This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          hyXeKrom/kwLmQTO+1Skl34HahVem2BVrx8mMjGSQYE=
Subject key identifier:   6C:2B:67:D2:91:CD:64:BF:48:1F:38:33:76:BE:38:A7:67:16:FE:0D
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1AC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1AC2
Signing time:             Sat 20 Dec 2025 16:06:16 +0000
Manifest this update:     Sat 20 Dec 2025 16:06:16 +0000
Manifest next update:     Sat 27 Dec 2025 16:06:16 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: F9XroxC9qvjRs0/5NIkhyKKt9644pay/9MsF/uqw9PE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6850 (0x1ac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Dec 20 16:06:16 2025 GMT
            Not After : Dec 27 16:06:16 2025 GMT
        Subject: CN=6946c978-9c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:ac:d8:1d:2f:1e:7a:60:65:93:33:0e:86:
                    d2:76:a2:01:39:8b:51:ee:f0:7b:af:b7:35:f0:f6:
                    84:ea:b0:91:34:09:cc:9b:e5:bb:b4:84:7e:40:90:
                    a1:2f:47:21:54:15:05:c2:4e:a7:10:10:e9:eb:05:
                    32:6e:13:9d:1d:f4:59:d1:1e:76:8a:89:0a:28:f5:
                    72:ce:b4:ef:08:de:89:a0:cc:ad:12:28:b9:df:75:
                    55:88:b0:47:2d:45:96:c1:50:d7:3d:b5:91:bb:c5:
                    e5:8f:30:88:ae:57:ee:c2:6d:46:06:80:dc:01:d4:
                    7c:43:ac:d6:36:93:70:8a:a1:c8:91:10:50:87:9e:
                    18:88:28:6c:f8:04:68:50:d8:f9:0c:4b:e6:b6:0c:
                    e9:1c:2d:d2:d4:a9:74:a8:ce:90:80:97:71:c2:1c:
                    8d:57:cf:1b:50:92:e1:5d:aa:c3:76:79:f2:4a:24:
                    ff:39:71:53:ba:1a:1c:b6:86:a8:b9:96:73:44:c4:
                    2b:59:85:99:ae:5b:1b:27:43:58:90:45:73:51:59:
                    57:60:a6:26:09:55:de:86:08:34:0c:b6:79:11:88:
                    80:bd:af:7d:c0:39:77:79:7c:9d:fe:ab:15:69:d6:
                    ab:be:47:9c:cd:08:45:4a:7a:ac:86:b2:d2:5f:5c:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2B:67:D2:91:CD:64:BF:48:1F:38:33:76:BE:38:A7:67:16:FE:0D
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:1b:40:3e:7c:5f:de:9e:f1:70:ed:73:2f:62:d4:ed:5e:
         a8:d0:d3:80:a8:f1:be:41:0a:8b:a3:77:fe:7c:c5:3a:4d:89:
         30:e2:25:ed:b6:47:a0:bc:1b:df:11:45:b8:d4:16:3e:19:5a:
         11:9f:b2:a7:49:b6:ab:60:c3:fd:86:4b:7d:fb:27:f7:7a:d7:
         59:81:fa:52:d9:cd:ad:3f:cd:d0:76:90:71:91:5b:1d:61:63:
         54:b5:71:c5:4a:cd:6a:d7:2d:24:11:29:f9:f7:72:75:83:7a:
         45:88:ee:f8:5b:38:f5:5b:33:0b:aa:7f:da:b5:91:7b:a7:b0:
         1e:7f:26:8a:05:47:17:13:95:5c:97:5a:34:7e:11:55:63:22:
         09:97:ec:3b:26:43:c1:17:c7:7e:7b:cb:1e:47:af:28:95:eb:
         83:ae:32:e2:7b:f2:37:5a:72:60:bc:9c:a3:a1:03:46:19:55:
         c9:14:7a:ff:c3:cd:b1:d6:aa:fe:d1:07:e9:e5:af:7c:b7:c8:
         31:7f:87:fe:64:32:36:f2:7a:c0:06:0f:3b:36:e6:e4:84:32:
         55:17:cc:44:22:16:74:13:b0:c0:a7:50:4d:99:8b:e1:4b:a1:
         a7:08:cb:96:21:8f:15:7c:56:55:6e:16:df:ec:57:a5:e2:9c:
         59:d3:e0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:16:42 2025 by rpki-client