This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft
File:                     mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft (raw, json)
Hash identifier:          Y438lmRwVWnZt61vvayvGqHyGGqc2QhVU8wRmKlHzVU=
Subject key identifier:   D4:4B:22:46:D0:5D:73:16:63:78:E2:00:CA:95:8F:6F:85:1E:99:21
Authority key identifier: 9B:0B:51:CB:1C:A3:7F:68:C2:7E:C7:57:1F:E4:66:10:5C:C2:5E:24
Certificate issuer:       /CN=A916E675/serialNumber=9B0B51CB1CA37F68C27EC7571FE466105CC25E24
Certificate serial:       0334
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft
Manifest number:          0330
Signing time:             Sun 21 Dec 2025 00:16:37 +0000
Manifest this update:     Sun 21 Dec 2025 00:16:36 +0000
Manifest next update:     Sun 28 Dec 2025 00:16:36 +0000
Files and hashes:         1: mwtRyxyjf2jCfsdXH-RmEFzCXiQ.crl (hash: hwsxKgKD2uuIQtoP8oqXpjeAiv2LAhyMUilodnTELJ8=)
                          2: B9FB709CED5C11EC8CD1DC69C4F9AE02.roa (hash: Y9BSTqQkCxXoGtQxDjaargnZRdlsbB9UoSJKO3fdE5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E675, serialNumber=9B0B51CB1CA37F68C27EC7571FE466105CC25E24
        Validity
            Not Before: Dec 21 00:16:36 2025 GMT
            Not After : Dec 28 00:16:36 2025 GMT
        Subject: CN=69473c65-a484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:e5:3d:ea:80:6a:f1:2d:9f:7a:2f:e3:f6:
                    dc:8a:d7:aa:92:04:f2:cf:2e:90:5f:0a:5e:83:1c:
                    19:7e:9b:b1:6f:93:7b:31:ea:53:16:4a:81:29:bf:
                    05:a7:37:bf:cd:68:88:a3:fd:bf:23:36:23:cf:4c:
                    38:6f:58:13:8f:cb:30:e4:d3:64:d7:06:7b:42:f4:
                    9a:8a:09:33:9a:78:3b:65:58:b0:26:cd:1d:09:9b:
                    0b:7f:77:0b:1f:df:fe:bd:19:7d:85:05:b8:03:5d:
                    7c:6a:30:ce:26:5c:43:7b:74:48:9c:9b:90:9e:ed:
                    cd:d3:85:92:1e:32:20:a3:e0:05:5c:f1:6a:b4:d4:
                    1f:a4:f7:99:02:ae:d9:42:23:65:28:a8:e3:8a:61:
                    e6:be:b5:7b:38:2c:f7:75:13:19:ce:d2:d5:5d:e5:
                    90:3b:07:1f:1a:ab:5e:e8:4e:1f:9b:d6:16:72:8a:
                    8e:72:08:30:2c:1b:41:b5:1f:6c:a8:77:aa:38:c1:
                    29:04:f8:6e:88:5a:ed:55:e2:2b:86:fa:a8:df:8b:
                    18:d6:40:96:f1:51:73:8a:f6:50:79:a7:66:c6:23:
                    12:17:09:0e:cc:e0:d7:fb:7f:35:6d:6d:17:d2:e9:
                    7a:c1:fd:eb:d9:b4:4a:e4:4f:8e:f0:3e:7c:4e:66:
                    68:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:22:46:D0:5D:73:16:63:78:E2:00:CA:95:8F:6F:85:1E:99:21
            X509v3 Authority Key Identifier:
                keyid:9B:0B:51:CB:1C:A3:7F:68:C2:7E:C7:57:1F:E4:66:10:5C:C2:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E675/BBEB9FAEED5611EC9CC2804EC4F9AE02/mwtRyxyjf2jCfsdXH-RmEFzCXiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:9d:1d:a4:fe:3b:4f:94:08:26:65:75:ed:7e:65:f1:7c:
         96:5b:a6:a8:81:30:b2:f5:f1:b6:52:66:d2:67:90:51:e9:a5:
         21:48:b9:e9:d8:79:69:a5:91:bd:25:a3:22:32:89:71:7f:33:
         11:6a:79:c7:8b:6a:15:b9:c9:81:65:20:6d:fa:c7:ea:5e:11:
         ae:d6:ee:d1:8b:70:ac:5f:6c:4a:33:4e:8f:73:2a:af:75:b5:
         ab:91:3f:0c:bc:10:67:9a:3a:3b:b8:60:70:68:1e:90:13:00:
         21:42:6a:6e:a3:ee:36:17:41:bc:14:de:b2:23:df:ef:56:be:
         b9:9d:78:76:3d:c1:e0:10:36:79:df:ed:03:d4:63:eb:1e:08:
         68:24:f7:5e:cf:32:69:a2:80:e7:7b:76:86:5e:fc:5e:34:52:
         c5:19:2f:a6:a8:dd:bb:f6:ba:9c:89:f0:1b:cf:52:2a:53:81:
         7c:6f:dc:55:90:48:08:3e:57:b9:39:58:13:94:15:55:68:87:
         1d:fe:55:9c:1f:85:1b:0e:5b:1c:71:2f:c1:12:df:91:dd:c4:
         78:08:4a:1d:b4:cf:a5:f2:3b:cc:83:ba:d2:1b:25:a9:52:eb:
         46:49:bb:06:11:c8:87:9c:19:de:b0:ac:62:bf:49:9b:5c:be:
         a5:8b:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:33:59 2025 by rpki-client