This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
File:                     RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json)
Hash identifier:          ln43TA27Q8+WN2hz4FdvdqFMDtX9IIDiz7a5vAJ1/KI=
Subject key identifier:   17:81:45:DB:0B:06:8C:C8:9D:6B:FC:C3:42:03:A7:77:A0:10:7E:B6
Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75
Certificate issuer:       /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
Certificate serial:       0331
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
Manifest number:          032B
Signing time:             Tue 23 Dec 2025 00:04:33 +0000
Manifest this update:     Tue 23 Dec 2025 00:04:33 +0000
Manifest next update:     Tue 30 Dec 2025 00:04:33 +0000
Files and hashes:         1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: FZAMgm75bPpFPiP52+0GqfVBa0UB6w5frvViurpNROk=)
                          2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: Q4rmj8ZW9q3ZMhMYZknk/X38qXU9tpt3Fwr+6cA845w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl
                          rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
        Validity
            Not Before: Dec 23 00:04:33 2025 GMT
            Not After : Dec 30 00:04:33 2025 GMT
        Subject: CN=6949dc91-35ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:21:3d:d1:c1:0e:ff:4c:20:42:3c:9a:2e:
                    f9:f7:07:7f:dd:10:6a:be:5b:7f:71:95:a6:2f:24:
                    ea:56:aa:52:cd:5e:c4:c4:ff:6b:4e:26:a7:39:92:
                    e6:fa:36:db:d0:4e:f1:7e:e3:d9:99:95:a1:06:0d:
                    34:57:23:46:c4:fe:72:61:24:a9:9e:b6:3e:ca:a3:
                    87:e4:03:0f:27:a9:7c:3a:fa:82:67:17:5e:8c:14:
                    68:5e:da:48:c6:f6:52:b6:66:d5:22:12:84:9a:86:
                    21:d2:f8:6f:7f:6e:f1:c3:5f:8f:22:f3:ad:27:50:
                    a7:6e:70:fb:d1:18:e2:34:a4:63:9b:22:27:93:ed:
                    01:93:15:1b:f0:0a:c9:8f:2b:4b:d2:97:47:30:76:
                    ce:1c:bd:db:7d:d2:07:4f:56:9f:a3:8c:1b:a8:4a:
                    8d:d3:c9:0a:1d:5f:0e:f0:4e:d1:66:d3:46:41:e7:
                    5f:31:a8:68:75:a8:75:95:da:3f:42:4d:74:f7:67:
                    52:5d:6c:36:85:38:eb:ad:39:a9:6f:f2:13:c4:3e:
                    fa:a9:2a:8e:30:fb:72:d4:b3:30:4c:d7:39:5d:3b:
                    2c:1e:38:b3:00:9b:aa:6d:72:cb:f9:d4:09:8c:48:
                    0a:5a:23:e2:c4:c3:30:bb:15:12:85:37:6c:00:3c:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:81:45:DB:0B:06:8C:C8:9D:6B:FC:C3:42:03:A7:77:A0:10:7E:B6
            X509v3 Authority Key Identifier:
                keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:21:b6:c7:68:61:0d:98:fe:df:2c:0e:6b:90:2e:3d:b7:d5:
         9d:44:d4:c1:f4:4a:9c:0b:01:40:9a:59:61:e7:b0:bd:64:b5:
         cb:03:a5:c8:ea:ac:7a:ac:9e:8e:1f:81:01:38:3a:6c:4c:de:
         ef:81:5e:df:40:bb:c0:ab:78:42:b1:e7:4e:00:47:6b:4c:85:
         af:86:8d:86:30:49:16:7c:ae:03:36:1d:dd:59:ef:eb:74:87:
         80:f5:43:c1:ac:8c:bc:1a:fd:63:73:da:9d:f5:d1:0f:c6:fa:
         b3:e9:ac:52:5c:77:06:47:d8:32:01:82:6d:63:b0:71:91:13:
         55:e3:8a:66:22:dc:15:21:d9:1f:0f:48:50:50:46:ae:cb:56:
         67:fb:35:52:2b:c0:40:3b:78:9a:17:7b:fc:68:95:fd:08:52:
         18:da:b8:47:52:52:b1:63:78:76:ff:25:b5:83:2f:1f:8b:e8:
         df:a8:3b:31:1c:f1:40:fc:e7:19:bd:7f:b1:f6:21:63:86:ef:
         20:fb:5b:11:8a:61:9e:66:1e:21:6a:c1:06:7a:d4:3e:f5:87:
         ad:a2:c4:b2:d7:85:46:a1:2b:74:4c:b6:c1:d9:ed:e9:6b:32:
         53:06:f5:66:77:79:b7:68:25:81:1e:63:68:aa:c8:7c:6f:0a:
         72:71:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:37:44 2025 by rpki-client