This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
File:                     W9MkppvSbt2t9RKc0Y93odgFI7Y.mft (raw, json)
Hash identifier:          82tBW2jRqHCY2Wniz0rWcfz13V1ImJ3Ib2Nun7LlIFI=
Subject key identifier:   34:9D:50:69:9E:DF:4D:18:5F:FD:A2:EF:1C:09:7F:FD:3D:91:AF:0F
Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Certificate issuer:       /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
Manifest number:          EA
Signing time:             Sun 21 Dec 2025 04:33:16 +0000
Manifest this update:     Sun 21 Dec 2025 04:33:16 +0000
Manifest next update:     Sun 28 Dec 2025 04:33:16 +0000
Files and hashes:         1: W9MkppvSbt2t9RKc0Y93odgFI7Y.crl (hash: jSWumOLrqC7sBkeEQShv4ttf9/QB5dALy5LHkt2NhlM=)
                          2: 09FB57587C7411EFB8CF8A27C4F9AE02.roa (hash: gO0CUhCgilm8/UUOXFuuBpFB5QM9rFiYOIsqVOXOzlY=)
                          3: 0A918056D24C11EFB8B5C95EC4F9AE02.roa (hash: cBGezkS6P+KbPVWAkP/GyV+QTZO+g5cPSzSssSv6zII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380, serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
        Validity
            Not Before: Dec 21 04:33:16 2025 GMT
            Not After : Dec 28 04:33:16 2025 GMT
        Subject: CN=6947788c-75ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:ca:b4:63:d3:93:3b:14:c0:73:db:eb:5e:
                    41:0e:5c:9c:0c:4a:61:28:7c:cb:3f:5f:e1:64:2f:
                    f2:15:f9:fc:bc:b3:0a:78:ea:12:6f:79:c3:6f:a8:
                    a6:7b:8d:1c:ac:c9:b5:6d:aa:33:32:10:aa:e4:46:
                    43:eb:b2:53:b5:67:dc:07:ba:1b:b1:fe:7f:38:ea:
                    34:86:c2:cb:1b:74:54:ed:44:41:26:52:2e:b9:a0:
                    a6:f9:03:c3:a9:86:ea:e6:1e:98:a0:6f:48:e2:c2:
                    5d:ec:2a:b3:aa:2c:04:bb:6c:ec:92:16:03:74:a3:
                    1e:9c:63:c2:cb:79:50:b1:75:ae:67:80:fd:21:08:
                    3f:ea:f9:af:78:58:e6:5a:af:ae:ef:f4:61:00:d4:
                    45:fb:2b:5c:43:0d:b2:fd:c2:e3:46:1d:9a:6c:63:
                    8b:e9:8e:83:05:5e:53:a9:53:a1:90:4b:dc:80:d5:
                    f9:33:1b:0d:4b:2d:71:f8:53:ec:43:17:35:40:2f:
                    70:f4:93:37:05:ec:75:a7:35:cd:38:31:7d:d4:0a:
                    a7:f5:b0:49:b6:42:ee:7c:15:6e:57:ee:71:59:71:
                    12:37:04:4c:fa:1c:7d:a2:8c:70:95:34:5f:cb:a6:
                    1b:5a:a4:df:28:0c:ec:e7:4e:ab:2e:a6:b6:51:15:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9D:50:69:9E:DF:4D:18:5F:FD:A2:EF:1C:09:7F:FD:3D:91:AF:0F
            X509v3 Authority Key Identifier:
                keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:63:2c:4d:7e:0d:c2:fa:38:0a:31:be:43:f0:02:cf:58:e9:
         3e:ea:a7:aa:9a:9d:83:4e:c9:66:28:b7:d7:97:e1:8c:3d:97:
         5a:c7:c0:88:cc:02:a6:b8:67:3d:ea:9c:c3:e4:a4:32:47:7c:
         be:21:be:43:01:3f:34:38:f9:48:dd:47:fa:dc:91:71:1b:6a:
         ab:4e:5e:4f:f8:e0:1b:60:83:ed:68:35:6f:0b:80:92:41:d8:
         21:f3:f9:46:0f:02:95:24:ac:62:84:39:89:8c:ef:cc:42:8d:
         a7:32:1c:88:59:3c:9b:42:e7:a4:06:bb:3e:6f:05:da:74:f8:
         94:09:1c:59:3a:0d:64:68:28:0e:8a:0d:8e:fa:38:be:73:23:
         c6:46:db:4c:d7:49:4c:78:d8:df:f0:e9:9a:09:2a:a7:54:53:
         e7:be:09:e4:56:d5:4b:ea:37:2f:ac:ec:fc:df:90:91:c0:fa:
         69:db:3c:14:1c:e9:98:5b:32:3e:4e:70:54:18:1f:ed:8c:1b:
         a8:9f:a4:df:4e:e9:76:02:86:be:41:43:50:ab:6c:91:fb:4e:
         0b:71:7f:df:da:8a:9d:15:11:8e:dd:ea:fd:30:d7:cd:bc:19:
         71:17:2c:1b:5a:09:cf:58:8d:36:36:16:82:cb:9f:ae:7d:2b:
         5d:25:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:31:07 2025 by rpki-client