This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
File:                     mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json)
Hash identifier:          9y/Vz6AtoP3+JsCvcudv0N7FpFk0GWVfRqG3jppcy9M=
Subject key identifier:   BB:92:C0:B3:01:B7:4A:7D:F3:73:BD:2D:C5:75:83:93:0C:45:19:94
Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54
Certificate issuer:       /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
Certificate serial:       08B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
Manifest number:          08AE
Signing time:             Thu 18 Dec 2025 20:00:53 +0000
Manifest this update:     Thu 18 Dec 2025 20:00:52 +0000
Manifest next update:     Thu 25 Dec 2025 20:00:52 +0000
Files and hashes:         1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: XV+nyXt85fQbAhplZ3CMlWdSmIUljk0+WVAiDbXmfv8=)
                          2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: T+G1W9rqPVXfAfXBVOCsgu5yMoOrWw64N8nuPtrgLBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl
                          rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F7E7, serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
        Validity
            Not Before: Dec 18 20:00:52 2025 GMT
            Not After : Dec 25 20:00:52 2025 GMT
        Subject: CN=69445d74-2962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:78:fe:5d:f3:a7:18:f7:88:32:d0:a9:e7:
                    5e:37:c5:69:51:27:a8:28:f8:7e:87:0f:b0:b2:53:
                    f3:bd:e2:83:19:a9:a9:de:08:6e:4e:89:b1:76:c6:
                    c6:ee:0d:f7:82:42:f7:6f:5a:76:9d:f8:fb:1c:dd:
                    af:87:97:69:65:09:06:cf:a0:48:ab:14:01:da:17:
                    3b:d2:d8:17:97:0e:c4:86:2e:3f:79:73:c9:ef:99:
                    44:55:b2:a8:ad:c8:5a:45:a4:08:db:f7:83:3e:ea:
                    16:23:d5:13:61:bf:db:20:aa:c5:bb:21:e7:eb:28:
                    8c:9b:0f:09:2d:c0:39:94:28:de:92:15:75:88:b7:
                    e3:4b:83:e1:61:5d:34:4c:6b:b9:09:82:f1:ea:77:
                    73:1e:29:52:42:a4:b0:97:62:4a:ca:3f:03:0e:ab:
                    94:2c:36:cc:25:bb:f7:5d:3d:64:cb:43:bc:ab:72:
                    2c:fe:43:14:60:19:d8:d3:70:96:f8:50:d4:34:3c:
                    52:54:67:1e:b3:5a:c8:33:42:c9:f1:75:bf:c9:e7:
                    60:c5:82:0e:7c:9e:d8:e8:37:69:60:ca:d2:af:99:
                    9f:de:1b:fb:1d:63:ff:9c:a7:7f:d9:64:fc:d4:c2:
                    3b:aa:83:3f:8d:b1:14:2c:7b:70:95:9d:53:23:31:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:C0:B3:01:B7:4A:7D:F3:73:BD:2D:C5:75:83:93:0C:45:19:94
            X509v3 Authority Key Identifier:
                keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:4d:62:4a:c7:4e:70:4c:2c:08:28:ac:39:5f:27:ba:3c:bf:
         89:5f:7a:40:b8:cf:8a:46:9e:3c:01:e2:9c:cd:81:9d:2c:8b:
         42:d9:03:16:5b:bc:b5:88:ee:e2:81:c1:d1:f2:1a:30:e5:3d:
         84:b1:26:cf:53:a4:16:06:49:bf:a8:da:5d:77:21:18:24:1b:
         10:6c:1f:c9:60:47:31:6a:38:f5:11:8a:96:11:6e:9a:8e:5e:
         bb:29:eb:ce:2e:e4:3f:50:22:e4:c2:43:12:f9:94:f0:76:1e:
         99:e2:88:d1:02:a0:43:d9:cd:69:3f:15:2c:c9:ab:23:12:f9:
         45:30:85:3c:76:e8:8b:84:cf:15:d4:b7:09:b9:ea:05:58:ee:
         17:15:92:61:40:77:d6:eb:2a:64:95:60:73:42:0a:5d:aa:3e:
         89:03:4d:69:71:e5:86:47:3f:0b:a6:77:ce:e4:31:2d:0d:c5:
         30:35:43:a6:0b:a2:80:65:15:a9:20:7f:cb:70:a8:2f:ed:41:
         be:08:4d:23:9a:87:47:ef:d7:dd:33:f0:a2:06:97:fc:09:9d:
         d4:b6:93:b7:a0:e5:1c:6d:e7:49:f3:0c:6d:ee:fc:b8:52:d1:
         7c:64:3f:2e:07:88:9b:70:57:43:22:10:ce:43:f4:46:d2:90:
         59:11:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:23:21 2025 by rpki-client