This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
File:                     MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json)
Hash identifier:          BdJhBw2mFBHIrpfaBRALijba7wkBYPy3Su79c5rQCvM=
Subject key identifier:   8D:AF:04:C6:D5:F5:8E:E4:30:26:E5:0C:D6:48:AB:1E:7D:F2:C1:43
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Certificate issuer:       /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
Manifest number:          063F
Signing time:             Thu 18 Dec 2025 22:12:47 +0000
Manifest this update:     Thu 18 Dec 2025 22:12:46 +0000
Manifest next update:     Thu 25 Dec 2025 22:12:46 +0000
Files and hashes:         1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: j/HS2IO8yMZ1nK3J/rpkhMgAnsMqZTYe2xVudNzrKHs=)
                          2: B902532EFEA211EDB9013076C4F9AE02.roa (hash: drfPb+wsZvR+2/MNwdz1cNWuRVIEZ+Qx8nSL5NiDabc=)
                          3: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: 691+02/w7Hvvvxts+u+wZs/SnQae95oqmqWQ70mluhE=)
                          4: B9A42F96FEA211EDB9013076C4F9AE02.roa (hash: hyqKDl6jtyGKyJAIAa4mx+PngO9SccHqsfXS7jNKJMs=)
                          5: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: 21tBW1VF1vSpAUMu3v9M3rwY90XGE+/GtmmuaU3EsAw=)
                          6: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: lY3WVWAOTyIsAjMp/FETDq12SBCAxXSbP620LU0HkGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
                          rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
        Validity
            Not Before: Dec 18 22:12:46 2025 GMT
            Not After : Dec 25 22:12:46 2025 GMT
        Subject: CN=69447c5f-0bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:8f:45:cf:2d:ba:96:86:c8:41:56:b4:c8:
                    27:51:d4:25:db:28:3d:c8:ca:72:52:c5:37:e1:f0:
                    30:ba:6a:38:47:74:a1:56:a2:cf:d4:c1:f3:5d:97:
                    44:c1:40:72:d6:0e:9b:af:22:ce:91:44:86:90:e8:
                    8d:e1:4c:d2:ff:c4:87:2c:08:56:99:bb:60:03:66:
                    c2:63:ef:2c:50:e8:8f:b4:6b:da:8c:54:c7:1e:ef:
                    25:87:e1:71:35:9c:3b:0b:57:64:e7:46:2e:02:9d:
                    3a:73:65:f8:c8:12:fb:d9:e5:e0:0b:58:0a:eb:21:
                    0a:b5:1b:b4:47:8c:e1:34:c7:d7:b6:6b:86:67:0c:
                    4c:9d:ac:a0:5c:45:f0:a1:b7:32:eb:90:37:05:e0:
                    b1:ba:94:4c:87:7f:a4:7c:f3:42:39:d0:32:56:61:
                    95:b1:0d:3e:dd:fa:e4:cc:90:a9:1d:c8:a1:7b:b1:
                    e1:e9:39:dd:8e:f8:34:4b:fc:c8:52:7c:dd:51:66:
                    6b:b0:ae:a4:d3:38:d9:10:e8:f3:d9:e8:d2:19:da:
                    6a:ea:d2:ae:cc:97:04:a4:b1:ea:a1:3d:ba:07:36:
                    07:71:c5:f4:15:26:b0:64:3d:14:16:f9:e4:d1:55:
                    10:ba:66:e5:4f:9c:93:d8:16:7d:62:e9:b0:e3:36:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AF:04:C6:D5:F5:8E:E4:30:26:E5:0C:D6:48:AB:1E:7D:F2:C1:43
            X509v3 Authority Key Identifier:
                keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:be:5d:0c:ca:92:ed:f9:dc:28:42:b0:9a:b3:bf:45:f0:10:
         c2:ce:ac:35:01:25:0e:a6:e2:be:8c:a1:d8:31:64:f7:be:9a:
         6e:4a:e2:7c:29:86:7d:60:91:2b:eb:e3:7f:af:03:85:af:48:
         d6:1a:0f:c1:78:ae:65:43:15:19:8a:28:99:d2:14:2e:8f:8d:
         cd:24:c5:14:cd:fe:ef:10:71:0f:69:de:e1:80:62:61:b0:18:
         25:d8:94:64:a5:e2:fa:70:24:eb:25:79:b5:67:d0:d7:7e:69:
         df:93:9b:a6:20:11:f2:4b:38:3d:8e:99:46:0c:52:cd:85:2c:
         d0:c1:61:56:1f:be:3b:d6:27:b8:59:22:76:00:5c:b6:cc:01:
         6c:67:f3:6a:45:e4:3a:89:e0:e7:38:2e:cd:eb:3a:e3:57:81:
         b9:97:83:3d:4c:f1:69:7a:ae:0e:6e:52:53:b8:17:a2:5a:5a:
         5e:0e:97:66:da:04:88:c9:53:78:60:b4:61:8b:25:00:86:17:
         c5:3c:0e:db:4d:fd:ba:16:fc:47:22:2f:99:8d:04:c7:7f:c9:
         6e:a2:7b:34:1b:02:38:1e:11:af:42:dd:a5:14:24:f8:4c:c0:
         2e:b2:e7:7a:17:4d:b3:01:5e:de:fa:37:28:75:7b:f5:fe:d7:
         45:51:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:48:01 2025 by rpki-client