This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
File:                     rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json)
Hash identifier:          RYHfXMtCIoW+wsADudIN07ojoM7W+he57DzN5moRba4=
Subject key identifier:   6B:5A:50:24:DE:72:74:8B:DF:59:38:0A:90:0C:B2:3B:A8:58:82:9A
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Certificate issuer:       /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
Manifest number:          FC
Signing time:             Sun 07 Dec 2025 03:26:21 +0000
Manifest this update:     Sun 07 Dec 2025 03:26:20 +0000
Manifest next update:     Sun 14 Dec 2025 03:26:20 +0000
Files and hashes:         1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: GeHcUef5RcyW38Ak7bSwkFf+mDyv9ssSmOY5EX5rclU=)
                          2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: t3nWUOarrxhEFD60ip2NaXslcMEcqGLVxqGfot6fF3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 03:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
        Validity
            Not Before: Dec  7 03:26:20 2025 GMT
            Not After : Dec 14 03:26:20 2025 GMT
        Subject: CN=6934f3dc-d69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ec:bc:c9:1e:7e:66:1c:81:e9:90:51:57:49:
                    a2:e3:f7:2b:eb:b9:9b:1e:f6:51:a4:bd:86:5e:9e:
                    fd:61:26:63:5c:72:80:1e:cf:88:3b:2c:de:f1:d3:
                    f3:83:02:e4:ce:a8:b8:80:b2:cf:97:45:2c:8a:05:
                    c0:1b:33:99:7b:75:84:a9:96:17:ee:41:7d:6b:37:
                    70:7d:7f:e4:c0:90:cf:32:c1:b7:0c:e1:39:45:94:
                    bf:16:d4:a6:d2:ad:42:e4:03:0d:fe:2a:86:6e:35:
                    a7:07:e6:0c:02:dd:9c:dd:1c:5a:2e:f3:9f:4d:ae:
                    50:41:a9:3a:2b:7e:f3:0a:93:b9:4b:77:eb:d9:ea:
                    e8:73:6e:62:d3:f8:c9:3a:71:af:c1:97:7f:ce:5b:
                    04:19:55:c0:f6:70:e3:04:66:c6:52:43:cc:19:85:
                    e3:d3:74:ae:8f:6e:ec:22:d3:20:7f:16:ba:9f:ed:
                    ce:a9:b4:b6:c9:57:a5:28:4f:93:d6:95:31:5c:5b:
                    65:3b:e6:5b:fd:6d:33:63:a8:e6:0c:d9:6d:12:35:
                    45:26:62:b2:c2:4a:63:62:53:47:5f:da:c2:67:7a:
                    f8:09:48:71:86:79:34:93:60:8b:f2:1f:52:b1:70:
                    d9:aa:d7:b3:fd:53:bb:d5:43:32:48:30:6c:41:ef:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:50:24:DE:72:74:8B:DF:59:38:0A:90:0C:B2:3B:A8:58:82:9A
            X509v3 Authority Key Identifier:
                keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:94:d7:84:10:e8:07:4b:11:b8:69:a6:4a:e5:1e:c8:53:39:
         77:7d:d9:90:0f:98:5a:fa:1b:5e:79:6b:53:1e:95:43:7c:c8:
         c7:d4:f8:e6:2e:ee:91:35:85:1b:1d:6e:9d:6a:b7:a0:0a:a6:
         38:d7:30:70:c7:e6:b6:29:8f:b0:91:e4:89:cf:51:ec:2c:93:
         51:10:22:5a:7c:62:b8:a2:c6:6b:da:6f:80:fc:3b:b8:a0:66:
         e1:f5:cb:7a:56:21:83:35:c2:40:ce:9a:81:17:7d:11:d3:6a:
         05:ca:6e:31:9f:0d:cd:b8:d3:c4:c5:4d:d5:d6:ec:76:75:8b:
         e6:12:da:36:1e:2a:08:58:c7:79:c5:1e:4e:4a:29:f4:71:c3:
         77:e1:cc:2a:7e:98:4b:84:4f:1e:3f:52:5f:27:68:39:fa:be:
         37:b0:21:3f:1d:96:05:a6:1a:71:d4:43:e4:54:e3:ca:05:65:
         4a:fb:30:b7:d2:4d:04:f5:86:d0:1d:b8:1d:95:68:d4:b1:aa:
         84:d8:ed:c5:bb:88:6f:e4:ca:d5:f0:28:f7:b7:ee:dc:64:d6:
         0d:58:d0:d4:1c:dc:f6:9e:12:97:c7:4c:db:6e:0f:8d:42:58:
         91:4e:be:41:46:c1:c0:c7:c7:37:ef:39:d5:a6:bc:53:d9:be:
         09:f2:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:02:11 2025 by rpki-client