This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File:                     ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier:          V2lEqPyp5Mve0R72P3P8lkBAhvKXA2MSGhbbasmFE5o=
Subject key identifier:   8A:2C:64:C4:70:C6:4D:E4:84:5E:9C:38:FB:60:89:67:B1:D1:FE:10
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer:       /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial:       0468
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number:          045A
Signing time:             Mon 22 Dec 2025 23:17:08 +0000
Manifest this update:     Mon 22 Dec 2025 23:17:08 +0000
Manifest next update:     Mon 29 Dec 2025 23:17:08 +0000
Files and hashes:         1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: 29WJtlyH0LWDhNCkguhBsaEZLlZ4mZa8/FDuR3DVSA8=)
                          2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: b9iBKweDQpw3WvJOHZ5pnqPC35ef5TOK2GSHDPRSqes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
                          rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
        Validity
            Not Before: Dec 22 23:17:08 2025 GMT
            Not After : Dec 29 23:17:08 2025 GMT
        Subject: CN=6949d174-8c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:2f:e6:02:c4:cc:f5:16:d4:24:6b:2c:95:
                    cc:bd:ef:3b:99:dd:f8:95:26:85:d5:41:76:fc:bf:
                    6c:40:87:32:20:ac:69:bd:39:0e:67:bd:8e:61:56:
                    cf:c7:97:36:72:79:1c:57:ab:04:37:64:e8:79:cb:
                    8b:2a:60:57:2a:91:36:cd:88:f3:24:d8:f4:22:fd:
                    bd:20:c2:85:2a:2c:c3:0f:0c:63:37:ac:85:2c:7e:
                    d5:c1:ea:6d:6b:73:df:16:6e:35:ed:0a:3a:90:e0:
                    c0:b1:61:21:f1:6c:55:f6:a5:48:b0:18:24:ae:10:
                    75:bd:1d:0b:cb:4e:a2:65:41:95:d7:69:c5:98:60:
                    d9:a9:d8:fb:8e:44:d2:7d:ea:5f:ac:e1:d5:30:27:
                    4f:12:df:e3:07:cd:bc:9d:e9:ea:cb:e1:3e:58:78:
                    b2:69:2b:c2:db:ac:fb:43:6a:91:0c:c2:76:48:2a:
                    55:04:b5:87:3b:a3:0e:a0:95:7a:b9:57:77:4e:0f:
                    25:c9:52:35:e5:e6:65:70:5d:44:bb:0b:36:9e:e0:
                    9a:5f:ec:a6:db:90:b3:50:96:e2:14:90:bf:fe:27:
                    fa:9f:f8:b1:b1:ae:e4:3a:1a:3c:a8:f3:06:00:36:
                    a4:4d:cc:6b:25:85:37:04:c1:ac:5e:dd:22:b1:91:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2C:64:C4:70:C6:4D:E4:84:5E:9C:38:FB:60:89:67:B1:D1:FE:10
            X509v3 Authority Key Identifier:
                keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:55:48:eb:74:9b:c6:ac:af:19:86:91:cb:37:4c:d7:e4:42:
         e1:95:a8:1a:44:1f:ad:c3:c8:24:2a:1b:a1:8c:70:d0:3a:58:
         52:24:3b:c0:ec:0a:b3:1f:ea:cd:3e:e9:96:b2:b8:2f:96:2b:
         79:73:8d:7e:9e:58:5c:f2:4c:c6:a3:1e:e7:5c:d2:d9:b9:fb:
         51:c4:64:66:55:1b:ad:74:2f:b1:21:fb:ab:0b:2f:15:70:38:
         2a:ca:8b:58:c8:27:9c:72:d0:29:e7:fb:38:48:e5:67:75:cc:
         b6:88:cc:91:46:62:c7:8f:63:43:6c:fa:a1:cb:07:5f:e3:4e:
         a3:b4:10:fb:f0:4b:06:71:3d:3d:e1:50:08:9b:e5:69:36:40:
         e9:40:17:e0:48:9b:eb:40:14:cb:d8:88:33:42:ee:f6:bc:51:
         9e:3e:21:40:f8:38:4e:25:16:15:4a:38:26:dc:89:80:2e:b1:
         90:5b:50:ed:97:d2:d9:42:9e:8a:d7:7c:af:64:d4:b5:d1:fa:
         e4:f7:22:00:af:05:97:4b:2f:e3:f8:df:19:f6:02:6f:80:3a:
         81:a9:0d:75:80:7d:b8:e1:87:f4:9c:80:cc:51:2e:22:bd:a4:
         eb:c3:a9:d7:31:a5:2b:dd:53:0f:79:8e:b2:5d:26:b6:21:1e:
         8b:1f:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:22 2025 by rpki-client