This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
File:                     RMphSwVTVBAIPvurGi2xsgNiaLo.mft (raw, json)
Hash identifier:          rPwk6WYK2mWK3fCkAfGABKnUM4VRrqrkzbB82YOq7u4=
Subject key identifier:   CE:64:4F:62:03:B0:E6:2C:88:7D:52:62:BF:C5:41:AF:F9:63:F4:07
Authority key identifier: 44:CA:61:4B:05:53:54:10:08:3E:FB:AB:1A:2D:B1:B2:03:62:68:BA
Certificate issuer:       /CN=A915D062/serialNumber=44CA614B05535410083EFBAB1A2DB1B2036268BA
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
Manifest number:          05
Signing time:             Tue 23 Dec 2025 06:58:33 +0000
Manifest this update:     Tue 23 Dec 2025 06:58:33 +0000
Manifest next update:     Tue 30 Dec 2025 06:58:33 +0000
Files and hashes:         1: RMphSwVTVBAIPvurGi2xsgNiaLo.crl (hash: S0m8iZJbqtNIXgcE1XSJy6AL2t7iIFSRMyqKlC4vHA8=)
                          2: 71321E44DB9A11F0BFEA763F67D3641D.roa (hash: P+Z6Wo9BMh+BLRVb5FHmWbYg205GI/sRx6+Ef7aOwo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.crl
                          rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D062, serialNumber=44CA614B05535410083EFBAB1A2DB1B2036268BA
        Validity
            Not Before: Dec 23 06:58:33 2025 GMT
            Not After : Dec 30 06:58:33 2025 GMT
        Subject: CN=694a3d99-eb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:ff:c0:f4:15:52:c6:32:0c:5b:2a:18:6e:
                    93:bf:71:69:04:a5:a7:6f:41:fd:76:65:1e:44:02:
                    9a:0a:05:13:a7:b1:fb:f3:8c:c4:92:59:62:b6:68:
                    3e:52:a3:86:60:83:14:fc:9d:3f:7f:20:8a:18:8e:
                    e8:69:e5:25:ac:b0:4e:32:46:41:0c:0b:31:fd:2a:
                    6b:ac:0b:03:9c:2b:46:80:9f:45:fa:ad:b1:e9:99:
                    c7:29:f8:ed:ec:81:f7:f6:c3:d4:83:41:9c:0e:ab:
                    59:4b:05:60:c3:ac:fb:91:26:ef:77:69:b1:07:26:
                    72:40:24:a2:8c:f2:33:77:5c:e8:40:f8:a9:8a:3a:
                    eb:2d:93:ea:45:1e:a8:35:5b:15:2b:22:34:96:1e:
                    a9:17:7b:cb:d0:d3:2d:1d:25:c5:80:16:89:c4:2b:
                    1d:d3:3b:1d:a9:cc:11:dc:6a:f3:16:60:46:12:7b:
                    5d:18:98:53:df:7a:43:ab:f9:54:45:35:da:f8:66:
                    93:27:1b:5e:40:49:c0:b6:33:1d:19:e7:c0:02:aa:
                    d0:7a:ec:91:da:8d:d6:33:70:a7:21:cf:66:75:68:
                    fb:69:7d:0c:4d:8e:fc:b8:4c:bb:88:32:c8:a8:ae:
                    d2:8c:7f:f2:e7:78:48:4b:fd:b1:e0:51:cd:60:89:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:4F:62:03:B0:E6:2C:88:7D:52:62:BF:C5:41:AF:F9:63:F4:07
            X509v3 Authority Key Identifier:
                keyid:44:CA:61:4B:05:53:54:10:08:3E:FB:AB:1A:2D:B1:B2:03:62:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:89:bb:e7:03:2e:83:c6:36:0b:97:30:3e:42:fb:bc:28:01:
         27:50:a0:ee:8a:2f:e8:46:38:e2:39:80:cc:f7:ad:a1:1b:cb:
         47:27:3d:34:1c:d1:e8:08:8a:84:b5:76:c2:9e:bc:20:a8:64:
         75:b9:6f:53:d2:51:91:e9:2c:4b:73:eb:82:11:5e:01:55:b2:
         74:33:85:f3:43:d2:c7:ce:1c:44:2b:90:ae:c3:bc:e3:66:b1:
         c3:c9:98:a8:d9:22:52:7b:36:b1:b6:6f:71:f0:32:be:9b:3a:
         69:e3:b2:f8:b8:d4:5f:a3:a9:0b:1f:6a:46:f6:d1:cc:70:b6:
         9e:4b:44:1d:c3:d3:2d:d6:37:5c:33:9d:b5:66:e7:87:cb:52:
         5a:fa:b3:ef:47:9e:60:dd:47:7a:64:19:63:66:c5:56:77:d9:
         9a:c9:c0:b2:81:c7:06:d6:62:b0:de:ad:5a:60:9f:54:2f:44:
         f1:14:3e:c6:5f:70:ba:f1:fd:df:fb:2d:2f:6b:b2:6d:67:e0:
         ea:eb:c1:a9:88:86:9b:61:e2:c8:42:80:c0:d9:d8:9a:a3:43:
         47:62:19:90:c7:35:07:47:39:d6:91:c8:b9:c3:79:ae:a5:63:
         fa:a1:83:81:df:ec:08:44:a0:9d:f5:23:36:d8:dc:99:69:d2:
         2b:23:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:28 2025 by rpki-client