This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File:                     RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier:          kiGDSQ7GUT0S5/rHBFONwOZIHC/WHkzt4HA2D2G0qbw=
Subject key identifier:   1C:92:75:0C:64:CA:81:53:02:0B:50:E3:BB:58:F7:04:C0:96:54:66
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer:       /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial:       0743
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number:          073D
Signing time:             Thu 18 Dec 2025 21:09:38 +0000
Manifest this update:     Thu 18 Dec 2025 21:09:38 +0000
Manifest next update:     Thu 25 Dec 2025 21:09:38 +0000
Files and hashes:         1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: CQWH8lc6nCnvvZKO9yy5FST7dcmlU8KNvCSCJ3Yq11U=)
                          2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: q+i3wafgejbFMbyjX77ENtsRan2UT1Ux8wQq92JlMS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
                          rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859 (0x743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
        Validity
            Not Before: Dec 18 21:09:38 2025 GMT
            Not After : Dec 25 21:09:38 2025 GMT
        Subject: CN=69446d92-019a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:0c:52:cb:f7:dd:3d:dd:78:84:04:e0:8a:
                    28:fc:17:3e:91:71:97:f4:46:d7:62:c1:80:fd:5f:
                    d9:e4:d8:06:e6:b7:14:53:bc:25:77:00:cd:1d:1c:
                    03:49:aa:49:dc:17:5b:be:04:07:5e:3b:c9:85:5e:
                    c3:f4:00:12:5c:3f:7b:f4:21:90:4f:91:e7:fd:ed:
                    81:f4:85:2f:3e:b8:12:5c:52:19:cb:2a:fa:00:bb:
                    75:12:95:6f:95:ea:5b:e8:38:c0:50:ce:3a:3c:c8:
                    58:17:1f:fe:56:0d:5f:90:64:53:d8:1b:6a:e0:a6:
                    08:7f:cc:4d:19:da:46:e5:98:5a:41:d8:71:2b:71:
                    84:db:b1:7e:37:eb:93:7a:b7:5c:99:68:27:ba:b0:
                    49:7f:51:7e:f1:8a:87:91:b1:d7:7f:65:5b:0b:76:
                    c5:cf:63:aa:e8:1b:8d:08:1c:d2:45:a1:74:d8:fc:
                    ad:49:e5:34:a9:e6:3c:aa:cd:09:d1:40:94:78:cd:
                    77:05:9e:d4:84:40:66:ac:fe:60:c6:2d:e7:44:29:
                    73:7b:dc:41:8c:61:8e:0b:3e:00:7b:4f:95:b9:8c:
                    f3:a3:ce:ac:ba:b4:ac:bc:30:f9:43:12:46:01:f1:
                    34:52:6d:b6:36:16:e0:40:bd:84:75:4c:ec:50:13:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:92:75:0C:64:CA:81:53:02:0B:50:E3:BB:58:F7:04:C0:96:54:66
            X509v3 Authority Key Identifier:
                keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:15:b0:98:1d:ef:50:74:e8:1b:bb:6d:e0:f6:ca:d3:e7:fa:
         66:62:b1:f4:32:20:8a:83:6d:b4:b8:21:c6:fe:f5:1f:48:33:
         ec:eb:44:c2:06:9f:a2:30:4c:db:3a:4a:5d:f4:44:ad:d1:ef:
         ca:1e:51:a2:b0:80:e0:cd:57:c3:89:03:f7:2b:c7:b6:15:7b:
         e7:11:52:41:2e:4c:98:ea:55:71:b8:94:20:81:c0:b9:b6:33:
         43:87:a2:67:5f:3b:55:9b:c2:74:37:37:21:d4:8a:89:84:73:
         13:aa:72:55:05:b7:ef:d4:9a:d6:fa:71:d8:13:0f:c9:98:1a:
         a1:5f:3e:bb:a6:97:37:ae:c4:7a:d1:55:52:1c:45:7e:10:f2:
         78:65:d8:31:6d:49:da:dc:8b:f7:17:97:31:44:26:36:92:d9:
         45:60:22:c0:10:d7:3c:32:f1:b8:04:bd:ef:7e:6f:3e:f0:66:
         5d:8d:93:08:9b:67:ba:ab:e9:ce:30:36:71:3f:05:db:de:72:
         bc:cb:58:a8:4b:b4:e3:be:fd:46:28:db:11:17:16:97:b2:74:
         3c:e8:06:e9:87:76:91:5f:e2:8b:83:d2:69:15:80:c8:25:c2:
         66:08:84:d7:96:b0:22:6b:c5:c7:17:56:44:53:31:d4:b7:3b:
         8e:6c:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:09 2025 by rpki-client