This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
File:                     MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json)
Hash identifier:          P6OrUm5o2QiwrtOhM645mrk5S3e8P9fHRpn6CKRYd6Y=
Subject key identifier:   3E:A5:8E:E7:15:EC:47:0A:A4:0B:95:0B:59:7A:41:2C:DC:83:28:72
Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10
Certificate issuer:       /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
Manifest number:          0161
Signing time:             Fri 05 Dec 2025 02:15:27 +0000
Manifest this update:     Fri 05 Dec 2025 02:15:27 +0000
Manifest next update:     Fri 12 Dec 2025 02:15:27 +0000
Files and hashes:         1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: x2cpoFo6N6j7kSBrh2Wf1kUPjyz4ha3wLv7CRZsBsxU=)
                          2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: eLvQDqgzb8pzAvtiGB3lMpGAuC1qmsTh4Dk3DLhUIRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110
        Validity
            Not Before: Dec  5 02:15:27 2025 GMT
            Not After : Dec 12 02:15:27 2025 GMT
        Subject: CN=6932403f-16e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:62:7e:37:90:21:f5:cd:cc:46:d3:7e:94:
                    e7:e5:a1:43:01:51:e0:fb:14:ac:51:0b:94:1e:e4:
                    41:d2:4c:9a:e3:f9:8c:5a:6c:05:d7:e2:92:5f:03:
                    1c:a3:0a:28:1f:da:d3:e1:44:97:33:d5:51:8d:10:
                    47:fa:4b:20:0d:f5:06:05:6c:48:e4:b3:ab:12:b5:
                    f6:27:52:8d:38:14:aa:0d:52:d6:9b:66:da:f1:2c:
                    10:85:eb:b3:c1:f8:17:88:d4:86:d7:5e:a8:dc:c4:
                    52:cf:cb:e5:98:6e:77:95:15:d2:d3:04:5c:15:53:
                    54:d5:e0:cf:4c:0f:0a:2a:b9:77:c6:e5:7a:53:0b:
                    8c:0e:a7:dc:95:78:37:05:5e:11:95:ac:9c:6c:69:
                    cf:1e:30:05:73:32:79:33:9e:7e:13:40:6a:36:fb:
                    41:c4:b4:d3:ed:87:87:46:e0:6d:08:76:68:c7:f8:
                    b4:eb:2e:90:33:54:9d:bb:fd:f2:d8:2c:6f:24:f3:
                    f0:14:1d:0c:57:fe:4f:d0:ba:de:2f:e4:36:e5:bf:
                    53:3b:3d:16:03:57:64:8b:56:05:a2:0e:62:5b:61:
                    4c:d5:f0:94:3b:fa:cc:c2:9b:43:51:89:a1:b2:c8:
                    6b:f4:63:f9:a1:44:ab:fa:69:7b:97:df:00:ab:f1:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A5:8E:E7:15:EC:47:0A:A4:0B:95:0B:59:7A:41:2C:DC:83:28:72
            X509v3 Authority Key Identifier:
                keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:00:ad:92:7a:58:85:76:74:48:11:b3:ac:77:34:19:6b:
         ad:81:30:ac:fa:af:66:5e:21:eb:2f:ff:03:74:96:d3:6c:74:
         1f:f7:df:12:55:45:5d:b7:e5:7a:a7:d3:1f:d8:91:1b:86:39:
         16:0a:ba:a9:8b:52:1c:64:a2:55:4f:f6:b9:61:c2:55:fe:f8:
         d6:6d:3c:a8:fa:f2:91:dd:70:32:ef:f1:38:8a:90:b8:87:b1:
         46:cd:2a:6a:9c:af:a9:a6:6e:bb:67:cc:38:55:f5:71:59:c4:
         0e:62:8b:f2:a9:6b:5c:96:8a:a7:33:fc:1e:a9:02:62:c4:00:
         31:ab:1f:fb:68:ba:b5:1d:e1:f2:bb:f0:b0:55:da:eb:58:ce:
         c9:e1:0c:cd:01:c8:d1:e9:4c:49:71:47:2a:a3:ff:22:83:ba:
         2f:95:21:78:f2:b2:a2:9a:36:5e:98:b3:e2:85:a6:35:ef:8f:
         7c:71:a3:9c:7e:94:ee:f9:08:c5:d3:0f:6b:95:7f:b8:19:f7:
         b7:f9:d3:25:83:9e:ae:e2:92:fd:78:17:59:b0:62:67:3a:a0:
         81:bf:fb:f2:3d:35:8b:1d:3c:70:8b:2c:c8:ef:be:a2:72:ce:
         9a:30:90:5f:b6:d4:2f:aa:26:b1:94:e3:38:b8:7f:2b:32:30:
         5b:4a:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:32:32 2025 by rpki-client