This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
File:                     Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft (raw, json)
Hash identifier:          azeu+uHZrGQ11aE+ExQ1cZ3QJe+XqmMU3tkWkgJCzDo=
Subject key identifier:   95:5D:E4:64:BB:DF:3A:5F:04:A6:50:AD:7D:78:23:2A:82:44:16:41
Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Certificate issuer:       /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Certificate serial:       038E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
Manifest number:          0386
Signing time:             Sun 16 Nov 2025 23:10:39 +0000
Manifest this update:     Sun 16 Nov 2025 23:10:39 +0000
Manifest next update:     Sun 23 Nov 2025 23:10:39 +0000
Files and hashes:         1: Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl (hash: yGrG0ku3MsTfQv9Vqi4KcqR+VDgK7t2lqYULK4qaX84=)
                          2: 1CD62088C4A211EC8FD6D313C4F9AE02.roa (hash: KamW1zC+t0AxsWxUwBVMnEzMkI75A/xxojQk/vMnrhE=)
                          3: 1C3679E8C4A211EC8FD6D313C4F9AE02.roa (hash: R45goBc9ltNNydJH/crrPm7jUsX2yEtOzi9r+yJorZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl
                          rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Nov 2025 23:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
        Validity
            Not Before: Nov 16 23:10:39 2025 GMT
            Not After : Nov 23 23:10:39 2025 GMT
        Subject: CN=691a59ef-6e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:74:53:6a:d3:fa:c7:56:95:f8:2e:d6:b0:17:
                    86:4d:c1:0d:10:2d:d5:b9:a1:41:23:1a:a2:15:7e:
                    01:4f:10:52:db:f7:bd:32:d2:6b:26:b8:a4:ac:77:
                    09:e2:e6:3a:b3:9b:4c:4e:94:2d:b4:10:da:35:62:
                    c9:d0:36:80:c5:48:0d:66:9a:71:eb:16:ea:35:0b:
                    42:43:ae:ab:c6:fb:26:6a:87:51:91:03:24:6d:25:
                    e0:21:18:f3:62:e1:61:3a:f5:fb:bf:d6:7e:66:92:
                    a5:33:d5:ca:a4:4a:4f:78:3b:34:d3:f1:79:79:ca:
                    91:ff:c6:80:7e:0c:21:90:b9:c5:99:8e:e5:94:a4:
                    61:6e:a8:cc:13:06:0b:a2:25:66:71:fa:3b:4b:17:
                    20:50:4d:20:13:59:cf:bd:36:27:53:31:be:55:fe:
                    43:89:14:3d:d5:ac:0d:90:a9:68:6f:29:33:b5:a8:
                    bb:e2:42:ec:39:da:65:08:52:2d:ba:e9:9c:3e:55:
                    95:0b:92:93:1d:60:74:c5:dd:7a:3f:30:cc:ff:63:
                    d4:db:42:6d:b8:fe:42:94:c0:88:c8:fe:de:30:9b:
                    01:14:9c:57:f0:31:33:09:cb:be:28:4c:48:fc:2b:
                    f0:b5:7d:58:f9:45:48:53:0c:5e:93:f7:2b:22:9a:
                    42:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5D:E4:64:BB:DF:3A:5F:04:A6:50:AD:7D:78:23:2A:82:44:16:41
            X509v3 Authority Key Identifier:
                keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d9:e4:0f:e3:72:97:f3:ca:d0:ca:b8:b1:eb:02:0f:35:25:
         c1:c3:6f:6b:e4:4f:d8:f2:66:65:8d:5f:90:e3:cf:b9:8b:2a:
         a7:c8:67:8a:75:80:dc:be:86:c6:66:19:b9:35:09:2d:98:6a:
         73:e1:c0:ce:57:cf:24:64:37:cd:20:af:de:09:fa:39:75:c1:
         ed:08:10:0c:b1:ae:ba:48:3e:93:ec:c8:41:52:57:89:bd:28:
         5e:5a:5a:b8:36:00:f0:e1:19:1a:b9:c0:e1:26:81:39:66:99:
         a9:7b:8e:b8:95:a3:4a:65:f4:8e:23:c7:b1:ba:5b:7d:46:a3:
         77:56:2c:14:7f:27:43:1a:e9:26:39:0e:92:32:e2:47:d8:ee:
         8d:61:c9:57:ff:b9:70:0b:b1:cd:37:98:a3:9c:5a:ca:de:6c:
         ba:35:95:13:47:28:2b:d8:23:b5:87:66:eb:25:06:3c:88:48:
         d7:b5:98:43:92:54:ce:30:48:6d:51:0c:b5:5b:8e:64:42:a6:
         9a:ed:bb:86:75:2d:5f:bb:92:5b:09:06:a0:db:7b:89:3f:b7:
         60:87:7f:63:10:35:79:e7:8d:b0:14:98:3d:cd:14:2c:8b:30:
         f3:6f:63:17:f4:9e:55:5b:51:9b:06:f8:df:5c:15:0b:45:48:
         c5:4e:d7:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA2QzIxMTAvBgNVBAUTKDVCMEJCQzg0QjVDQkQxNUMzMEQ5MDE0MjcwNjUyOENG
MTkwMTA1NjgwHhcNMjUxMTE2MjMxMDM5WhcNMjUxMTIzMjMxMDM5WjAYMRYwFAYD
VQQDEw02OTFhNTllZi02ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/3RTatP6x1aV+C7WsBeGTcENEC3VuaFBIxqiFX4BTxBS2/e9MtJrJrikrHcJ
4uY6s5tMTpQttBDaNWLJ0DaAxUgNZppx6xbqNQtCQ66rxvsmaodRkQMkbSXgIRjz
YuFhOvX7v9Z+ZpKlM9XKpEpPeDs00/F5ecqR/8aAfgwhkLnFmY7llKRhbqjMEwYL
oiVmcfo7SxcgUE0gE1nPvTYnUzG+Vf5DiRQ91awNkKlobykztai74kLsOdplCFIt
uumcPlWVC5KTHWB0xd16PzDM/2PU20JtuP5ClMCIyP7eMJsBFJxX8DEzCcu+KExI
/CvwtX1Y+UVIUwxek/crIppCHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVd5GS7
3zpfBKZQrX14IyqCRBZBMB8GA1UdIwQYMBaAFFsLvIS1y9FcMNkBQnBlKM8ZAQVo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDZDMi8xNjI0RDFEOEM0
OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBWd3cyUUZDY0dVb3p4a0JC
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d3dThoTFhMMFZ3dzJRRkNjR1VvenhrQkJXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDZDMi8xNjI0RDFEOEM0OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBW
d3cyUUZDY0dVb3p4a0JCV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZ2eQP43KX88rQyrix6wIPNSXBw29r5E/Y8mZljV+Q48+5iyqnyGeK
dYDcvobGZhm5NQktmGpz4cDOV88kZDfNIK/eCfo5dcHtCBAMsa66SD6T7MhBUleJ
vSheWlq4NgDw4RkaucDhJoE5Zpmpe464laNKZfSOI8exult9RqN3ViwUfydDGukm
OQ6SMuJH2O6NYclX/7lwC7HNN5ijnFrK3my6NZUTRygr2CO1h2brJQY8iEjXtZhD
klTOMEhtUQy1W45kQqaa7buGdS1fu5JbCQag23uJP7dgh39jEDV5542wFJg9zRQs
izDzb2MX9J5VW1GbBvjfXBULRUjFTte+
-----END CERTIFICATE-----
Generated at Tue Nov 18 12:09:08 2025 by rpki-client