This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File:                     mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier:          Gf+wgfkW1wefAIQTXZow5eWEkZTfzead5GjArlGgRIs=
Subject key identifier:   EE:C9:4D:FE:C5:44:95:ED:57:88:ED:FD:6A:18:9A:67:9D:2C:84:E6
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer:       /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number:          05F9
Signing time:             Thu 04 Dec 2025 21:38:41 +0000
Manifest this update:     Thu 04 Dec 2025 21:38:41 +0000
Manifest next update:     Thu 11 Dec 2025 21:38:41 +0000
Files and hashes:         1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: HNDMVCkR46Ahsdog8Ks/FsxYAYsm2T9MPwyL9lWlGLw=)
                          2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: v0ecUflCYhVKX7WWipZns2LjtpkfsuPLOo5CXM1V1Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
                          rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
        Validity
            Not Before: Dec  4 21:38:41 2025 GMT
            Not After : Dec 11 21:38:41 2025 GMT
        Subject: CN=6931ff61-f4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:c8:07:0e:2c:eb:18:0f:86:f3:bf:68:89:
                    4c:88:14:3d:81:a2:e5:92:36:80:8a:9b:d8:6c:d7:
                    d4:da:fc:9e:03:fe:28:45:15:5a:26:b0:30:ff:34:
                    ee:65:f9:95:a3:1f:0b:26:8f:15:72:10:a8:3f:83:
                    a7:63:b3:41:dd:26:b8:f6:3a:f4:ce:04:95:2e:d3:
                    f2:f2:e7:7b:66:68:c2:20:3d:8d:09:f9:cb:96:d2:
                    e2:55:2f:be:dc:2c:cf:58:97:fc:cc:92:64:ea:e5:
                    24:d3:e6:1a:75:fd:e5:2a:89:86:c0:74:cf:e5:26:
                    73:ea:e9:ae:ba:95:85:de:4a:8f:98:60:42:52:b5:
                    de:31:28:18:9c:ea:17:97:aa:6b:8b:10:64:f9:aa:
                    92:71:8f:9d:54:2c:4d:5d:12:f6:00:57:08:e4:ea:
                    6e:9b:aa:42:d9:60:c2:a3:2f:62:34:fc:e3:a9:99:
                    b6:bb:38:b2:e9:6a:29:fe:dc:f3:c3:d2:3b:c7:ee:
                    0c:1f:cd:d4:99:92:62:88:11:e2:e8:3f:b8:bf:8a:
                    a3:c3:63:49:26:93:f6:69:ed:85:5e:c8:dd:38:44:
                    7b:87:c0:45:f9:70:95:71:ea:94:c7:ce:63:bf:50:
                    f5:62:24:00:18:cc:be:3a:6c:2e:18:a2:dc:42:54:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C9:4D:FE:C5:44:95:ED:57:88:ED:FD:6A:18:9A:67:9D:2C:84:E6
            X509v3 Authority Key Identifier:
                keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:37:8c:e6:a0:d6:96:c3:c0:8e:3d:4e:a5:4e:8b:45:f5:
         ca:6d:02:d6:39:f2:db:46:09:40:b9:3a:01:af:62:d4:60:86:
         9e:a0:a2:3a:d2:e3:68:96:c7:e0:7c:b2:17:65:fd:00:97:1c:
         a4:03:69:01:07:94:e8:4f:71:1f:ba:67:9b:2b:4d:7b:3d:6a:
         99:32:b3:ae:f3:17:13:35:bd:14:e2:b7:26:24:7b:b4:10:1d:
         2a:6e:56:f6:ca:7b:c6:3b:9e:ec:08:3c:e5:22:16:20:0e:e3:
         72:5a:5c:45:bf:b9:97:42:3c:51:1d:23:0f:62:9d:ea:58:71:
         8b:33:29:63:73:4d:f1:00:e0:f9:79:bf:00:8f:29:7a:06:23:
         b3:ad:38:17:ed:51:87:2a:e8:36:f3:29:9a:04:17:79:f3:57:
         d1:f0:f8:6b:59:18:91:6e:5b:68:a4:5d:c6:df:49:b6:dc:98:
         4d:1c:4b:5e:8d:45:ef:89:de:ae:ac:a3:b3:6e:0b:59:5d:8c:
         3f:25:c5:d4:fa:dc:a6:01:b9:92:8b:11:38:2e:0b:fd:12:d9:
         de:15:eb:1d:b0:cb:06:c4:0e:33:c5:3c:48:31:40:59:3a:7a:
         2f:c5:61:83:bb:cd:79:37:0b:d3:3a:8c:33:c7:6b:fd:06:d2:
         fa:5e:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:19:48 2025 by rpki-client