This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File:                     XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier:          weJ42Cvg7GAF2T+fODr43nTNg69YAl3iU4L/oys9KD0=
Subject key identifier:   73:70:3C:1B:4E:D6:83:B5:44:16:B9:4C:5C:04:60:30:05:30:D7:6A
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number:          0113
Signing time:             Fri 19 Dec 2025 03:38:53 +0000
Manifest this update:     Fri 19 Dec 2025 03:38:53 +0000
Manifest next update:     Fri 26 Dec 2025 03:38:53 +0000
Files and hashes:         1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: ErwikC/6I1ACb6fjCeeJe+piRa4KGsdpP6cyzGSo0to=)
                          2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: m0j5NYjPTDIJfmWKHuHfMjMZ9FBAfzwy/hGv/R4OYCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Dec 19 03:38:53 2025 GMT
            Not After : Dec 26 03:38:53 2025 GMT
        Subject: CN=6944c8cd-6f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:02:f1:93:a7:74:06:8e:c9:14:5f:b0:c0:
                    07:08:38:5d:50:21:7c:6c:60:83:76:b7:76:ec:55:
                    d4:43:9d:bc:bb:3d:ba:e4:ba:34:af:16:75:bf:5c:
                    9b:3a:fa:8e:4a:e5:c9:e2:14:ed:28:d3:b6:df:01:
                    82:c3:6e:15:0d:30:f4:5a:14:c8:71:0a:57:b0:3e:
                    c2:13:85:6f:b5:8e:29:90:f8:42:63:29:6f:63:bc:
                    c2:c9:34:30:a3:9a:ae:70:8c:33:47:22:90:44:86:
                    fb:47:2e:a8:36:d1:1b:8e:6b:9e:4b:0e:8d:6e:5d:
                    13:f2:1b:e3:44:6f:fb:63:16:d2:95:ad:58:f3:5b:
                    03:e9:c3:51:31:88:5e:83:b1:3b:dc:32:d8:91:5a:
                    6d:68:fb:b7:2f:0e:11:0b:7f:74:f3:1c:2f:14:77:
                    5a:03:7c:d7:3f:4a:ff:ec:50:35:e3:12:3c:15:6f:
                    f5:ec:d8:cc:e8:97:5d:eb:26:69:5f:88:ec:66:b7:
                    c4:28:84:8a:bc:68:ae:c0:3e:42:87:01:aa:78:da:
                    db:0a:0a:3f:c4:fa:68:42:04:8e:e9:3c:b1:50:f0:
                    1a:1b:8c:22:ff:9b:c4:61:df:5e:08:88:7b:43:62:
                    f4:c5:0b:70:cc:4b:fa:af:ba:2b:5c:62:3d:5b:74:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:70:3C:1B:4E:D6:83:B5:44:16:B9:4C:5C:04:60:30:05:30:D7:6A
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:c8:1f:7e:67:13:e5:63:e9:e5:7b:9e:99:c9:68:4c:0f:
         ba:a6:53:43:f0:c6:8b:63:7c:12:2c:6c:7a:f3:a7:0c:15:b2:
         86:67:fa:a7:48:fa:82:26:d3:13:70:53:0c:3a:ed:9a:99:d4:
         be:71:8f:89:24:72:fb:e0:7f:01:41:d9:6f:5d:72:76:2d:f9:
         13:9b:70:22:5e:9a:11:ce:1f:7e:08:c6:90:fd:44:ab:c6:ac:
         32:85:5c:da:9f:10:57:d6:ac:ab:1a:db:cf:33:9b:b1:ae:f1:
         87:5b:53:95:a3:63:4c:6a:88:b3:8c:6b:59:f2:34:e7:ac:7a:
         f1:ca:b7:19:c1:49:7b:e0:90:d6:d8:c1:dd:97:95:8d:44:e9:
         50:a0:c7:ed:a0:97:87:b0:47:40:39:7b:1e:0d:0a:fb:f6:05:
         78:3b:30:7b:f7:78:5d:96:63:df:e7:d2:7d:89:3d:a4:36:c5:
         c8:34:67:ce:86:15:a6:84:bb:42:a0:99:d1:4d:7f:9c:58:cd:
         7c:76:04:8f:dd:07:d1:c8:97:08:59:15:43:6d:51:1b:1f:64:
         ef:b5:10:81:ff:71:83:b8:d0:8e:5c:68:4a:a8:cf:34:fc:fc:
         fb:31:6a:33:0b:37:bc:ec:64:8e:54:1e:d6:93:7e:50:f5:dd:
         dc:04:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:33 2025 by rpki-client