This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          qcm9eJJ5RPwVdxkPdZXdhLuTzqxC4mIOPVtoFzioVYQ=
Subject key identifier:   75:44:23:8E:E0:37:AA:D0:57:9E:1A:73:0C:35:51:1C:31:20:74:9E
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          080A
Signing time:             Mon 22 Dec 2025 20:16:18 +0000
Manifest this update:     Mon 22 Dec 2025 20:16:18 +0000
Manifest next update:     Mon 29 Dec 2025 20:16:18 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: MeI0Tu2JzIbq18r8ulwLGWAxizgwwdzRkKTgrclZ8UA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Dec 22 20:16:18 2025 GMT
            Not After : Dec 29 20:16:18 2025 GMT
        Subject: CN=6949a712-eced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:4f:d2:7f:ee:7a:0c:21:f0:3e:a1:35:60:
                    9e:01:da:b9:5e:3c:de:66:e2:e3:16:07:4d:a5:11:
                    0f:6e:d5:9a:b5:d2:20:8d:5d:f4:b2:5c:c6:f6:ff:
                    7a:38:14:3c:13:04:42:11:41:64:e1:86:66:a8:c7:
                    cd:82:ca:ae:88:00:a4:6a:8e:a3:a5:6a:7f:88:d5:
                    f6:58:dd:b3:6a:60:74:eb:2b:f2:6e:fa:d8:fb:4a:
                    19:5e:d9:b1:05:05:16:b7:f4:c4:ce:a8:c1:2c:2d:
                    38:a4:dc:ee:0b:57:9b:54:32:ec:b5:fc:5a:6f:9b:
                    f7:fd:eb:ce:a2:9d:9b:f5:2c:c8:bd:a9:38:bd:f2:
                    1a:56:25:bc:e4:a2:85:d8:7a:7e:e5:7c:9b:6a:5d:
                    b2:ce:70:c2:f0:36:4d:87:18:a7:0e:b9:51:1f:1c:
                    fe:9b:fd:5b:f6:ce:71:ee:3d:2c:e2:f4:b7:f2:56:
                    4a:3a:50:19:5c:a7:35:b1:24:0d:1c:be:1e:77:cd:
                    61:87:fa:c7:f7:a9:7c:37:99:6d:fe:c5:ad:5e:29:
                    d6:9c:b0:e3:25:08:47:ec:22:18:b6:0d:be:de:bf:
                    57:fb:72:7c:db:b0:3e:01:f8:85:dc:53:64:4b:f9:
                    2c:7e:87:be:a9:c3:c3:ba:48:b0:c2:54:44:4e:98:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:23:8E:E0:37:AA:D0:57:9E:1A:73:0C:35:51:1C:31:20:74:9E
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2d:78:7b:6e:f7:37:5a:c4:03:cd:cb:ca:2d:ea:35:85:fa:
         df:2b:6f:ed:95:8a:08:e0:18:89:a9:7c:d1:60:a0:09:39:48:
         28:dc:58:6d:61:d1:d4:3a:53:75:cb:8c:ab:d0:c5:6c:9c:8c:
         58:6f:5a:65:a6:ad:79:1f:ed:4c:0e:dd:be:89:31:7e:58:25:
         68:a2:91:6b:fd:24:26:08:8e:ea:c1:08:6c:ac:79:1a:70:6f:
         39:1d:dd:98:ce:21:2e:c8:1b:e6:82:11:38:58:0e:4b:1e:39:
         45:d6:0b:e2:0b:11:10:9d:fb:a2:0d:43:0d:67:cb:2f:88:c8:
         31:d1:a5:d0:2d:05:1e:26:38:8c:e4:86:c4:1e:52:23:e8:63:
         d7:f1:5e:9f:91:b9:c6:64:93:5c:7e:d9:f8:67:21:78:a6:a4:
         d8:8f:f3:a2:fe:5a:85:dd:ea:d3:cd:37:1d:ea:0b:9f:72:dd:
         e3:14:1c:a1:04:87:44:fb:39:3c:61:d8:2d:fe:4a:d0:44:c9:
         cb:7d:c8:ee:6d:d8:d6:cc:9c:38:65:f4:30:0f:00:0b:0d:03:
         29:fe:9f:ee:0f:8e:e2:81:6c:2b:1f:0f:79:27:86:24:20:09:
         9a:2b:7c:b7:68:30:f7:03:5d:81:c3:4e:84:c8:6d:d8:83:bc:
         40:f6:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:16 2025 by rpki-client