This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          YRt2RNp1wbO6vveg8uA+McK9NDTEcYfKVe7iqagf+W0=
Subject key identifier:   51:56:5E:7D:50:27:98:05:36:28:52:FE:22:89:70:A2:08:BE:78:71
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0443
Signing time:             Sat 06 Dec 2025 23:33:48 +0000
Manifest this update:     Sat 06 Dec 2025 23:33:48 +0000
Manifest next update:     Sat 13 Dec 2025 23:33:48 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: T4MhbkyV1V5l2uWTndtG6vyyHb3OCw3ddRU3FDV22i0=)
                          2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          4: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          8: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          10: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Dec  6 23:33:48 2025 GMT
            Not After : Dec 13 23:33:48 2025 GMT
        Subject: CN=6934bd5c-858a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:70:7c:ee:eb:56:64:36:91:dd:1d:bc:80:
                    57:ed:0c:59:e2:99:6b:5c:46:b6:cb:a1:2b:bf:c0:
                    b5:ca:36:df:d1:f4:d0:b4:80:19:f5:5b:a1:bd:89:
                    a9:8a:9c:f8:23:34:07:a1:23:97:12:f9:67:d7:b0:
                    b7:94:13:4d:1c:47:a8:42:79:50:bd:09:c9:14:96:
                    92:b8:7a:46:a7:eb:c0:d9:7a:fe:42:ef:63:fd:6f:
                    7d:a3:1b:12:18:a5:c8:3e:c3:2f:5b:2e:20:d5:2c:
                    ab:82:2d:e0:8f:21:13:6e:68:74:4f:ad:bb:80:6a:
                    79:cb:da:b1:fe:d8:de:c8:25:0b:2a:3e:1f:26:c3:
                    38:6d:b2:8a:09:11:43:82:15:a6:51:4b:a0:19:28:
                    d6:d1:f2:d9:4a:ca:c4:d7:d2:e1:f1:69:0f:e3:ba:
                    c6:a4:fa:60:79:00:d1:5a:2b:ac:dd:52:17:87:bf:
                    10:1c:1c:73:ed:66:fd:17:c7:a2:61:dd:01:67:14:
                    2b:e1:a8:fe:5d:b4:40:2c:f4:6e:14:dd:df:44:d3:
                    23:92:88:bc:54:85:58:2a:f0:4e:b7:36:8b:91:dd:
                    57:3c:05:ab:7c:b1:db:e0:5e:be:cd:e3:b3:07:e1:
                    16:14:82:7b:6b:89:68:1d:69:29:80:56:da:ea:5d:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:56:5E:7D:50:27:98:05:36:28:52:FE:22:89:70:A2:08:BE:78:71
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:55:c9:f9:e2:cf:01:43:3c:b3:45:64:7f:42:14:d1:29:e5:
         c5:94:5e:d0:38:fc:61:77:39:e7:09:19:aa:d5:76:0d:24:61:
         f7:d3:33:60:4c:00:e5:6b:22:a6:ae:ac:a5:df:26:d6:71:5a:
         4f:66:14:07:d6:f3:b9:ec:b7:e8:8d:4e:bb:82:38:44:68:9b:
         66:23:d1:06:e7:0b:94:4f:1f:1e:90:7d:64:57:5f:bc:3c:37:
         27:6f:f1:ce:49:cc:4c:aa:c2:6a:5a:3e:e2:0d:53:69:49:fd:
         52:06:a6:2a:4d:04:ab:5d:7a:81:1f:06:2b:42:36:5a:c9:b9:
         39:9e:0e:8f:50:4d:33:d1:b7:e3:c4:76:a4:2a:56:ae:41:9c:
         7d:8f:d5:76:46:7a:29:88:64:fc:39:09:87:99:7d:b6:c2:2e:
         f8:bc:a1:07:6e:be:44:bc:1e:e4:f4:a0:59:24:ca:d7:bf:6b:
         97:82:c7:07:81:c3:ee:74:a0:db:5a:62:09:ef:17:fb:59:79:
         20:18:1e:2e:34:c7:f5:20:6b:6d:c1:3f:ff:72:d0:61:05:2d:
         23:9f:51:f5:b3:bd:e8:e0:3e:6b:41:1c:a8:17:46:77:cf:58:
         49:39:60:b3:99:d8:80:09:7f:7f:e6:ce:35:07:b9:ef:45:64:
         d2:55:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 13:55:06 2025 by rpki-client