This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
File:                     XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json)
Hash identifier:          4HhkMdxCWoF3pzn+AybXdvhKBWvxnThBq2r71pjfNdE=
Subject key identifier:   2F:38:2E:99:DD:5A:23:E3:A2:FB:3E:54:A2:A8:EF:8F:2C:BD:A3:B3
Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
Certificate issuer:       /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
Manifest number:          0185
Signing time:             Tue 23 Dec 2025 02:46:27 +0000
Manifest this update:     Tue 23 Dec 2025 02:46:26 +0000
Manifest next update:     Tue 30 Dec 2025 02:46:26 +0000
Files and hashes:         1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: cyQXlLSdRE6v26wOAhPJ0g6qKuBm3uSIhs9bLA8/6kk=)
                          2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: amqr6XOc8WGJeOSVJZCKADWGQThdq0cXOHfWqz7N/go=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl
                          rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
        Validity
            Not Before: Dec 23 02:46:26 2025 GMT
            Not After : Dec 30 02:46:26 2025 GMT
        Subject: CN=694a0282-73d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d4:fd:d1:d1:03:12:04:f4:b8:88:22:f6:0b:
                    e4:f2:ee:48:71:f7:0e:83:98:f9:ad:8d:f2:eb:24:
                    1b:3b:76:3e:d9:24:b0:bf:31:97:ad:b8:ca:83:05:
                    b9:fd:97:97:b7:83:4a:31:f9:bc:75:48:88:26:84:
                    90:1b:03:b1:85:ef:21:1b:85:ad:a7:8e:3a:e5:3c:
                    4f:ad:3d:d0:fd:b2:77:72:23:ea:f1:03:62:80:e8:
                    47:45:a1:3a:97:09:46:de:93:8b:c5:95:6d:a4:1b:
                    a7:08:bc:79:fd:c7:42:b3:76:1a:ac:4b:cc:d5:38:
                    83:73:e9:f7:a6:a3:4f:ea:5d:6c:86:1d:73:e0:42:
                    bd:b4:e9:10:46:42:79:c5:3e:00:2e:8d:b8:88:99:
                    f6:00:08:69:86:49:90:7d:50:e9:c6:d2:54:69:9c:
                    ca:ab:9b:2a:d4:96:3e:95:ea:9d:f8:a3:a5:f2:cd:
                    b5:f7:d0:c6:fa:25:03:d6:14:8b:c8:73:95:ac:2d:
                    a7:50:a8:92:af:b2:72:17:a9:ad:ae:77:ba:81:f8:
                    1f:90:ae:c2:f2:c6:76:2d:49:70:d6:cd:8c:90:bb:
                    44:73:55:1d:d0:05:76:69:14:5e:53:a5:09:a1:05:
                    55:99:ac:5e:ec:1f:b0:65:6b:f1:9f:48:64:19:45:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:38:2E:99:DD:5A:23:E3:A2:FB:3E:54:A2:A8:EF:8F:2C:BD:A3:B3
            X509v3 Authority Key Identifier:
                keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:85:d8:43:bb:ff:5a:04:e3:5a:84:99:63:33:ad:5d:6e:79:
         bb:fd:d9:06:cf:11:f6:09:37:55:5e:5e:3f:43:a1:1d:23:1d:
         3a:d9:95:07:e1:85:f3:73:06:0e:f6:71:e1:40:80:1a:d8:dc:
         3e:5a:c4:ff:3b:a0:29:e4:df:c1:17:04:65:f7:8b:84:1c:1a:
         3a:22:19:6a:40:27:07:42:ec:12:2a:d8:d6:ae:1a:e1:63:2d:
         40:e5:80:b0:81:e9:09:99:ee:21:5b:55:ec:d8:55:3b:22:98:
         05:e7:61:3d:c9:40:93:62:63:08:19:1a:1b:0c:f7:f1:3d:b0:
         b9:63:90:35:6b:96:a2:ee:80:7f:17:86:c5:8c:5c:08:99:4e:
         6a:4c:e5:c4:a5:e7:07:8c:f5:fb:c3:07:2d:e2:df:b7:a5:50:
         64:43:77:e2:62:d8:13:69:98:8c:4b:18:99:55:94:2a:f2:10:
         5e:45:68:8d:ca:b0:42:a3:73:25:7a:a2:6b:c8:07:05:0d:ae:
         00:50:7f:3e:a3:44:ac:61:a5:f0:c9:36:b8:97:48:9c:ea:53:
         83:6b:a4:76:e6:dd:6f:28:ee:ec:1f:bf:cd:bc:16:f7:8a:6e:
         a8:b5:ad:ed:c0:e4:d1:bf:bc:c5:78:5b:7a:b4:85:3c:bd:16:
         c8:e8:3c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:24 2025 by rpki-client