This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
File:                     RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json)
Hash identifier:          dDkk5CTpHAEZVQMAhBKb6x2Jzx+rFiCvBsRsChDMyho=
Subject key identifier:   0B:78:CA:02:A5:B8:B3:9E:08:A7:21:C9:3F:C8:E1:1D:8C:9B:61:90
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Certificate issuer:       /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
Manifest number:          C9
Signing time:             Fri 19 Dec 2025 04:56:44 +0000
Manifest this update:     Fri 19 Dec 2025 04:56:44 +0000
Manifest next update:     Fri 26 Dec 2025 04:56:44 +0000
Files and hashes:         1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: lwAyq4pu4PxZpwuYgsm3VPeLS3hhJMmv+k49ciD3e0s=)
                          2: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (hash: qJ5gkigO45Hvkw1Tk7rl8bEuQoW6rU3vSUshRruwTnU=)
                          3: D2D1A4B45BD711F089C6844AC4F9AE02.roa (hash: joxu/iZl6wh7AZroV31YozzvLk07ceZzMxMmhwP+p08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
        Validity
            Not Before: Dec 19 04:56:44 2025 GMT
            Not After : Dec 26 04:56:44 2025 GMT
        Subject: CN=6944db0c-1fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:b4:8e:af:34:5b:72:6f:74:06:36:e1:65:
                    eb:04:2d:38:eb:8d:65:53:05:8f:0f:f0:f6:13:69:
                    51:b4:a1:68:27:16:19:89:95:b8:72:16:b3:48:31:
                    f5:da:c0:e7:cd:79:24:ae:8f:84:c8:6b:e7:4d:49:
                    1c:34:5f:42:b7:26:1d:5f:b4:97:b1:8e:95:16:93:
                    dd:fd:36:fb:ae:e3:7c:b6:32:17:8e:a1:d9:9d:7e:
                    e5:d1:b9:6a:b9:b6:db:6d:97:66:c1:96:d9:fa:a9:
                    a8:d2:97:08:d3:c5:d2:27:6f:94:6d:19:bd:d3:10:
                    34:a8:e9:bf:8c:8a:07:bc:ff:d7:b6:38:75:e7:82:
                    82:78:ee:f0:5d:a2:79:ed:71:8d:c1:bb:26:e0:8d:
                    70:4e:95:7d:ce:e3:88:05:c5:dd:f5:e6:82:f0:a7:
                    2f:b8:69:7a:75:82:33:c1:82:ba:f7:e2:57:ab:c3:
                    ba:cd:3c:00:10:b6:4f:15:26:5c:fe:57:d3:0a:8c:
                    05:91:d2:96:44:38:86:9c:0c:e3:e0:f8:34:8d:76:
                    d4:ae:eb:96:eb:ca:a4:0b:d4:df:cc:8a:4e:d8:b6:
                    ef:e9:fe:ef:6a:60:6c:fe:25:c6:5d:d2:25:79:d9:
                    3d:8b:51:df:ca:fc:ff:34:69:36:b9:da:fe:e0:57:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:78:CA:02:A5:B8:B3:9E:08:A7:21:C9:3F:C8:E1:1D:8C:9B:61:90
            X509v3 Authority Key Identifier:
                keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:e9:6e:5b:80:f8:a8:c3:b8:94:03:9a:0a:27:05:b3:cf:
         2b:f1:f1:1f:77:4c:78:ed:d8:d8:64:66:48:40:32:5d:2b:8c:
         7b:79:79:83:66:44:3a:3c:df:78:3c:72:0d:aa:51:62:96:c0:
         4b:59:66:70:38:8c:df:78:46:d0:20:bf:b9:f3:48:e8:b4:ff:
         2e:52:ac:3d:de:42:4c:f6:7a:3c:e5:94:3a:21:23:15:be:4b:
         98:fd:f3:81:aa:6e:44:ab:10:8b:c5:60:68:ec:51:5c:c3:09:
         36:fb:ec:39:12:ed:3a:1d:5d:4c:19:d9:21:f1:81:5d:3e:bb:
         5c:0e:97:1d:e6:47:57:41:53:3e:7a:59:8e:e4:11:01:e3:b8:
         8b:b9:fc:df:30:38:9a:08:0c:9a:aa:78:69:ab:b7:ae:ed:e3:
         3a:55:f3:f3:81:22:fc:d2:3b:a7:d8:ab:18:2a:c0:20:d6:1b:
         66:42:5b:b9:7d:22:9f:0f:87:67:f0:a0:57:87:ba:01:56:3a:
         a9:90:a3:8d:1d:ab:64:7e:86:5b:53:cd:5a:b7:48:2f:0b:b0:
         5e:06:6d:32:09:0c:5d:11:1f:33:bc:62:9f:af:4c:49:77:83:
         cd:9b:6c:e9:d0:12:85:45:81:9b:1d:4b:fe:f9:3f:d4:ff:03:
         84:6d:b0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:54:37 2025 by rpki-client