This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
File:                     MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json)
Hash identifier:          2zd77IBdVEL+xKrqKC1lfLxWasHDRIS2/c5vU7QfyLc=
Subject key identifier:   43:3E:F4:F0:16:4D:52:3A:F9:6B:CE:41:09:D1:C7:B8:51:58:AC:FF
Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
Certificate issuer:       /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
Manifest number:          B5
Signing time:             Fri 19 Dec 2025 05:08:14 +0000
Manifest this update:     Fri 19 Dec 2025 05:08:14 +0000
Manifest next update:     Fri 26 Dec 2025 05:08:14 +0000
Files and hashes:         1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: UTp/Ijbxeb5iOQ/aN9CJ5UDycH7oYZyUofNjC5D0ZgI=)
                          2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: sUWfAuRTWaVVgcAthywuFU4ZlijXzthACuza893doh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
                          rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
        Validity
            Not Before: Dec 19 05:08:14 2025 GMT
            Not After : Dec 26 05:08:14 2025 GMT
        Subject: CN=6944ddbe-a161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:a3:e6:aa:fb:47:74:05:5b:3f:2f:a6:14:
                    05:64:3d:61:9c:83:5e:e1:5d:fc:6f:49:26:b1:15:
                    62:e3:53:d9:4d:b7:77:77:2a:6b:dc:60:7c:1e:99:
                    20:5d:89:73:87:19:72:9c:78:cc:89:9e:e2:f2:b6:
                    31:53:ca:fb:d1:74:dc:8a:41:49:92:b2:90:45:44:
                    b7:73:93:93:e6:b7:0c:eb:f3:66:dc:97:57:06:be:
                    3a:a9:2a:3e:86:24:d5:62:2f:2f:76:75:df:f4:ef:
                    ca:d7:5f:78:12:e3:a9:5c:7f:09:60:46:a3:04:41:
                    f4:c6:da:ae:bc:dd:b5:b4:b1:de:86:62:7a:c2:a0:
                    40:ce:7f:c8:f3:21:42:b3:1a:04:2f:8c:d2:8a:39:
                    99:02:22:a2:a0:c2:e9:43:2a:58:b6:fd:20:7f:59:
                    14:87:d5:8d:cf:36:8f:f2:52:cb:4d:ae:96:23:d1:
                    06:8f:84:fc:19:38:c7:c1:e5:7f:a4:3e:84:05:c5:
                    b2:09:0e:b5:cc:1d:78:a9:9b:31:27:59:8a:1f:a5:
                    67:71:f9:72:bc:2a:0f:b5:1e:cb:00:38:fb:d5:22:
                    ab:37:f3:43:b2:a4:93:d0:59:cf:d2:af:d3:93:7a:
                    fe:60:a8:f0:14:59:0e:7e:d8:69:13:9e:e5:2a:36:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3E:F4:F0:16:4D:52:3A:F9:6B:CE:41:09:D1:C7:B8:51:58:AC:FF
            X509v3 Authority Key Identifier:
                keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a5:a3:92:6d:50:d3:9a:f3:cb:49:70:9c:eb:e5:74:ef:50:
         2a:8b:59:92:3a:97:33:a3:80:7a:35:20:34:22:c8:01:f6:b0:
         70:21:52:51:df:60:03:c7:00:60:42:6d:19:b3:6f:b9:70:ac:
         78:fd:0f:5d:6a:c4:91:57:04:35:d6:29:82:28:ff:c2:15:1e:
         51:30:de:b2:95:43:15:22:56:7b:25:37:94:9d:2d:89:da:dd:
         57:20:41:65:b3:aa:6e:03:bf:0f:f4:17:73:0e:a7:84:51:02:
         07:99:69:4c:2f:d0:04:14:ef:8c:a5:0d:b4:04:74:60:a5:6b:
         8f:ca:aa:ea:0d:11:29:4d:fb:37:28:d3:dd:d0:17:70:36:5b:
         97:b1:a0:aa:4d:5f:07:db:90:a7:6f:cf:17:95:59:00:bd:38:
         e5:51:82:a6:6d:0e:08:eb:0e:f8:ba:8e:00:0f:83:9a:ff:33:
         9f:8f:41:a8:d3:d9:11:1f:57:0a:73:7f:31:00:ba:65:3a:f5:
         3f:56:b3:b5:93:39:f6:af:03:cf:93:9c:90:6a:d3:19:ee:b2:
         1d:b7:64:b3:d1:56:20:df:3c:00:7b:cd:99:8f:fd:d2:3d:f3:
         48:09:93:9f:f0:03:c6:85:78:6f:82:ed:e2:c9:c4:6a:f7:ba:
         7f:de:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:32:23 2025 by rpki-client