This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
File:                     WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json)
Hash identifier:          pApusM0BabD7EFdzBWANu1WJjhxgdD0Vb77K9jUIQso=
Subject key identifier:   3A:30:56:DD:79:C4:94:CB:6A:5C:1D:2A:3E:F4:55:87:21:BB:D0:D2
Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D
Certificate issuer:       /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
Certificate serial:       0352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
Manifest number:          034E
Signing time:             Fri 19 Dec 2025 00:13:52 +0000
Manifest this update:     Fri 19 Dec 2025 00:13:51 +0000
Manifest next update:     Fri 26 Dec 2025 00:13:51 +0000
Files and hashes:         1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: 8J3UICV7OpGXzJyn+k2a9PwVQ4sH/1QO12tumCD8CHQ=)
                          2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: Xrafpe77KwQvstPxSi5BewNbQ3AA268J09ld6Gi8xF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl
                          rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
        Validity
            Not Before: Dec 19 00:13:51 2025 GMT
            Not After : Dec 26 00:13:51 2025 GMT
        Subject: CN=694498c0-5c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:68:6a:0a:5c:c8:b1:21:f3:bb:fc:75:ba:
                    26:af:23:a6:3f:ec:61:89:6b:41:aa:c1:5f:3b:17:
                    93:96:2f:52:9a:a7:dc:55:8f:38:fe:ff:89:85:06:
                    5e:72:65:5c:d3:c8:9e:e2:2c:8d:69:77:f0:71:bf:
                    2a:62:80:33:f8:14:7c:ee:27:fd:68:30:8a:a3:e3:
                    54:5e:0a:6c:5f:f4:56:c3:50:c1:b0:a6:3a:e6:00:
                    09:9e:1d:9c:4c:6e:07:b7:31:c5:9a:70:90:92:87:
                    f2:aa:5f:80:a4:65:16:47:4d:b8:14:0a:df:ef:ff:
                    3c:82:29:69:da:fe:55:d8:d5:66:fc:6d:c2:9e:6c:
                    d9:52:39:e4:af:6f:0f:ba:bf:08:71:c8:b5:f5:ef:
                    5c:3d:de:4f:16:93:51:6b:9c:2f:55:86:42:90:23:
                    02:2d:60:59:b0:78:f3:e8:c8:b6:f5:81:38:c4:6b:
                    32:27:0a:b8:77:71:1e:75:24:22:a2:7a:22:cf:a9:
                    d5:33:27:a6:34:08:22:e2:c9:0b:3c:b5:4c:da:c6:
                    6a:93:b7:4e:99:82:54:e4:11:aa:10:44:38:ef:b5:
                    8e:e0:4b:4c:da:4b:f2:7c:43:24:94:8d:ef:c0:fb:
                    dc:10:f0:8c:a3:0e:93:2f:69:a4:8d:12:35:3c:85:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:30:56:DD:79:C4:94:CB:6A:5C:1D:2A:3E:F4:55:87:21:BB:D0:D2
            X509v3 Authority Key Identifier:
                keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:95:44:26:d4:c5:d5:92:f7:e6:37:96:f5:fb:49:05:20:44:
         84:24:ee:f9:c7:d2:25:72:e4:03:8f:1f:fa:1c:83:ed:28:8d:
         5a:b3:b8:b6:51:ed:5d:b3:1e:f9:57:96:9a:7b:8b:79:48:79:
         f1:16:bd:87:4e:75:83:72:e3:ca:8e:fd:58:3a:25:f7:26:c8:
         ce:61:c9:70:b2:a2:99:18:b4:25:9f:9d:04:7d:85:37:4e:41:
         ae:2d:6b:de:e9:61:9b:75:f6:6c:cb:a9:eb:7c:a0:c5:a2:eb:
         d3:ac:dd:b0:cf:73:0a:62:39:9a:cf:cc:ea:7b:fa:83:86:c8:
         2b:91:f0:01:78:8e:32:82:8c:98:98:64:00:94:36:eb:0b:43:
         cd:57:5d:09:c9:47:31:a5:1f:ad:2e:49:9f:f4:a6:4b:09:bb:
         64:7d:6a:4e:50:26:52:60:f1:e9:38:17:d3:e0:5a:35:99:5d:
         ff:ad:29:3a:63:c7:36:16:f7:09:1b:5e:6d:96:f4:8c:eb:0c:
         4f:6f:3f:c0:b5:7a:b4:be:7e:06:e5:09:6c:fe:6b:00:ce:4e:
         89:82:85:53:fc:3e:1b:d6:48:1b:64:49:74:75:30:78:45:96:
         e7:fd:b3:8d:a4:1f:30:cd:60:41:95:13:4c:0a:cf:c7:c6:7d:
         24:e0:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:45:04 2025 by rpki-client