This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
File:                     w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json)
Hash identifier:          GjIlMtdtByRvgoXzZ0mfZUKloCuCDyaBGzTUl4ybS3k=
Subject key identifier:   C1:43:89:C1:00:2E:26:FF:29:7C:D1:A4:CB:AB:07:89:33:A5:B6:61
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Certificate issuer:       /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial:       0444
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
Manifest number:          043E
Signing time:             Wed 10 Dec 2025 22:19:49 +0000
Manifest this update:     Wed 10 Dec 2025 22:19:49 +0000
Manifest next update:     Wed 17 Dec 2025 22:19:49 +0000
Files and hashes:         1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: V9MumdQId7+gXgwc1BQQjKOc0jTqnOC5XxhlbNJZ18A=)
                          2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 22:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
        Validity
            Not Before: Dec 10 22:19:49 2025 GMT
            Not After : Dec 17 22:19:49 2025 GMT
        Subject: CN=6939f205-8ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:44:16:77:fc:9c:50:c8:9f:fb:96:cd:38:
                    6d:ff:0b:ed:53:51:56:51:8d:fd:67:f4:1c:92:96:
                    c0:7d:96:c6:0e:4c:17:c3:4d:85:56:03:73:12:aa:
                    93:f9:fb:2a:71:04:a8:3f:b5:2b:81:0d:9c:c2:39:
                    84:8e:cb:79:b7:d0:94:b6:93:61:7a:3b:43:a3:8f:
                    58:0a:f6:f6:4f:40:dc:ef:8d:a7:d8:b2:d6:a0:e5:
                    55:2a:14:82:fe:fc:10:8b:56:9c:46:c9:f2:4f:8d:
                    ce:0f:31:32:b6:64:f0:48:cb:22:c6:53:18:e1:5f:
                    eb:e1:38:78:d5:a9:58:36:5c:fa:fd:d4:4b:c7:04:
                    b3:81:17:34:cf:0f:fc:f5:56:1a:4a:89:d6:f1:52:
                    62:a1:2f:15:e0:c4:a1:aa:5d:22:c9:ca:93:47:bc:
                    75:b9:d6:65:4a:93:06:63:4c:c5:80:fb:86:0e:86:
                    9c:34:0d:97:11:df:81:a3:d2:01:b4:83:86:4d:ba:
                    fd:3e:60:88:81:29:d3:8b:09:1f:ed:d8:52:1f:56:
                    4a:1f:68:da:6d:f1:e7:2f:d8:b4:6a:dd:6b:1c:35:
                    03:98:64:d0:c2:a9:d1:4d:c8:f0:5e:20:bd:ec:f8:
                    cc:bc:6c:ab:fb:95:6e:5f:62:93:0b:f0:27:a5:99:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:43:89:C1:00:2E:26:FF:29:7C:D1:A4:CB:AB:07:89:33:A5:B6:61
            X509v3 Authority Key Identifier:
                keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:86:df:94:ea:e2:34:9d:fe:60:71:f8:83:d4:5b:b7:8f:
         fe:f8:e3:29:d3:90:74:9e:cf:01:10:85:b9:32:cd:4c:70:c4:
         6d:5a:5a:a5:47:dc:2c:53:e3:be:32:81:01:aa:00:bb:f4:7b:
         ad:aa:f2:56:18:84:fc:e6:c1:23:10:47:0c:c0:8a:e9:04:a2:
         98:52:3c:24:d6:8a:cb:13:91:1c:ee:42:b2:f1:19:57:60:e3:
         2c:17:dc:0c:1f:20:dd:4f:d8:8c:d1:06:49:df:a8:bb:af:b5:
         fa:e9:2a:e6:99:f8:44:d4:46:2b:64:16:65:67:e8:de:a0:1e:
         cf:6d:5e:47:6a:8c:7e:c3:e7:c9:15:5d:77:b8:13:b6:2a:aa:
         bf:11:ea:f7:56:21:8b:37:1b:3b:e0:06:14:72:74:99:31:4a:
         02:bd:6f:ed:f3:2e:ed:bb:ce:2c:06:ca:32:a3:66:2c:0d:cd:
         4c:22:d2:c3:28:cf:a9:75:43:29:55:00:60:ad:47:61:77:07:
         ff:26:c7:e6:3e:c5:36:04:9d:71:b2:3e:2e:75:dd:88:07:e8:
         59:f9:ec:f5:07:fd:e6:3b:54:68:17:a9:e9:f0:a8:f0:a3:a8:
         61:75:01:58:68:32:a2:5b:cf:16:80:e3:a8:00:ae:5a:43:cf:
         5a:05:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:27:24 2025 by rpki-client