This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File:                     aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier:          +Seu/2xhWZznRHNVuoVDhjFZ0M63AQbs2FDG25CiBso=
Subject key identifier:   5D:F8:A1:AD:C3:D1:EF:77:0D:B8:B3:35:96:17:34:2E:08:C9:85:9C
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer:       /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number:          0743
Signing time:             Sat 06 Dec 2025 20:42:31 +0000
Manifest this update:     Sat 06 Dec 2025 20:42:31 +0000
Manifest next update:     Sat 13 Dec 2025 20:42:31 +0000
Files and hashes:         1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: 7lLwUGOFeETeSyTJV28NaWwvcK/mLFSvGd7IRr5Ud0w=)
                          2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
                          rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
        Validity
            Not Before: Dec  6 20:42:31 2025 GMT
            Not After : Dec 13 20:42:31 2025 GMT
        Subject: CN=69349537-039b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:d0:cc:03:cc:a4:d4:4a:7c:d4:7d:95:94:
                    41:83:8b:9b:f5:a2:1c:d6:50:d9:18:90:63:a9:a7:
                    e8:e9:c1:79:d7:2b:21:e2:09:9d:7e:19:fe:89:d3:
                    38:f3:f1:2c:3b:42:e4:38:dc:70:b9:2b:3e:96:ff:
                    ab:3f:18:61:0a:89:74:95:65:8f:5d:d9:6c:a9:09:
                    e3:3c:db:98:a7:69:81:15:31:27:ce:90:f3:0d:b8:
                    4a:de:8a:b1:f1:4c:e4:d5:2d:30:10:5c:96:8e:c4:
                    45:5f:2b:cc:48:9c:42:21:1c:00:bf:a4:9c:23:26:
                    66:42:20:43:59:b4:80:21:cf:22:82:df:cb:70:43:
                    ed:9c:4f:6e:15:28:60:cb:90:c1:7f:c4:5a:e9:12:
                    0b:57:c5:c3:7d:4e:bf:0d:b2:a2:c6:3b:1f:68:49:
                    ed:ce:26:45:fc:e2:76:c6:0b:90:c8:68:03:ec:34:
                    85:b2:87:8e:97:27:5a:db:94:f9:67:fe:57:b5:2a:
                    ea:e9:fd:30:74:5a:12:0e:9f:49:9b:ee:b7:a3:47:
                    6a:54:f9:1d:c3:11:36:af:06:da:4f:83:a7:b6:04:
                    88:40:7d:57:f2:e9:07:2e:e5:da:cd:ab:ea:57:ff:
                    b2:ba:08:94:d6:10:4b:c2:b4:e0:65:93:e3:37:20:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F8:A1:AD:C3:D1:EF:77:0D:B8:B3:35:96:17:34:2E:08:C9:85:9C
            X509v3 Authority Key Identifier:
                keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ec:e1:48:3e:2d:ad:9f:8e:f6:0e:f3:cc:0e:01:98:f6:d3:
         cc:2c:75:af:d6:f7:83:79:07:f8:6f:ac:dd:ab:22:b2:0e:cf:
         2e:c2:46:06:10:4a:1e:1b:d2:82:d4:a7:bd:bc:61:60:08:24:
         21:6d:a3:ba:fc:2e:36:e9:1d:61:6d:cd:69:91:fd:fe:88:75:
         dc:ad:d7:73:0d:49:8a:5a:07:91:5a:bd:c0:b8:3e:2f:26:4e:
         b1:2a:d2:53:1b:38:89:6c:f1:23:ec:c3:9c:c9:7b:ea:8f:cc:
         d0:7a:b4:74:fe:ec:92:bf:40:33:46:c1:0a:63:e4:00:90:b7:
         53:80:03:58:c3:dd:e8:f7:1e:06:46:72:50:a7:37:6d:1a:84:
         4f:6e:4f:ed:ac:ea:20:4c:53:2e:f2:41:e3:03:98:9b:bb:1d:
         d5:a2:61:2c:05:48:05:c3:0b:fa:e0:47:bf:17:70:32:38:d1:
         b6:a4:d0:a0:be:90:35:35:54:a5:b4:c2:28:e1:f1:34:5f:fd:
         e2:41:80:3a:5e:de:12:df:84:71:da:d9:5d:95:12:02:cc:0b:
         9f:b9:7a:bc:14:28:21:0d:c1:d2:d9:64:af:31:17:98:77:a9:
         5f:7a:72:d6:8a:17:bd:16:ca:8f:02:d9:9b:99:fb:f1:d2:34:
         61:44:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:01 2025 by rpki-client