This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
File:                     AWWp3MArwOh2h-4GcFwObJkt6TI.mft (raw, json)
Hash identifier:          KNVEszSiTEUNdE2KjogcKo3xkwQMlrOfrGjqqGlrKT4=
Subject key identifier:   A4:36:46:C0:CA:97:C7:70:A5:B0:A4:05:72:82:AD:2B:15:16:51:6F
Authority key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32
Certificate issuer:       /CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
Certificate serial:       06EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
Manifest number:          06E8
Signing time:             Thu 18 Dec 2025 21:23:59 +0000
Manifest this update:     Thu 18 Dec 2025 21:23:58 +0000
Manifest next update:     Thu 25 Dec 2025 21:23:58 +0000
Files and hashes:         1: AWWp3MArwOh2h-4GcFwObJkt6TI.crl (hash: LJz4w/cxEefIjDzTa8DPLJBiHXe/nLl7bKGLWXY93WQ=)
                          2: FC1594CE340F11F0B7C1091CC4F9AE02.roa (hash: c3OMadnDiyEPhIKJxMyXVrI66nq2d9T1QFct5alIulU=)
                          3: 206DDC4A77AF11EB8E972C66C4F9AE02.roa (hash: zqG4bc06KvBhxn6QFTh7x4mtk1td0qh6Ee0/kRUb20s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl
                          rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD544, serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
        Validity
            Not Before: Dec 18 21:23:58 2025 GMT
            Not After : Dec 25 21:23:58 2025 GMT
        Subject: CN=694470ee-51f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:f3:6b:c9:7f:4e:a6:4f:20:83:50:71:aa:
                    db:be:66:bb:05:77:44:97:3d:d0:99:56:13:ab:c4:
                    8d:8f:3c:2b:7b:3d:d6:f7:85:22:65:5b:24:07:aa:
                    2b:d4:7f:ca:39:34:33:01:d0:98:c4:45:08:b7:8a:
                    88:f4:99:e5:30:d5:34:06:dc:59:97:b0:82:69:51:
                    29:a2:f6:54:9b:64:b9:21:0c:2a:fe:99:20:b9:24:
                    58:58:54:d7:c8:31:b3:78:52:f8:c6:8e:b7:4f:2c:
                    1a:d1:45:ab:60:1e:cb:b0:69:6d:3d:2e:42:92:63:
                    96:c3:e2:5c:5e:08:2d:75:56:d7:88:c7:99:3d:1f:
                    61:d3:15:03:0e:6c:a3:65:41:be:d2:c5:e7:c1:59:
                    d0:b3:dd:36:72:24:74:35:4c:aa:51:0e:86:c3:c1:
                    6a:2a:68:75:a6:79:ed:79:dc:e9:06:6e:e5:a3:ab:
                    3f:fd:5a:50:41:99:50:05:be:17:71:1c:88:07:90:
                    d8:b8:c9:c3:d8:b3:19:ee:74:3e:cb:c7:fe:34:d9:
                    97:c7:00:90:54:a3:7e:45:86:a5:fd:3c:5c:c3:66:
                    3a:45:50:ec:1d:ec:3a:f9:07:29:52:aa:1b:80:56:
                    84:7e:6e:cd:4f:70:f2:dc:c0:89:a0:77:2d:74:38:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:36:46:C0:CA:97:C7:70:A5:B0:A4:05:72:82:AD:2B:15:16:51:6F
            X509v3 Authority Key Identifier:
                keyid:01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:91:2f:8f:9b:a2:62:d0:69:ee:e6:b2:05:5a:34:fd:15:
         30:43:d7:77:46:7a:64:aa:98:d6:ed:d3:d0:ef:29:00:89:e4:
         78:fe:a6:4f:a1:92:66:f0:38:0b:1f:ab:31:ee:7b:fd:e1:ca:
         6a:63:79:0f:56:b4:40:0b:3e:ca:ad:f7:95:28:99:4a:1e:a8:
         d1:be:be:9c:d3:f9:fc:78:f1:e3:26:70:5e:cb:dd:73:26:72:
         3c:9c:fe:41:33:9a:3d:bf:26:c6:f9:00:85:11:98:91:e1:0d:
         10:c8:5d:80:ca:17:d4:36:20:5c:12:2e:15:dd:97:a5:b8:61:
         c8:6b:28:c2:71:54:4c:17:fa:6e:ae:38:bf:5c:63:ac:49:0f:
         57:f2:f1:15:7e:82:a0:51:35:30:b8:b8:39:1d:d0:a6:3d:4b:
         e4:36:f5:33:4f:08:91:f9:f4:10:83:3b:aa:f4:66:55:bb:8b:
         7b:48:54:7e:a6:61:53:84:55:b2:45:cd:41:28:ff:e9:bc:4d:
         9f:0b:91:2b:5d:4c:f3:bb:78:fe:de:89:55:86:4d:37:89:7d:
         6c:13:6a:77:a7:de:6f:83:34:59:11:dd:a5:6c:75:37:c6:d4:
         eb:4c:a9:ea:b3:4c:44:a3:be:32:5c:97:48:61:a3:d4:6e:1e:
         ef:19:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:27:47 2025 by rpki-client