This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File:                     M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier:          C6bI1yWeDLyFndpkkb7A6QJJXEGZicOqnx6m6nUYM6A=
Subject key identifier:   40:A1:78:21:4D:E7:76:B2:DF:14:D9:A8:80:25:4A:1F:6C:C4:4B:67
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number:          0163
Signing time:             Wed 03 Dec 2025 02:32:53 +0000
Manifest this update:     Wed 03 Dec 2025 02:32:52 +0000
Manifest next update:     Wed 10 Dec 2025 02:32:52 +0000
Files and hashes:         1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: gA7QiTuqGC22+4wo8fjT2DW+nRbPaLhVlNWNR/S94yI=)
                          2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: Dec  3 02:32:52 2025 GMT
            Not After : Dec 10 02:32:52 2025 GMT
        Subject: CN=692fa154-a07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:8e:bb:0b:e8:f3:c6:77:06:01:81:f5:f7:
                    67:45:87:3e:50:70:99:46:68:06:d6:07:77:c7:3b:
                    9e:79:7b:74:91:8d:34:68:42:13:c1:83:e0:96:6c:
                    3e:26:e5:f0:46:c1:e5:aa:d4:e0:db:75:08:c3:6e:
                    a2:0f:b1:13:05:af:70:81:97:5f:2d:fb:21:23:65:
                    6a:f8:1f:16:aa:49:47:45:29:80:bd:e7:a8:79:f6:
                    54:1d:97:39:86:1c:b2:8a:5a:1d:dc:b0:b5:47:fc:
                    24:31:7f:78:ff:46:82:8b:5c:6e:4e:8a:93:bd:bc:
                    2b:5c:bb:f9:66:25:93:68:71:61:c7:45:96:eb:70:
                    d4:f1:c8:e2:37:b5:15:99:54:91:bd:d6:c2:88:aa:
                    ba:88:b0:95:74:f9:54:39:4c:d9:7b:d8:72:66:8a:
                    17:6a:03:d5:3f:58:d8:e4:8f:91:59:7b:f9:02:d4:
                    9c:a1:ff:2c:31:ba:4c:ff:85:d4:68:0e:0d:18:ae:
                    db:0e:ee:f2:2f:e3:9b:b5:b2:3e:66:90:57:a8:6a:
                    4c:71:55:74:ae:ca:90:70:07:ac:b9:e1:6e:f9:66:
                    e0:ea:47:1d:8e:ab:47:96:5d:96:a3:22:9a:28:e6:
                    94:de:bb:9a:c3:37:88:70:fc:35:ae:72:42:c0:3a:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A1:78:21:4D:E7:76:B2:DF:14:D9:A8:80:25:4A:1F:6C:C4:4B:67
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a9:c6:9b:ae:0b:3f:f4:5f:f1:9a:87:77:59:b6:0b:6f:78:
         65:68:92:f7:a7:84:a2:ba:ad:63:0d:5a:51:40:95:f1:fe:69:
         4c:6b:3e:82:c2:bc:1e:ce:6c:15:1e:ee:25:7f:c8:c4:d7:18:
         f8:b6:e4:cc:e2:40:a2:f8:c0:e1:7d:ea:bf:0f:5b:23:43:c8:
         7a:8f:a1:b0:03:04:7b:fc:9d:1d:0b:79:94:b0:c5:33:7d:c0:
         f8:ac:90:c4:e6:59:f8:ff:4a:88:b1:87:7c:a8:ac:52:5c:f4:
         10:a6:ff:ab:4a:ee:bc:94:56:6e:57:e2:0a:91:3e:26:c3:95:
         af:b9:71:1b:d6:8e:86:e8:11:25:be:e4:70:2f:23:7b:74:02:
         e4:77:88:d4:2a:15:5e:04:3f:08:3d:86:c6:e9:1c:0a:71:94:
         d7:b6:de:d7:7b:f0:48:02:ec:82:54:e8:62:c3:54:73:f7:b5:
         e6:10:e1:95:71:53:56:da:76:3b:9a:de:44:38:51:31:91:5e:
         0c:70:19:1d:3f:60:1f:eb:70:cf:40:23:22:0a:14:2b:2a:a0:
         49:72:e3:61:b0:eb:90:24:59:82:ad:89:21:75:da:e4:cf:57:
         9d:2b:65:b7:a7:41:9a:9a:33:4d:ab:c7:1e:3c:a8:23:3b:74:
         30:b2:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:27 2025 by rpki-client