This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
File:                     MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json)
Hash identifier:          cjmgpCKOtpySfmuKJvWCfPLO1hEv1HBNAPX7AI64GDM=
Subject key identifier:   0A:6D:2C:EF:E4:3B:A0:1B:B4:99:85:5A:1D:A7:D3:EA:8E:26:32:85
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
Manifest number:          03E6
Signing time:             Thu 04 Dec 2025 23:05:31 +0000
Manifest this update:     Thu 04 Dec 2025 23:05:31 +0000
Manifest next update:     Thu 11 Dec 2025 23:05:31 +0000
Files and hashes:         1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: ELqCUP3Fob/HAguDZ0dToHpRb3OQu1l2CKnK0M+EYzc=)
                          2: 9F88C3542ADF11F0B3006D40C4F9AE02.roa (hash: MCYapqJJn25HSBUdIU2//eLRRdVWTHyVws8goqwfwG8=)
                          3: 3A3E36B6631811F089107C4AC4F9AE02.roa (hash: o4sYy8DACcosKEOscD14T0NGuyOhoqxkHKs6D2ANTmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Dec  4 23:05:31 2025 GMT
            Not After : Dec 11 23:05:31 2025 GMT
        Subject: CN=693213bb-0581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:9b:5a:24:86:a1:e5:d3:eb:75:4c:dd:74:
                    a6:96:1f:e0:73:ad:ff:09:93:d3:81:96:60:81:ea:
                    db:b4:c4:ed:6a:c2:a0:49:77:1b:1c:bf:e7:db:aa:
                    ca:73:21:b3:73:1c:9f:21:7e:9d:43:25:9d:30:19:
                    20:11:b1:76:2b:df:48:f5:aa:6c:52:1e:6d:a0:d5:
                    35:91:df:10:d9:30:d9:4b:4a:fc:48:38:58:fc:70:
                    af:9d:c5:2e:ef:d3:95:97:f6:23:71:a5:10:c8:74:
                    7e:06:ed:08:8e:b7:7e:9a:39:db:db:a8:bf:16:fb:
                    af:c6:ae:d9:82:3c:a1:27:8f:e0:ed:e5:36:a6:f7:
                    88:65:4e:f3:74:50:d4:7d:c8:ca:15:a2:65:67:c7:
                    fc:ce:86:37:bf:fe:22:81:48:14:0c:96:62:13:02:
                    62:81:4b:41:2b:08:e4:57:56:7d:d7:56:88:b6:3e:
                    ef:f3:46:aa:0f:17:e0:0e:d3:43:e7:21:b4:f8:7b:
                    c1:b7:01:a0:bb:ef:5b:a0:9f:67:ec:3c:43:b1:82:
                    da:51:1b:21:0a:d0:27:9d:89:b4:2d:a6:26:ca:0d:
                    9e:0e:93:22:65:6a:6b:54:b8:4d:23:70:eb:6c:2e:
                    58:42:d9:8c:c5:36:5a:e3:96:71:c6:db:d2:ca:36:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:2C:EF:E4:3B:A0:1B:B4:99:85:5A:1D:A7:D3:EA:8E:26:32:85
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:dc:5d:eb:4e:a9:2c:23:39:b3:82:c3:8d:a4:d7:24:f1:
         93:bd:51:8d:09:74:48:e1:4e:4b:cc:43:2c:54:f8:52:99:5b:
         db:e5:2d:ab:d2:40:ae:d5:e4:9a:80:60:b7:e1:ad:57:f7:74:
         83:31:69:94:b4:cc:6e:ad:9e:cc:31:47:41:fe:53:90:af:12:
         7f:92:66:df:20:18:8b:19:aa:3d:4f:2e:53:aa:45:bf:b1:ab:
         a1:5a:93:9c:e2:d1:63:90:8d:5a:99:9e:1e:4d:79:07:06:f1:
         18:eb:b1:0f:78:3e:89:54:5d:29:79:a1:c9:47:39:8b:68:64:
         b2:2a:26:25:26:15:06:83:95:f7:6e:97:48:a7:5c:ca:d0:a3:
         ea:df:49:78:36:c1:0e:0b:44:8e:96:90:20:8e:33:2d:a9:2b:
         58:73:6e:fa:2b:b7:27:3a:53:01:cb:b7:2c:e0:dd:e9:20:e8:
         b9:10:ee:fd:dc:8a:55:89:e3:d3:98:a3:98:d3:10:6d:a0:49:
         fc:fe:52:9e:a3:83:a9:3e:3a:fb:28:b7:fa:83:73:cf:70:98:
         76:3a:26:25:b4:de:78:b3:93:da:19:f7:5c:2c:32:cc:92:42:
         51:48:10:a2:6d:54:8c:51:89:ba:94:26:ba:4c:db:06:32:9d:
         4a:50:a8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:39 2025 by rpki-client