This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
File:                     RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json)
Hash identifier:          0GjJt1Gb9nkXE9OttUt6FUIYE45k3HMubA6jW/9E55U=
Subject key identifier:   67:77:47:52:7C:8C:DB:BD:85:37:18:7B:77:F6:AA:14:EF:94:BD:BC
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Certificate issuer:       /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
Manifest number:          C2
Signing time:             Fri 05 Dec 2025 03:54:55 +0000
Manifest this update:     Fri 05 Dec 2025 03:54:54 +0000
Manifest next update:     Fri 12 Dec 2025 03:54:54 +0000
Files and hashes:         1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: J6XYRIYLYMnoiEMWsBl7D7JqQ1at2egit2Sjfa6Ru4M=)
                          2: D2D1A4B45BD711F089C6844AC4F9AE02.roa (hash: joxu/iZl6wh7AZroV31YozzvLk07ceZzMxMmhwP+p08=)
                          3: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (hash: qJ5gkigO45Hvkw1Tk7rl8bEuQoW6rU3vSUshRruwTnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
        Validity
            Not Before: Dec  5 03:54:54 2025 GMT
            Not After : Dec 12 03:54:54 2025 GMT
        Subject: CN=6932578e-a91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:cb:d0:03:3e:74:05:83:d1:9a:46:46:d1:
                    ca:86:79:3b:d5:e4:7a:b2:8f:99:d0:66:40:dc:35:
                    51:17:91:75:52:d3:71:60:e9:e0:87:5c:61:b4:b4:
                    00:d5:d0:dc:e1:52:e2:9b:f9:48:c4:cb:95:96:40:
                    9f:54:44:61:cc:43:91:b8:31:c9:fa:77:8b:0d:6e:
                    77:6f:37:c4:df:da:3d:79:f7:7b:2f:79:d6:d7:00:
                    83:e8:10:9e:58:99:90:07:e9:33:93:09:ff:e2:84:
                    ab:71:c4:e7:97:68:38:e6:9f:30:63:60:ca:b5:99:
                    ab:8a:67:5d:a2:ef:d1:59:b8:86:4f:22:d8:c3:4c:
                    46:3d:b1:30:3f:27:70:f5:5c:e0:14:79:06:6a:ea:
                    f4:63:f7:a8:f6:a2:32:f8:ba:bf:f8:dc:93:77:de:
                    d4:d5:60:be:de:8b:2f:7d:5d:b4:79:71:ed:9b:a2:
                    06:09:ed:80:6a:b8:f8:4a:09:dc:17:48:14:72:4e:
                    80:f3:ff:d5:63:aa:f0:a6:27:40:9b:c3:d7:65:5f:
                    71:ac:56:fe:af:e3:a5:c5:f7:43:24:34:97:fd:8d:
                    46:41:5a:7d:1c:50:82:47:08:27:e0:55:55:08:e8:
                    68:4c:36:f3:6c:be:01:72:07:55:9d:4c:21:fa:2e:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:47:52:7C:8C:DB:BD:85:37:18:7B:77:F6:AA:14:EF:94:BD:BC
            X509v3 Authority Key Identifier:
                keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:81:0d:d6:f1:bb:e2:e5:b5:81:6b:04:9b:16:db:ef:27:04:
         3c:48:f6:ea:e8:74:b0:4e:7e:1b:b3:3d:e6:44:80:51:c4:99:
         14:38:28:35:92:9a:c3:e4:a7:90:43:a0:ce:c9:38:3a:b4:88:
         36:66:4d:97:62:74:a2:57:1e:65:6a:df:7d:b5:fe:6c:15:a2:
         95:86:4b:3b:e4:ec:79:4d:bc:ac:3c:42:75:c2:fc:ba:6e:92:
         5e:e9:f6:38:4e:b8:2c:cc:1c:eb:7a:9b:c9:b8:34:d7:12:4c:
         8e:3d:59:09:78:d9:13:66:7f:b9:5f:83:4a:59:4e:f7:b3:c9:
         50:69:16:dc:e2:b2:4b:7b:69:a7:ea:c5:b3:c5:cc:5c:03:76:
         04:10:7a:7e:f0:8f:9e:b6:db:20:3e:8b:3d:cc:81:64:d4:21:
         ef:ae:72:bf:e7:a7:39:e9:6d:63:66:5c:bf:69:b2:11:25:28:
         52:73:59:1e:ab:31:d8:aa:eb:31:e4:50:d5:8f:20:ca:da:0b:
         6a:38:e6:0d:41:b8:95:30:79:75:f3:98:6f:3c:12:a4:88:2e:
         c3:28:bd:68:13:a4:6b:cc:cb:f7:09:69:2c:c6:55:08:03:f1:
         f9:41:97:90:b7:08:ea:af:eb:62:1c:a3:e0:5b:f2:ef:e7:8d:
         2c:3a:c1:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERBQzUxMTAvBgNVBAUTKDQ3MDFDRjJEMjgyMDA5RDZDNkVBRjQ1NTZGQjBEQzFC
MEQ1NTU3RUYwHhcNMjUxMjA1MDM1NDU0WhcNMjUxMjEyMDM1NDU0WjAYMRYwFAYD
VQQDEw02OTMyNTc4ZS1hOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEXL0AM+dAWD0ZpGRtHKhnk71eR6so+Z0GZA3DVRF5F1UtNxYOngh1xhtLQA
1dDc4VLim/lIxMuVlkCfVERhzEORuDHJ+neLDW53bzfE39o9efd7L3nW1wCD6BCe
WJmQB+kzkwn/4oSrccTnl2g45p8wY2DKtZmrimddou/RWbiGTyLYw0xGPbEwPydw
9VzgFHkGaur0Y/eo9qIy+Lq/+NyTd97U1WC+3osvfV20eXHtm6IGCe2Aarj4Sgnc
F0gUck6A8//VY6rwpidAm8PXZV9xrFb+r+OlxfdDJDSX/Y1GQVp9HFCCRwgn4FVV
COhoTDbzbL4BcgdVnUwh+i7exQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGd3R1J8
jNu9hTcYe3f2qhTvlL28MB8GA1UdIwQYMBaAFEcBzy0oIAnWxur0VW+w3BsNVVfv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REFDNS9DMzk1ODJDMEFC
REExMUVGQTFDMTRFNzZDNEY5QUUwMi9Sd0hQTFNnZ0NkYkc2dlJWYjdEY0d3MVZW
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REFDNS9DMzk1ODJDMEFCREExMUVGQTFDMTRFNzZDNEY5QUUwMi9Sd0hQTFNnZ0Nk
Ykc2dlJWYjdEY0d3MVZWLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5gQ3W8bvi5bWBawSbFtvvJwQ8SPbq6HSwTn4bsz3mRIBRxJkUOCg1
kprD5KeQQ6DOyTg6tIg2Zk2XYnSiVx5lat99tf5sFaKVhks75Ox5TbysPEJ1wvy6
bpJe6fY4TrgszBzrepvJuDTXEkyOPVkJeNkTZn+5X4NKWU73s8lQaRbc4rJLe2mn
6sWzxcxcA3YEEHp+8I+ettsgPos9zIFk1CHvrnK/56c56W1jZly/abIRJShSc1ke
qzHYqusx5FDVjyDK2gtqOOYNQbiVMHl185hvPBKkiC7DKL1oE6RrzMv3CWksxlUI
A/H5QZeQtwjqr+tiHKPgW/Lv540sOsEj
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:32:12 2025 by rpki-client