This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
File:                     madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json)
Hash identifier:          EYh5rECBjPRU6/PMNJ57hntQYYVMVy34t3TlfgMceQc=
Subject key identifier:   F6:D9:E7:46:00:85:50:4C:B5:6B:32:0C:30:1F:25:79:3B:27:71:A9
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Certificate issuer:       /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
Manifest number:          EF
Signing time:             Fri 05 Dec 2025 03:22:52 +0000
Manifest this update:     Fri 05 Dec 2025 03:22:51 +0000
Manifest next update:     Fri 12 Dec 2025 03:22:51 +0000
Files and hashes:         1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: q/eBCe7AndS+88GiBy8gnXM2B/aP7LtfCpE6tWcrhnM=)
                          2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: kQamVFgmYMR8msjGru66GiLhfU+VJZnNEztLqZV6JgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
                          rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
        Validity
            Not Before: Dec  5 03:22:51 2025 GMT
            Not After : Dec 12 03:22:51 2025 GMT
        Subject: CN=6932500c-617d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:9a:71:7c:a0:ce:ca:98:73:aa:45:98:17:
                    ca:2f:aa:cd:3b:cd:4f:8f:1c:e2:4e:7e:24:de:81:
                    d5:0b:76:7f:8a:06:ba:59:a9:00:0c:48:30:65:e8:
                    47:4b:24:c0:b9:bc:64:8e:63:e0:02:34:d2:bb:a6:
                    ef:c5:f5:44:28:95:b7:82:c7:87:28:fe:d9:52:7d:
                    a6:9c:2d:db:d7:08:e9:97:88:35:94:56:5a:5e:e5:
                    1f:fe:07:26:2d:78:2b:50:47:85:df:c9:09:a9:e5:
                    24:62:8d:1b:72:4c:25:d9:98:4a:7b:e7:fe:51:68:
                    a3:e1:1b:e4:fd:f2:45:be:41:c1:69:ba:80:f6:b1:
                    62:f3:e3:f3:49:73:aa:97:7f:7f:55:61:dc:7e:07:
                    0a:9c:1f:b5:97:71:53:7e:8d:2a:ec:aa:a0:4f:a0:
                    7a:47:53:f4:af:e6:63:99:b3:0e:29:1c:04:a1:5b:
                    c0:0d:97:5a:e6:af:99:f9:21:38:4a:e8:95:bd:ad:
                    02:d5:15:ec:50:30:32:ca:ec:93:45:ca:89:e1:b8:
                    be:ad:6c:d4:99:3e:96:22:24:45:87:28:ba:6b:f7:
                    a3:81:5d:76:fb:41:8d:ee:e6:bf:cd:30:a3:44:a7:
                    81:5b:57:33:14:61:ca:86:cc:d6:84:c2:e0:c8:46:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D9:E7:46:00:85:50:4C:B5:6B:32:0C:30:1F:25:79:3B:27:71:A9
            X509v3 Authority Key Identifier:
                keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8b:2f:e5:f9:03:31:f5:29:eb:07:4b:73:c5:1b:aa:69:68:
         e3:95:28:ba:7c:0a:67:b2:88:9e:e7:99:d6:34:85:18:53:4a:
         8c:13:c3:48:1a:7f:bd:84:33:23:f2:fd:34:70:31:3f:26:4e:
         18:58:1a:80:b0:35:b1:09:e2:6d:79:33:54:3f:f4:af:ed:f1:
         1b:77:d7:b0:c8:8a:3d:c2:53:45:ae:c6:cf:85:38:67:53:0c:
         fb:83:b8:ee:aa:cd:d4:2f:9b:80:5c:27:40:ae:19:62:f8:85:
         90:55:bb:f6:68:cf:4b:bb:1f:32:59:ea:40:0e:31:ea:a4:0d:
         c4:41:5e:84:dc:be:20:c1:b0:4f:42:55:78:7d:fc:41:c7:be:
         c2:a1:9c:31:94:32:6d:3a:ea:37:45:c7:a2:a5:78:70:8d:7a:
         53:20:8e:2e:c8:dc:c6:14:98:59:36:a5:0c:85:c3:44:78:2b:
         f5:46:80:99:b6:1a:e4:be:f9:34:d3:1b:70:bd:a9:2b:9f:47:
         e9:57:c8:b8:fd:10:c7:d8:2a:44:a2:90:fd:07:c7:c1:d2:81:
         75:9e:89:f0:32:a3:47:42:fd:6e:46:5f:3b:9f:96:2f:09:25:
         39:4f:07:04:bd:bf:1d:be:35:8a:17:d4:15:4a:e2:ec:ac:76:
         ea:17:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:05 2025 by rpki-client