This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File:                     dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier:          y9jF3nzyO4Xm3fj4EISicK4T6l1xn77NC/kZxLshHvE=
Subject key identifier:   33:1B:2C:0C:11:16:72:FA:4A:1A:D7:5A:73:84:B0:A3:EA:9C:8E:0F
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer:       /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial:       0424
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number:          0414
Signing time:             Thu 18 Dec 2025 23:43:17 +0000
Manifest this update:     Thu 18 Dec 2025 23:43:16 +0000
Manifest next update:     Thu 25 Dec 2025 23:43:16 +0000
Files and hashes:         1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: h21r5fC2xsoV14WWpOlvnm2MifE0bn/vqIsyxrzg8Cw=)
                          2: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: FkNOr2OAvQ+/2fjoQ+ttW/rGycCdH0fNwqceJH3qGXA=)
                          3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: qLefOo7dvmrLJXMQn53EKJf0jFwExcla3oAdVHf5x9E=)
                          4: D9AD698C961211ECB515C474C4F9AE02.roa (hash: 0Y4nA/Aph2MoTUodk+O6k9Ce17owZ/QgLBqclqJBZ7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
                          rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
        Validity
            Not Before: Dec 18 23:43:16 2025 GMT
            Not After : Dec 25 23:43:16 2025 GMT
        Subject: CN=69449194-2ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:6d:03:0b:ad:7f:0f:f8:49:e8:eb:8b:6d:
                    83:de:aa:f0:df:91:c7:33:13:91:ea:4c:42:d8:0f:
                    ee:1f:9c:19:75:45:36:65:9f:f8:9e:95:6b:0c:41:
                    44:5c:c0:9e:16:7f:0f:8c:70:0e:f0:c1:07:b1:d4:
                    2a:85:4d:0d:e2:57:a1:73:be:67:07:64:20:fd:3a:
                    11:68:9a:5c:c0:8a:3a:67:fb:8b:1d:77:85:e2:b1:
                    f5:e5:36:a8:31:d9:43:13:ff:3e:f8:b4:03:fe:32:
                    1c:68:4c:22:fb:8f:00:74:83:6b:ea:0c:9e:95:b2:
                    77:c3:ed:b1:03:8f:0d:98:19:80:79:a7:87:83:b7:
                    5e:ba:0e:20:58:f8:19:13:8d:38:09:e6:11:60:95:
                    e0:5d:6e:83:1c:04:22:a6:1f:2b:19:2e:6a:b7:1f:
                    77:ec:2e:af:26:ce:f6:4c:14:50:e5:72:b2:d7:7a:
                    37:e1:b8:a6:3d:89:35:d5:db:86:a0:5c:ca:20:a3:
                    49:de:01:8e:f0:a3:cc:19:b0:6f:cd:62:bc:1d:4c:
                    ca:f1:66:69:1b:d2:8d:b6:da:a7:cf:30:29:72:36:
                    ad:8d:bc:87:0a:c4:69:c3:67:72:08:ff:86:16:36:
                    7e:40:71:91:33:0b:96:2d:7f:c8:1f:c9:2a:5a:eb:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1B:2C:0C:11:16:72:FA:4A:1A:D7:5A:73:84:B0:A3:EA:9C:8E:0F
            X509v3 Authority Key Identifier:
                keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:33:8b:0c:6b:4e:b9:32:71:29:01:fc:c6:79:5a:50:5e:34:
         b1:4f:eb:06:34:a5:dd:68:ca:3d:44:8b:44:2d:b9:04:08:3f:
         27:52:c5:08:30:63:fd:03:9d:cd:8b:d1:9c:03:4a:10:70:65:
         51:eb:56:3b:30:7e:b4:5d:09:2e:6c:19:95:7c:ba:32:96:11:
         1b:11:f8:20:65:1e:6c:a5:c1:9f:67:ed:5d:f9:a3:06:dd:68:
         4b:5e:7f:b9:17:27:6c:42:73:c0:78:9c:57:c2:ac:b9:e2:aa:
         d0:0b:df:66:0b:25:5d:2e:02:96:d1:3e:83:a3:52:42:96:75:
         c7:48:b5:39:1f:c1:08:7f:60:e9:e7:9e:b3:b3:f6:9d:bb:b6:
         91:7d:b9:20:43:8e:5b:5e:5b:aa:60:34:b0:e9:8d:e2:8d:87:
         a5:12:f6:25:d3:de:8a:3d:5f:a5:49:3c:25:f8:73:57:9c:4c:
         c7:fc:39:c8:4d:32:45:0b:14:24:91:cb:5c:ec:33:fb:9d:c8:
         f8:25:b4:d3:ab:fc:af:f1:23:64:4f:c6:46:a9:57:74:70:43:
         f7:ba:e8:9f:8a:d9:07:0f:34:a5:ef:d7:5b:af:91:e9:44:8c:
         89:fb:c2:bf:44:d2:2b:5b:24:27:20:9b:a1:c6:5f:cf:8f:bd:
         d6:ca:3a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:46:48 2025 by rpki-client