc:52:be:5a:f2:03:1c:e0:e8:48:f9:68:3a:85:ac:
         54:70:e2:3c:ba:cd:c1:bb:85:5a:76:cd:4a:0b:79:02:de:8d:
         83:25:a3:ec:71:c1:a6:61:6d:16:22:cc:68:6e:ab:22:b7:12:
         e3:71:93:00:b3:b5:67:5e:f0:b9:6d:7e:a1:c0:57:7c:55:e6:
         91:17:79:ce:f6:6f:0f:5f:38:b9:02:0f:f0:8b:53:61:27:db:
         57:17:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:41 2025 by rpki-client