This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File:                     -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier:          p2BqmVWhyJnO3fF60UbHXppqm7q2cK+pYG3331jt0CM=
Subject key identifier:   B2:14:C6:36:AE:12:05:0C:54:3F:55:A0:A9:91:50:31:B5:21:8F:16
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer:       /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number:          023A
Signing time:             Sun 07 Dec 2025 00:25:46 +0000
Manifest this update:     Sun 07 Dec 2025 00:25:45 +0000
Manifest next update:     Sun 14 Dec 2025 00:25:45 +0000
Files and hashes:         1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: 6b23/4jkIuxk5M0JemwsDlG+ahzsmElP2jzIjqodV0Y=)
                          2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: uMgAAlcYJQ+sdnOnE1dyzqDnSreVvRuteObbE8brNz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
        Validity
            Not Before: Dec  7 00:25:45 2025 GMT
            Not After : Dec 14 00:25:45 2025 GMT
        Subject: CN=6934c98a-e178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:30:34:5a:d5:12:d7:0c:d6:f9:27:08:b7:
                    59:5d:13:d2:38:04:b5:ef:bb:e0:0a:4d:0d:f0:ad:
                    07:2c:10:3d:ae:d1:ad:c5:35:ce:e3:83:79:be:fc:
                    17:09:21:cd:3a:b3:67:8f:00:b0:a3:d2:20:cd:88:
                    ad:75:85:39:f1:d2:58:8c:7e:57:e3:dc:2e:9e:fd:
                    a7:ee:69:35:36:bc:06:8a:25:89:22:29:ab:bd:09:
                    b9:78:58:f2:1e:1e:55:bd:ec:ea:ae:0c:9d:4f:ee:
                    47:59:ff:bb:51:c3:ee:39:a6:f6:97:f2:1c:f7:dc:
                    f0:74:49:34:67:1b:9f:3f:aa:fc:4d:d2:37:5b:3c:
                    98:a2:f1:09:d1:74:8d:66:03:60:66:cf:71:86:d4:
                    07:87:3b:7b:65:64:4b:4e:f4:76:41:da:7f:c4:a5:
                    63:b6:a6:95:d0:90:9a:c6:ed:5f:f7:79:f9:a9:50:
                    e5:3d:70:46:59:b9:0e:f8:8f:a2:93:66:9b:66:10:
                    9e:67:e1:02:99:06:6c:83:66:27:15:cf:8e:51:6a:
                    bf:10:03:53:17:26:ac:dd:49:f8:10:cd:08:13:6b:
                    b1:47:6f:de:73:98:44:9a:09:5d:00:e5:0c:df:b8:
                    eb:61:94:c6:65:20:77:ec:c1:e5:72:8e:01:9a:26:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:14:C6:36:AE:12:05:0C:54:3F:55:A0:A9:91:50:31:B5:21:8F:16
            X509v3 Authority Key Identifier:
                keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:58:04:b1:b5:58:6f:22:da:5f:d3:64:9e:48:c8:c8:24:
         7a:1d:50:30:d5:a5:16:6a:a7:14:9f:c7:69:29:f7:e6:d2:1b:
         5b:2b:08:78:99:db:4a:43:c3:1a:8b:40:05:47:cb:bc:90:ab:
         c0:2d:d1:17:24:39:dd:70:78:c2:46:c7:e5:bb:65:e9:d1:83:
         08:4e:f8:93:0a:0e:a0:a4:30:81:07:82:b3:d6:e5:70:f0:cb:
         0e:46:cb:f0:84:99:ce:0f:9a:8c:ee:74:28:e0:df:cc:3e:7b:
         73:ba:7b:0b:25:5c:2e:60:e7:9e:86:e8:70:c1:73:be:c1:1a:
         59:d5:2e:8e:63:b5:2c:cc:b3:ec:82:ac:37:12:39:f3:79:db:
         28:50:09:7e:3b:52:78:5c:5a:79:6c:b2:84:e1:00:bd:31:20:
         15:53:f6:e2:af:d5:27:bb:79:24:80:7c:61:97:2b:8d:63:42:
         67:09:38:82:a0:8c:48:09:7a:79:eb:21:11:a1:99:9b:e4:4d:
         52:1f:4a:01:66:be:d7:3b:1f:cb:04:65:b3:02:96:72:1e:d1:
         81:de:09:bb:04:46:e2:a7:14:da:db:30:7f:df:61:25:10:32:
         a8:6b:30:bc:32:86:96:83:33:9d:d7:90:c7:fa:e9:7b:3d:b0:
         0c:b0:7e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:39 2025 by rpki-client