This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          TfbekNqtYK2h9fuA47wTeZSWhydaad6gb56aQDC6nss=
Subject key identifier:   B6:0E:96:F1:60:F3:6B:A3:B3:99:CE:33:92:EF:46:78:77:89:52:2D
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0441
Signing time:             Tue 02 Dec 2025 23:39:48 +0000
Manifest this update:     Tue 02 Dec 2025 23:39:47 +0000
Manifest next update:     Tue 09 Dec 2025 23:39:47 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: GyZPnoTezl7Xno01iPeMW2GW8p8hWQrMprzPgz4Lkqg=)
                          2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          4: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          8: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          10: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 23:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Dec  2 23:39:47 2025 GMT
            Not After : Dec  9 23:39:47 2025 GMT
        Subject: CN=692f78c3-5a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:f4:23:60:e8:69:02:02:46:c0:59:ae:e1:
                    8c:7b:e3:02:0a:d6:01:76:85:09:74:64:ea:1f:dc:
                    15:2b:47:70:df:8c:74:a5:ad:c7:4f:70:8f:fb:a8:
                    ec:87:3e:2c:84:0c:3d:02:12:7e:a8:40:d9:b6:b1:
                    8a:ee:be:3c:8f:22:87:fd:4d:f5:1b:43:7f:1e:be:
                    12:cc:a2:01:9e:95:e9:8c:2f:89:10:69:ab:ae:ca:
                    87:72:28:07:5b:44:74:de:81:9f:20:78:4d:14:8c:
                    e9:c4:f3:26:6e:e4:f3:fb:25:89:17:a6:ee:63:49:
                    c6:27:d1:48:7b:89:7b:52:ac:d6:4e:16:3e:23:e2:
                    fe:65:34:cc:ac:3a:f0:b1:73:b2:49:9d:52:7c:74:
                    00:18:40:4e:4f:48:d1:08:2e:75:66:7f:87:05:73:
                    60:c3:d7:c5:55:21:ca:eb:2d:3c:19:a7:f8:f2:d8:
                    25:24:b7:90:6c:58:c0:b4:a3:0d:ad:ca:90:a7:21:
                    91:bb:0a:c2:82:19:4b:41:c1:cc:d0:28:8f:4b:0d:
                    3a:0b:39:a0:5e:a6:40:f9:b1:75:20:65:a0:e2:aa:
                    c8:1d:48:5f:78:eb:8e:42:4c:ae:9b:ee:73:c0:5c:
                    f9:c7:90:fe:69:48:a4:f2:04:9a:f7:cd:be:e0:22:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0E:96:F1:60:F3:6B:A3:B3:99:CE:33:92:EF:46:78:77:89:52:2D
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b8:e2:00:0b:22:5d:63:54:ed:8f:65:1d:db:d1:3d:a6:d2:
         dd:3d:c4:14:84:2a:2c:20:a5:ea:49:0e:7b:2d:81:1c:ff:ca:
         d4:a8:71:05:1b:e7:18:0b:8f:3d:b4:71:80:33:03:02:ec:7f:
         2a:9b:86:35:b5:9c:96:80:27:e4:69:ae:23:4d:b1:c3:7c:3f:
         06:0f:ab:8c:8e:ea:29:d9:4b:09:38:a9:b7:67:0b:31:a3:98:
         b8:73:6f:97:24:55:0b:ec:8d:be:75:36:8f:0e:cc:01:46:cf:
         d7:be:6a:c5:44:1f:7a:01:3f:77:e4:6c:30:eb:77:19:76:64:
         5b:d1:19:f7:f5:89:04:44:cd:49:2f:0e:a8:83:a5:7c:fa:b9:
         1a:8c:dd:34:fb:cf:c3:2b:57:47:c0:79:79:a0:73:42:6e:e3:
         83:5c:71:51:33:46:51:a1:05:24:42:7b:6b:51:82:06:5e:9c:
         54:bd:33:23:70:5b:d1:db:78:cf:e3:ec:ee:e5:23:a7:95:ab:
         b3:ed:0c:9f:54:57:c4:cd:1d:fb:10:7c:f4:d8:24:07:f2:74:
         3a:ce:94:b3:f8:ac:3c:e3:b0:f7:a8:70:63:2e:f7:18:ab:eb:
         19:fc:e8:86:52:77:44:ec:6f:d6:3a:58:e1:d1:2d:de:68:86:
         85:92:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 12:57:05 2025 by rpki-client