This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File:                     dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier:          7xKPcplkLERE3Dq9TNiEKPfzqadE3k6JM0Urx5iy/x0=
Subject key identifier:   0A:19:60:B4:70:20:C1:D7:C2:55:F8:94:F6:3F:88:13:97:EA:3E:8D
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer:       /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial:       0423
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number:          0413
Signing time:             Tue 16 Dec 2025 23:49:40 +0000
Manifest this update:     Tue 16 Dec 2025 23:49:40 +0000
Manifest next update:     Tue 23 Dec 2025 23:49:40 +0000
Files and hashes:         1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: EBFQ64GoRfvEDxJTDKG6onM/CboCHV4VtOwpAGR6yr8=)
                          2: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: qLefOo7dvmrLJXMQn53EKJf0jFwExcla3oAdVHf5x9E=)
                          3: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: FkNOr2OAvQ+/2fjoQ+ttW/rGycCdH0fNwqceJH3qGXA=)
                          4: D9AD698C961211ECB515C474C4F9AE02.roa (hash: 0Y4nA/Aph2MoTUodk+O6k9Ce17owZ/QgLBqclqJBZ7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
                          rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 23:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
        Validity
            Not Before: Dec 16 23:49:40 2025 GMT
            Not After : Dec 23 23:49:40 2025 GMT
        Subject: CN=6941f014-60d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:88:b1:bb:c9:dc:16:c9:04:ca:2a:23:0e:
                    f3:57:81:d9:a7:bd:f0:d0:39:75:00:a1:f8:1b:3f:
                    0e:53:30:10:d5:b2:5e:4b:1c:1e:4b:47:dd:02:f3:
                    9d:66:f0:a3:0e:1a:c4:a2:11:81:6a:cf:d4:3b:c0:
                    fd:b9:cf:f6:cd:70:7e:f7:77:ac:43:60:17:3f:ef:
                    61:91:df:01:e0:78:80:9f:46:b4:b9:1b:23:1a:e3:
                    94:a4:de:74:54:53:fa:68:7a:83:bc:93:b6:53:59:
                    01:25:6f:ac:f5:1f:9d:03:8f:65:34:e0:70:78:14:
                    17:6e:c3:19:0a:0c:7d:25:32:74:cb:a3:e7:10:1d:
                    d0:95:3b:8b:1e:4c:9f:02:1a:4a:5e:a0:b3:0f:d4:
                    2f:b1:76:10:62:99:85:d6:e7:5e:65:a3:8d:30:f3:
                    8f:c0:5f:54:d8:7e:c4:74:96:38:dd:3b:24:c8:9b:
                    ae:2b:74:55:25:e5:53:68:ba:1f:f5:b5:2c:6a:79:
                    b2:e5:a4:60:a5:29:d3:5b:9d:2d:06:7f:10:ab:94:
                    21:54:64:6b:f0:94:51:c4:e6:0c:6e:63:49:f8:c4:
                    1f:2f:32:34:1f:99:ab:ec:f3:80:f1:d7:f9:21:84:
                    b1:db:43:24:dd:05:09:49:92:cc:36:7d:e2:0e:71:
                    09:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:19:60:B4:70:20:C1:D7:C2:55:F8:94:F6:3F:88:13:97:EA:3E:8D
            X509v3 Authority Key Identifier:
                keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:1b:74:97:01:6a:45:fc:2f:8a:16:31:2a:04:b2:a6:2a:
         d1:f9:ea:6f:eb:2b:fd:d8:75:cb:cf:35:d6:a9:1c:64:6c:02:
         94:65:2b:3f:9f:01:a7:39:92:82:64:67:01:d9:5b:0c:d8:e4:
         1f:b6:df:b2:61:db:a4:c1:89:87:83:67:61:43:85:46:68:0f:
         06:33:b0:0c:e8:14:d5:fc:44:f3:65:d7:57:17:8c:9c:62:09:
         fe:d0:f7:c6:e5:03:ab:7f:ac:ea:8a:0a:d3:d5:ec:91:31:ed:
         75:cc:ad:fb:90:59:5c:24:62:dd:6f:38:54:ba:68:61:a3:87:
         95:2d:31:17:0b:6e:13:1c:b5:9d:47:b0:6e:43:24:2d:0e:df:
         41:b1:38:83:3e:0f:05:07:fa:34:c0:9e:b1:4d:db:e2:06:6d:
         8e:5d:d1:26:c4:84:c2:58:c0:8c:ff:e5:ad:a0:f3:32:2b:e2:
         c7:99:74:11:c1:4e:9a:e1:25:10:58:d8:56:58:37:5b:39:34:
         8e:b9:7c:a0:ae:27:19:4d:f7:17:07:3c:c0:38:35:a8:ab:6a:
         93:6d:54:c4:67:0e:de:93:da:3c:62:a5:7a:23:bd:57:65:6b:
         f1:e5:a6:2e:d6:f5:ba:6b:ec:6d:80:89:e4:52:05:a7:4a:0a:
         07:f0:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:35:21 2025 by rpki-client