This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
File:                     dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json)
Hash identifier:          skkMihFNbmUD3HPMP8eGlkbdrjMnczXDlcXYruP1Ze4=
Subject key identifier:   52:AC:B5:7A:29:F3:88:33:2C:71:96:41:31:19:69:8D:88:33:26:F2
Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
Certificate issuer:       /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Certificate serial:       054E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
Manifest number:          0546
Signing time:             Thu 04 Dec 2025 22:03:25 +0000
Manifest this update:     Thu 04 Dec 2025 22:03:25 +0000
Manifest next update:     Thu 11 Dec 2025 22:03:25 +0000
Files and hashes:         1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: cbzlBiS0Krav3Lt95ikpLXSZfax/sJ+NPUZjTbX/hDg=)
                          2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: HTAfgnbb95dalkOTAbHWMWTWtHbzmjtdt456isQiNME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
                          rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393
        Validity
            Not Before: Dec  4 22:03:25 2025 GMT
            Not After : Dec 11 22:03:25 2025 GMT
        Subject: CN=6932052d-a38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:6d:d4:86:35:ef:4d:2b:6c:15:fb:c0:bf:
                    d1:83:f7:fa:43:46:60:2c:83:79:7d:13:d5:5d:8c:
                    23:65:eb:45:56:97:2f:7c:45:eb:17:e8:30:be:24:
                    22:17:29:33:e2:52:13:0f:12:ff:6c:39:fd:fd:86:
                    b1:43:97:50:f0:01:83:74:2a:d6:f4:fe:eb:b0:4e:
                    c8:8a:ff:6c:4c:cf:f9:35:ea:b3:52:f4:b7:3d:13:
                    66:2d:ce:ba:1d:80:a8:bb:0d:f1:63:67:da:0c:44:
                    04:d9:da:4b:12:27:48:ca:ab:fe:6d:00:07:5d:cf:
                    fd:95:55:cc:b7:69:3d:d9:72:9d:81:dd:f7:7a:5c:
                    e2:ca:5d:13:3e:dd:dc:f0:c4:ac:fb:87:1f:f0:01:
                    14:2e:cb:12:33:5f:99:b2:a7:da:13:7f:88:7d:7c:
                    04:5a:75:e1:33:2d:27:44:8d:be:d3:d2:e3:84:92:
                    4b:57:ae:0d:34:df:e0:69:f1:55:60:54:43:8b:ff:
                    ae:b8:26:38:01:5b:49:bf:a8:ab:d5:91:9d:b6:92:
                    1b:75:a5:d7:fa:45:55:5f:db:fd:1c:02:01:26:03:
                    79:01:c6:f8:0a:e4:13:4a:17:0d:60:7c:46:f7:44:
                    89:e5:f4:07:f6:5b:99:f6:88:28:b8:ba:35:38:29:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AC:B5:7A:29:F3:88:33:2C:71:96:41:31:19:69:8D:88:33:26:F2
            X509v3 Authority Key Identifier:
                keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:75:3f:94:a5:45:60:a7:5a:df:fc:48:7a:cf:db:f1:d2:e4:
         7b:d7:95:41:f7:82:d8:bb:df:b0:22:66:c2:08:5b:61:31:07:
         03:fd:76:59:eb:81:d7:26:2a:87:d7:6d:bd:71:fb:52:f0:e8:
         a8:21:ee:00:de:0e:a2:9f:df:b5:0a:51:79:09:01:5b:91:78:
         ef:8b:2e:33:39:48:41:ee:1b:85:e5:dd:55:08:b2:6a:a6:f4:
         c2:b4:33:97:78:48:09:26:3b:4c:6b:2f:17:e6:33:fc:39:e9:
         e8:d9:f7:0a:6a:9b:eb:e5:86:57:0c:ee:5d:02:c2:c1:1d:98:
         c9:da:db:1b:5b:ce:2c:5a:0d:c8:4f:51:45:4a:7f:68:9e:61:
         1f:f6:15:c8:50:90:a8:51:d6:89:2a:4c:3e:49:50:65:c3:18:
         3a:f0:a0:82:77:df:c7:1f:35:76:58:91:3e:f4:3e:27:2c:70:
         dd:8a:93:c6:60:0c:a0:e9:ef:08:aa:92:fd:3b:ab:47:44:5e:
         de:3e:2c:e5:c7:e4:14:c3:e4:93:0c:d0:c6:fe:ae:61:39:51:
         3a:5d:76:57:2c:d3:a3:70:6e:c4:3e:22:e2:07:8a:0a:f1:11:
         ce:4c:87:f8:ac:64:e2:88:a9:9d:a0:ae:17:2a:f0:d3:10:4e:
         18:60:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:51:33 2025 by rpki-client