This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
File:                     Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft (raw, json)
Hash identifier:          Ao4O3VLcPqkeBz/UEqEaarQ2B0kb3vhBUcnZs4rLKZc=
Subject key identifier:   6D:A9:76:A9:F2:08:72:FD:71:F3:FA:25:B1:61:CA:55:E0:FA:B2:69
Authority key identifier: 49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
Certificate issuer:       /CN=A91736B7/serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
Certificate serial:       06E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
Manifest number:          06D3
Signing time:             Sat 06 Dec 2025 21:00:08 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:08 +0000
Manifest next update:     Sat 13 Dec 2025 21:00:08 +0000
Files and hashes:         1: Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl (hash: ckDTiI7e/E6D3mzOAZHKl9CE6ztm80ExZolpfz+QCUI=)
                          2: BD8A42B27CA411EB847F0B83C4F9AE02.roa (hash: rF+D6zPDIJwry6qHScwbtKwBOHZvfUdrhdX6D6Fqdog=)
                          3: FFD6E656DB1E11EB91006D71C4F9AE02.roa (hash: K61xoWut3SAgEuN5+1k0dXQON0k0l7TUwfM2kslJEm4=)
                          4: 006626AEDB1F11EB91006D71C4F9AE02.roa (hash: 20i7SUN+ILtvpk7iV/YzHa7IC6zBka4WdUDNuP/C6/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl
                          rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736B7, serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
        Validity
            Not Before: Dec  6 21:00:08 2025 GMT
            Not After : Dec 13 21:00:08 2025 GMT
        Subject: CN=69349958-3922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:df:92:ee:86:18:ed:51:a3:f6:66:0b:83:
                    9a:e7:63:c3:51:9b:41:15:22:fa:0a:6d:03:07:56:
                    31:86:ad:40:c4:1d:af:91:a8:ff:b6:c5:0f:c7:c8:
                    f3:59:83:fc:57:88:4a:9e:cf:d3:1a:ae:2c:53:a6:
                    c9:44:52:86:68:bd:2a:b1:90:d0:63:58:ed:4c:55:
                    dd:c5:e3:d3:cf:4f:7b:0d:e2:1c:11:f6:88:1a:aa:
                    f1:94:75:77:50:81:e1:ca:45:23:1f:c3:79:d2:0a:
                    dd:73:c6:40:8b:46:5a:e2:76:bb:e9:23:f3:0f:ce:
                    48:1e:19:14:7e:5a:b4:91:0c:c9:e6:0c:a6:37:4b:
                    a6:6b:8e:45:a1:c5:69:79:d6:e4:98:a7:2a:f5:98:
                    7d:2e:cc:90:c8:9e:8b:8b:c0:c4:07:e2:a1:3a:c4:
                    df:b2:a6:da:89:e6:6a:7c:16:fa:72:fb:0f:37:56:
                    24:cd:60:6b:91:85:d3:f5:c0:40:25:9e:68:57:0b:
                    94:5b:cb:2e:db:a9:68:5f:0f:74:bc:fd:21:7d:c3:
                    25:9b:67:92:f2:1d:b8:6a:e9:f3:53:b5:e5:35:07:
                    54:6d:54:42:b0:6e:6d:53:8e:6c:2c:20:20:10:77:
                    2e:64:3b:a9:06:77:e0:48:07:de:a3:de:9c:83:49:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:76:A9:F2:08:72:FD:71:F3:FA:25:B1:61:CA:55:E0:FA:B2:69
            X509v3 Authority Key Identifier:
                keyid:49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:04:b1:fe:7b:ec:71:34:b7:15:d9:af:33:53:af:df:e9:c5:
         a5:93:27:05:7e:99:2a:1e:1b:20:1f:84:90:9d:6e:5f:d0:4e:
         ed:4b:35:e9:dd:cd:9c:d7:76:b9:cb:ac:da:66:7f:38:ef:30:
         0d:e7:ad:a7:60:08:25:ac:88:c0:43:44:90:25:77:3a:62:d7:
         fd:43:59:e1:b0:3b:76:9b:1e:57:54:a6:7f:ac:29:5f:29:fd:
         4a:f6:87:da:8b:c1:a6:05:57:e1:73:80:da:94:f2:6b:df:8c:
         ad:c3:51:d1:fd:a7:92:d9:c7:50:dd:c3:e9:a4:09:5d:cc:7f:
         54:ea:84:2f:e3:73:fa:20:e6:0e:bb:20:c3:04:fc:da:3d:2f:
         40:28:ff:1c:b6:ad:83:6c:e3:44:72:11:75:13:01:1d:2f:b8:
         7e:93:bb:67:2e:9c:a2:42:92:9c:b1:e5:48:f3:4d:82:5e:54:
         df:c4:50:42:56:58:8a:93:a2:e5:51:19:d5:82:02:ec:47:ab:
         ea:4d:0e:40:98:fd:74:e7:53:7b:8e:39:9e:45:ca:10:04:57:
         ed:3d:9b:f3:ca:c4:5c:f6:91:0a:14:42:3c:6e:3d:2b:1f:49:
         18:0e:70:21:61:d6:57:b3:a1:91:78:ba:8b:b8:93:39:b8:de:
         a5:24:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:58 2025 by rpki-client