This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
File:                     mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json)
Hash identifier:          k+fMYGFGTXDgkLCfGdPMZdIXNThM01mwECbb8z9ewHY=
Subject key identifier:   37:65:A4:3B:CD:D1:8C:E8:14:AD:45:1B:EE:08:BA:65:8D:A7:61:57
Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
Certificate issuer:       /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
Certificate serial:       0CB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
Manifest number:          0CA4
Signing time:             Thu 04 Dec 2025 17:46:34 +0000
Manifest this update:     Thu 04 Dec 2025 17:46:33 +0000
Manifest next update:     Thu 11 Dec 2025 17:46:33 +0000
Files and hashes:         1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: /Vp09bgqqEOj/qY4KNDU8+zT2pnAkHlGYr199qoaF2Q=)
                          2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: nPz5etvH54CH9fTIMVloTiUDB5Qsl1I9QXbAO8u0vO8=)
                          3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: yDcvIxrioePtxpeJhvFLHJCVBxiycv8OBxChNhzEutw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl
                          rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3250 (0xcb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
        Validity
            Not Before: Dec  4 17:46:33 2025 GMT
            Not After : Dec 11 17:46:33 2025 GMT
        Subject: CN=6931c8fa-7736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:44:06:e5:72:3b:79:1f:fa:2d:7e:c8:80:
                    28:05:21:89:f1:75:b0:4a:39:f7:a8:0e:4e:22:16:
                    01:de:7d:f5:a2:c2:67:87:f5:ad:eb:39:cd:1b:4e:
                    62:4d:05:25:bb:d1:d2:e7:c8:32:5a:bd:1c:59:78:
                    c4:5d:58:83:87:29:95:49:b7:f3:d5:a7:33:38:a9:
                    f8:65:96:9d:35:a8:92:59:08:16:b3:fb:b9:8c:89:
                    fa:c0:85:e7:1d:c6:11:b3:3a:d2:f0:c7:48:5c:59:
                    0c:a5:df:c5:7d:de:58:bf:61:94:ed:38:92:59:f4:
                    6f:9e:3d:48:82:7d:5d:23:6d:b2:13:9d:21:43:03:
                    2e:39:53:7b:2a:b2:f2:77:ed:d2:86:40:e0:69:8e:
                    34:46:ae:90:e3:79:5e:bd:5d:e0:e6:54:b6:dc:a4:
                    36:87:ac:28:68:51:d5:70:11:3e:2c:88:17:cb:d0:
                    37:fa:94:d6:20:0e:91:e5:a3:92:23:f9:76:36:87:
                    a3:2e:28:a3:bd:e0:86:94:66:d7:b9:ba:78:34:fb:
                    aa:5f:07:37:af:ea:99:4a:1b:21:53:ca:f8:89:50:
                    b0:ad:ba:1f:e2:4c:e3:12:10:73:53:d3:40:0a:ea:
                    64:68:e1:19:30:7a:1d:31:81:7c:17:93:f1:ef:93:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:A4:3B:CD:D1:8C:E8:14:AD:45:1B:EE:08:BA:65:8D:A7:61:57
            X509v3 Authority Key Identifier:
                keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:24:bd:c2:ec:d3:1c:2c:1c:97:b0:49:a2:c0:31:c0:50:ae:
         89:a8:dc:bd:c4:7c:19:51:39:cb:db:a5:88:6c:e6:6a:0a:ed:
         52:32:42:67:38:a6:e3:39:a9:2b:d2:50:15:3e:cf:ce:39:7d:
         74:55:a0:d0:94:7c:8f:c5:8c:9a:90:00:71:c8:a1:7b:b6:3c:
         c5:e7:9c:2c:22:1f:2c:44:ef:a0:13:8b:de:03:aa:9b:bc:47:
         1a:35:52:54:78:2d:41:12:cb:24:a6:ad:76:d3:d9:37:d3:96:
         75:b1:c4:ba:d4:ab:9f:99:c1:06:4d:98:da:c9:2c:d6:ac:df:
         10:81:2c:c6:49:d9:0c:92:49:a1:05:09:43:b4:82:9c:f5:61:
         c8:65:0c:f2:c5:61:32:21:61:a5:88:90:08:b2:1f:d6:7b:21:
         cf:76:94:72:9a:8f:c2:3c:d7:ab:6e:74:21:87:e0:d7:19:16:
         40:62:0c:64:1f:a0:08:00:b2:02:22:87:a5:85:6b:d4:aa:73:
         82:11:bb:88:d6:5e:f4:54:b9:01:d3:cd:ca:b5:72:9c:35:e8:
         6d:53:98:9c:6c:76:84:a9:fe:a8:ee:c1:08:4a:f7:37:d7:26:
         f6:75:08:9d:68:6d:ca:01:61:2a:5c:4f:d0:d2:4b:d8:68:73:
         07:39:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:47 2025 by rpki-client