This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
File:                     3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json)
Hash identifier:          gV3M3IWFmrLJ58OPiJ5C2ePcWF5kt6EqpsMFf97uemg=
Subject key identifier:   6F:38:05:31:59:CD:5B:59:BF:77:50:83:6F:0E:56:0F:7B:EA:BE:DE
Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C
Certificate issuer:       /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
Certificate serial:       03EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
Manifest number:          03E6
Signing time:             Sat 06 Dec 2025 23:11:59 +0000
Manifest this update:     Sat 06 Dec 2025 23:11:58 +0000
Manifest next update:     Sat 13 Dec 2025 23:11:58 +0000
Files and hashes:         1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: hT74n5NyKlrjWuDDxHJy4l7y0II3l8WbpEe9JJrEY8A=)
                          2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vZ/WaADoEuy2hBBHTZfwXR0fuTeB5hZjwEti8AL2NUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl
                          rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
        Validity
            Not Before: Dec  6 23:11:58 2025 GMT
            Not After : Dec 13 23:11:58 2025 GMT
        Subject: CN=6934b83e-593d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:1d:a9:3a:13:02:f6:d8:75:1b:ec:6f:10:
                    84:18:60:fc:6a:e1:b2:52:57:e2:6d:d2:0c:c7:07:
                    6d:f9:30:6a:4f:ab:95:38:5f:df:54:66:14:d6:49:
                    56:8e:58:81:34:1d:68:76:55:ea:95:b9:41:b2:9e:
                    aa:57:de:b7:80:9a:60:35:76:7e:25:51:d2:cd:7a:
                    41:a2:4b:f7:c2:32:00:0e:e6:5d:cd:f2:e6:eb:89:
                    cd:3e:2b:6e:b5:35:18:c2:12:66:4f:d6:77:f2:22:
                    56:a7:84:38:0d:59:e2:48:87:f4:ec:23:cd:08:12:
                    c6:a5:38:06:e7:da:ba:2a:a9:71:e6:44:26:5c:29:
                    39:22:b2:5b:2f:e2:fb:81:f1:90:fc:fc:1c:fc:53:
                    f8:e5:b1:f7:85:7d:4b:08:40:97:22:93:19:2e:76:
                    1d:3d:99:4c:7f:be:e5:42:e2:66:ab:06:a3:29:c4:
                    40:09:36:3c:db:98:96:03:6f:4a:02:c2:c7:39:5a:
                    73:10:e0:9f:8c:54:ed:d7:6a:4d:23:1b:c8:48:b5:
                    7c:17:bd:2d:c8:ae:55:67:54:69:b9:65:a2:95:7e:
                    f4:da:d5:0d:2c:ca:e9:66:fe:14:88:20:51:21:bf:
                    e8:37:07:49:1e:cc:84:4c:d1:65:f4:62:37:69:3d:
                    c5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:38:05:31:59:CD:5B:59:BF:77:50:83:6F:0E:56:0F:7B:EA:BE:DE
            X509v3 Authority Key Identifier:
                keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:d4:1a:d8:89:d5:95:a1:36:a4:61:9a:f1:11:b5:6d:94:
         64:69:bd:f9:2d:76:2f:3b:e6:7f:d0:47:d1:6c:82:41:f3:70:
         36:6f:3a:9d:e4:ae:b8:9d:08:b7:70:84:5d:c9:0b:47:65:d7:
         c1:9f:02:4f:ae:c6:54:ec:46:ea:bc:a4:0a:22:66:d2:62:c8:
         ba:3c:4a:e8:1d:c9:e7:65:5d:77:eb:a6:93:a6:fe:b7:26:1b:
         c6:89:84:dc:6b:e4:a0:d1:71:c3:73:a7:c6:2d:75:f5:a0:1f:
         a9:5e:83:f0:68:12:04:bd:d1:b8:7d:15:66:8f:5f:20:fb:b7:
         70:77:73:64:8b:24:6c:8d:13:a2:2b:bf:8e:c4:fa:1f:62:44:
         20:fd:f3:f2:20:a8:c9:3c:fe:3a:10:e3:cc:bb:38:60:18:da:
         4a:3a:86:38:f0:93:cc:7e:30:1e:94:19:00:54:d1:38:8c:5b:
         3c:4d:93:b1:74:31:d0:16:c2:d3:60:5c:40:0d:3a:8b:dd:2c:
         9e:b1:85:15:48:b9:50:55:ac:f0:61:ac:81:99:7c:31:be:a1:
         80:e4:9e:b4:73:55:15:e7:59:d2:20:95:d0:5a:ea:0e:54:a9:
         bc:d2:1d:7b:9d:08:61:02:7f:b1:e2:cd:25:fe:5d:56:f7:17:
         12:d9:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:12:40 2025 by rpki-client