This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
File:                     e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json)
Hash identifier:          Pwv+teCLr01Udq1LwB7FCTjkpm2plaw9g8LJuSBpjaU=
Subject key identifier:   94:E2:1B:0D:0E:E2:E0:27:2C:4D:F8:B6:D6:5A:8E:24:F7:90:01:B7
Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
Certificate issuer:       /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
Manifest number:          01CC
Signing time:             Fri 05 Dec 2025 01:08:43 +0000
Manifest this update:     Fri 05 Dec 2025 01:08:42 +0000
Manifest next update:     Fri 12 Dec 2025 01:08:42 +0000
Files and hashes:         1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: JhzIFPOuLHAnnrJbrV98WuyC+YYs15fXVZO9ITPCB/U=)
                          2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: pxAUka+hZXgqAkqZYwNbBxq2lYkaK/71SsZW6ax0kQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
                          rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
        Validity
            Not Before: Dec  5 01:08:42 2025 GMT
            Not After : Dec 12 01:08:42 2025 GMT
        Subject: CN=6932309b-ce65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:51:5d:5e:ee:4d:20:8f:87:51:fb:c5:64:
                    f4:b8:e0:c9:c4:de:29:9c:f5:60:f2:b5:f2:64:8d:
                    88:d3:45:56:39:b3:c6:b3:66:fc:93:66:e9:0f:a5:
                    71:a0:60:56:fc:99:fb:8c:37:44:ce:ef:10:f8:28:
                    3e:f3:1e:19:14:ec:2b:6b:67:38:d3:76:e9:39:10:
                    32:5b:b8:11:8e:11:89:cc:35:76:f3:f5:bc:6d:d5:
                    f6:9a:3b:71:5d:8b:92:e9:f9:a1:99:a7:4e:ec:a3:
                    34:da:db:3b:f5:99:e6:2b:57:9f:12:d8:30:0c:ff:
                    85:29:fb:91:68:33:2e:bf:b0:34:22:bd:e5:3c:e5:
                    2e:39:64:05:0a:11:66:3d:ec:88:d0:54:93:b9:59:
                    80:53:34:c7:64:3a:a7:f7:53:43:57:97:83:04:50:
                    b2:fc:22:31:ab:6d:15:5f:d3:30:c8:44:95:b7:0f:
                    c4:de:60:51:20:32:85:0f:c8:bc:00:e5:7c:f3:94:
                    2a:76:0e:d6:8c:c4:5e:65:02:4f:8a:e3:a6:57:80:
                    4c:3a:2f:b1:3e:12:4e:29:7e:83:ea:3c:cb:18:dd:
                    b1:75:ee:1d:6b:62:45:ec:b0:17:a5:d9:f1:a3:74:
                    6b:a9:96:6c:05:e1:28:27:8b:82:f2:db:6c:2a:9d:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E2:1B:0D:0E:E2:E0:27:2C:4D:F8:B6:D6:5A:8E:24:F7:90:01:B7
            X509v3 Authority Key Identifier:
                keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:4a:d5:34:18:1a:51:10:0c:f8:19:a6:cb:d4:de:ec:d8:
         55:1f:7a:ce:8f:4a:33:df:70:a7:16:1b:99:27:17:25:03:ca:
         e4:22:fe:7a:9a:91:a9:fe:1b:9b:71:9f:5e:bb:a9:d9:e2:9a:
         b9:6c:2b:2e:7e:f2:fb:77:c0:8d:e5:e8:a0:77:33:e2:cd:cd:
         e8:82:33:5d:4f:01:09:5c:2a:fe:e6:f4:4a:b9:47:aa:9f:57:
         9b:8b:ba:67:c9:82:58:6c:84:43:31:61:bd:8c:c1:09:0d:ce:
         81:bb:65:67:a7:36:19:1e:38:b9:ba:9e:6e:07:55:e4:40:bf:
         ea:fe:e1:43:8a:6c:7d:8e:46:01:d2:1a:87:62:d1:e0:23:f4:
         1f:f3:68:c7:2d:6f:8c:52:77:67:d7:75:53:78:7d:20:66:5d:
         3e:47:4b:20:c9:bc:e7:e8:1d:dd:42:7a:d6:13:c5:fc:42:b1:
         65:1d:19:d2:af:34:63:6f:61:f5:dd:7f:c2:6e:90:d4:36:42:
         df:b8:0f:7a:bc:a4:d8:aa:1b:e2:f4:49:89:28:5d:3a:dc:16:
         ec:93:94:56:b6:1b:a0:4c:74:9b:0b:1a:50:c8:c8:5d:3c:f9:
         04:83:5e:6a:17:8e:32:88:5c:96:2d:55:56:1a:e2:43:d7:6b:
         bd:97:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:10:52 2025 by rpki-client