This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
File:                     SWSelPbKPb3B_86Z_xu8q4zQqlw.mft (raw, json)
Hash identifier:          mP2WqUDTQbi71grCXUHAY6rLqufobjuSMoonPuTwBnQ=
Subject key identifier:   B5:E0:45:F4:1A:4F:01:88:DB:F1:7C:03:4E:8C:72:49:70:5C:CF:0E
Authority key identifier: 49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
Certificate issuer:       /CN=A91519CC/serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
Manifest number:          06
Signing time:             Tue 23 Dec 2025 06:57:20 +0000
Manifest this update:     Tue 23 Dec 2025 06:57:20 +0000
Manifest next update:     Tue 30 Dec 2025 06:57:20 +0000
Files and hashes:         1: SWSelPbKPb3B_86Z_xu8q4zQqlw.crl (hash: E7aO2Mv5TWw8vZkM99SPeNwpHwxyKo/VOgILXaFWAs4=)
                          2: 9DB343D0DA5A11F08EBD209195D3641D.roa (hash: sIQOHGddydH5WNvq1a9DZQM4Tgjc39JsPN94viMuMhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
                          rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91519CC, serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
        Validity
            Not Before: Dec 23 06:57:20 2025 GMT
            Not After : Dec 30 06:57:20 2025 GMT
        Subject: CN=694a3d50-f244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:90:e4:62:04:d3:d0:9a:e4:c3:28:b0:c7:
                    41:c0:cf:3f:4d:56:b2:32:84:63:5b:ae:c8:06:e1:
                    20:74:a5:2c:6e:35:24:23:a2:86:4b:58:d8:d5:1a:
                    7d:a1:9b:69:c0:40:cf:3c:b2:75:92:41:2f:6b:75:
                    cf:84:9f:01:28:1a:f9:d7:fe:87:b4:46:51:54:bd:
                    23:be:b6:65:9b:a5:53:dd:e9:a8:96:f7:b7:f1:d4:
                    6b:ce:04:80:17:74:57:84:db:b1:25:65:b0:cf:48:
                    18:e5:78:dd:00:6b:3f:ab:44:ee:da:83:ef:f7:5f:
                    0d:a7:cf:5b:a4:00:55:c2:d1:7a:cf:03:48:8e:99:
                    0a:a6:0a:fc:f5:db:2c:d8:54:27:85:f7:24:7a:73:
                    3e:c8:c1:6a:da:d1:53:08:52:73:f7:28:0f:b0:2a:
                    7d:e8:c7:4c:95:95:a3:bf:a0:b4:1c:48:e9:f3:ef:
                    c2:a4:00:dd:10:8c:8d:82:53:08:60:32:3b:12:ae:
                    b4:6c:7c:eb:ba:a8:5f:0d:79:0e:f2:ee:7a:38:f1:
                    fc:31:63:80:47:d7:34:a3:66:08:83:6d:d1:37:30:
                    a7:63:35:6e:19:17:91:ae:b3:7c:3d:d2:69:0e:7b:
                    15:c7:bd:8f:82:3e:6c:84:42:3b:2d:10:c1:2f:b1:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:45:F4:1A:4F:01:88:DB:F1:7C:03:4E:8C:72:49:70:5C:CF:0E
            X509v3 Authority Key Identifier:
                keyid:49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:fb:13:fa:fd:1a:05:78:f1:ec:55:28:d6:a5:5e:0b:d2:fe:
         e8:eb:5c:4e:cf:02:7b:f0:8d:81:ff:86:3c:fc:5d:52:d0:03:
         af:0d:d6:c8:fc:a2:cf:4b:93:f0:31:12:a2:fb:7c:19:fe:7b:
         ac:54:fb:b9:f1:5b:75:e4:9a:79:c3:b8:44:7e:02:dd:49:19:
         7c:68:6e:ed:06:e2:83:26:80:f5:f5:bd:a0:d7:a0:8b:6d:1d:
         2a:06:13:4d:ff:4a:50:1c:e1:dd:ab:fe:ae:03:d7:a4:a2:69:
         af:93:05:fb:91:b6:9f:3d:c9:2b:c0:0d:f0:f9:27:85:96:4f:
         ae:49:01:a2:79:9e:a7:4d:09:17:a2:c4:52:e5:83:0c:ea:45:
         21:97:b9:c4:3e:a6:90:0a:83:93:cc:28:f7:fb:5d:12:ec:ed:
         30:58:14:a4:42:ad:cc:7f:30:ee:23:c3:5f:1c:4d:c1:03:04:
         02:65:f7:48:ac:e3:70:89:e6:39:5a:f1:6f:50:bb:6c:55:92:
         52:be:38:61:19:1a:26:b5:c2:73:5e:3c:46:1e:af:23:71:11:
         fe:0d:f3:73:24:9a:3b:74:cc:fe:26:08:9f:c2:32:e8:43:7a:
         84:0c:a3:75:d1:3d:6f:fe:a7:f6:f4:90:a9:54:02:d4:ce:79:
         75:5c:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:30 2025 by rpki-client