This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
File:                     shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json)
Hash identifier:          p9BhU1H/dcHNLkKw5SWxVjopknx0vp/iG48rTH59FH8=
Subject key identifier:   3B:31:B6:B3:93:0A:5F:CC:5E:7A:8B:63:D6:38:CF:7F:D4:54:D5:48
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Certificate issuer:       /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
Manifest number:          92
Signing time:             Fri 19 Dec 2025 05:33:58 +0000
Manifest this update:     Fri 19 Dec 2025 05:33:57 +0000
Manifest next update:     Fri 26 Dec 2025 05:33:57 +0000
Files and hashes:         1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: 6Ua7eCXwLUgfJFE3J0FJaDoUBDIAK+FGRTqS6stGmWY=)
                          2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: yccW+1ACapqEoCH6+LHPWiR8nw1+mshcVd6qYR3Nz+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
                          rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
        Validity
            Not Before: Dec 19 05:33:57 2025 GMT
            Not After : Dec 26 05:33:57 2025 GMT
        Subject: CN=6944e3c5-8ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:cf:ba:2b:d0:fc:69:84:b0:11:87:9e:a7:
                    42:68:bc:08:8c:64:dc:85:00:07:4b:b0:59:bc:34:
                    69:d4:cd:0e:86:d5:71:8e:db:4b:46:a5:f8:bb:30:
                    1f:4e:55:da:68:d2:d7:1c:78:df:22:e2:a5:11:5f:
                    fb:65:89:af:b6:a3:7b:44:fd:f2:1a:80:86:21:41:
                    78:96:45:f1:bc:e8:b0:50:88:1c:5c:84:57:11:20:
                    2c:6d:59:ae:e9:89:5c:ef:59:27:65:27:8e:29:8a:
                    cb:1b:95:36:0c:39:f1:ab:30:84:18:32:3d:0b:18:
                    b6:d7:54:b1:29:a9:b7:8e:a6:75:d3:b1:a9:3b:b5:
                    7a:4c:84:0d:79:df:e7:10:23:0c:9c:d5:e2:d8:ba:
                    a2:45:1b:75:df:af:36:dd:cd:03:14:60:c0:b5:62:
                    59:d6:f3:6e:eb:24:f8:63:8c:4c:1e:b0:ed:52:63:
                    a2:1d:40:c2:5b:0a:dc:b7:59:2e:46:c5:a6:47:2e:
                    a1:20:8c:d2:cc:e4:8b:53:88:16:7f:58:d6:f5:39:
                    82:8e:81:09:dc:e0:33:67:90:b8:c1:e0:24:47:88:
                    f4:d2:40:9d:1d:6d:f5:88:45:e8:04:56:75:78:b2:
                    cb:30:67:0b:c2:58:85:14:ca:08:c7:04:36:ac:84:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:31:B6:B3:93:0A:5F:CC:5E:7A:8B:63:D6:38:CF:7F:D4:54:D5:48
            X509v3 Authority Key Identifier:
                keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d9:3a:e0:4b:50:0b:fb:63:71:dc:2b:6e:40:ea:72:ef:8f:
         01:c6:ae:c6:66:d1:00:39:1d:6e:ca:94:a7:15:f6:8e:78:25:
         fb:ab:35:59:9e:f3:3d:71:61:5d:a2:08:40:61:5a:c9:21:c7:
         11:1d:25:e8:33:2e:70:5e:72:e9:10:16:92:99:47:61:db:91:
         ec:47:40:66:12:94:8b:22:ba:22:b1:91:2c:78:e2:80:a1:cb:
         a6:d0:0d:6a:02:ac:5a:05:ef:b9:8a:01:51:c4:56:fa:97:59:
         a3:10:b2:f2:be:7e:f0:f0:e8:e6:e3:d0:21:38:18:1c:a7:40:
         1a:a3:f6:64:8e:7e:7b:4b:8d:2d:71:b9:95:e7:b5:16:51:e1:
         03:03:49:d1:f4:05:25:9d:9d:73:68:f8:58:e5:51:69:3c:e0:
         62:dd:b1:20:5c:dc:3d:f6:fa:73:81:14:e4:f7:8d:90:0e:d2:
         9f:8a:8a:d1:c6:23:7c:66:39:2b:2f:9e:d4:97:f7:40:e8:72:
         5b:b7:2c:bf:f9:79:2e:32:8c:0a:f8:53:05:b6:44:12:81:b0:
         ed:44:ad:82:a9:62:31:db:d9:24:15:5d:d8:67:38:78:31:bc:
         70:80:72:34:ce:93:3a:7a:89:6a:c0:35:8a:50:85:2e:dc:e8:
         b9:0e:8d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:03:38 2025 by rpki-client