This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
File:                     mm0VemfN-P9qHM6gPkPkwtlb-G0.mft (raw, json)
Hash identifier:          bj+udUYv8ABHfQY9qyIfcoJr7O1Fx5G+WDQrS36MAz0=
Subject key identifier:   D1:02:2C:A0:AE:82:A5:7F:58:02:D8:C1:7A:C1:67:D8:E2:6A:A4:8D
Authority key identifier: 9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D
Certificate issuer:       /CN=A915E777/serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D
Certificate serial:       0FF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
Manifest number:          0FF4
Signing time:             Sat 06 Dec 2025 16:57:15 +0000
Manifest this update:     Sat 06 Dec 2025 16:57:14 +0000
Manifest next update:     Sat 13 Dec 2025 16:57:14 +0000
Files and hashes:         1: mm0VemfN-P9qHM6gPkPkwtlb-G0.crl (hash: SDe5L76zoXL/PYtCs88/XJabs0xygr36zx/BIAhciGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl
                          rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4084 (0xff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E777, serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D
        Validity
            Not Before: Dec  6 16:57:14 2025 GMT
            Not After : Dec 13 16:57:14 2025 GMT
        Subject: CN=6934606b-0aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:d2:ec:5d:f9:b3:74:56:64:53:e3:1d:93:
                    00:7b:3f:59:98:d4:d5:c4:ae:e7:bf:17:c3:95:3b:
                    ca:2b:53:48:43:e0:f2:e7:84:9a:5a:68:64:ba:2b:
                    2e:1e:09:3e:23:b8:0c:26:52:e3:e1:6f:d3:70:56:
                    6a:9c:9f:f4:76:e2:69:d6:c7:00:ad:bd:97:45:35:
                    01:0a:3c:57:c9:e7:f2:39:9b:d5:5d:a8:34:bb:73:
                    ed:19:15:d1:7d:65:04:25:dc:2f:8d:bf:05:b2:06:
                    ed:93:cf:f8:e9:d5:13:ca:ee:30:4a:a4:7c:f9:10:
                    1b:e0:ca:7f:94:ea:60:e9:8b:2e:fe:4c:b9:7d:fd:
                    73:17:5b:46:97:96:ba:a4:ff:48:dd:aa:c4:c8:4f:
                    11:d9:f8:1e:65:bd:cb:81:df:1e:b5:06:ea:78:9f:
                    58:3e:ac:2a:a1:4f:1a:e4:5c:92:e1:c5:91:21:dc:
                    fe:cd:ff:2a:22:c6:27:a0:0c:07:34:c9:b3:bf:41:
                    d0:20:7e:5c:c0:0b:e3:47:68:a1:d0:9e:90:a2:4c:
                    c3:69:d6:59:ab:24:2c:ab:d3:da:79:f1:3e:96:99:
                    91:21:c4:63:90:4e:a0:ef:0d:32:1e:a9:ee:80:d7:
                    21:7e:5e:b0:6f:32:50:67:03:cc:5e:1f:cb:6b:ee:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:2C:A0:AE:82:A5:7F:58:02:D8:C1:7A:C1:67:D8:E2:6A:A4:8D
            X509v3 Authority Key Identifier:
                keyid:9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:b2:a1:9d:80:2b:fd:d7:49:9f:b3:18:22:e6:c9:ba:5f:
         8f:9e:c9:d7:e6:0c:ae:80:75:50:c8:95:43:d8:a9:bf:93:13:
         6b:0c:59:b8:cd:de:82:09:7a:65:08:66:b5:24:0a:bd:9b:21:
         c8:35:b2:3c:92:a1:47:18:aa:00:01:b3:36:3d:70:02:f1:56:
         16:b3:a8:df:9d:18:8f:ff:45:e8:2d:1b:07:39:84:ff:74:32:
         4f:2d:94:de:d3:13:c0:cc:8c:9c:36:23:6b:4a:8c:d4:a4:8a:
         8c:7b:9a:ca:a5:61:0c:9f:03:d8:5f:bc:da:f2:cd:17:88:2f:
         68:9c:69:f5:10:9c:5c:a2:03:99:8e:e7:77:fb:f5:52:49:66:
         48:56:98:a6:5e:b7:03:5f:62:5e:35:1a:ee:d6:77:df:99:50:
         4a:22:c2:c2:13:80:52:9d:04:a4:fb:3c:b4:9d:39:30:3b:fb:
         ab:cc:78:7d:b9:91:e2:fb:8b:ff:12:7b:32:75:aa:ab:7b:df:
         db:f0:43:4c:0b:d6:9d:47:66:98:7b:f1:b7:81:e7:87:0a:89:
         5a:a5:92:ca:4f:a3:fa:e5:fe:60:fc:6e:2c:ce:87:1e:c4:13:
         4c:61:d1:9b:06:ac:50:98:f1:7d:63:c3:b8:61:52:64:df:1c:
         27:40:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:07:09 2025 by rpki-client