This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
File:                     WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json)
Hash identifier:          wc+z4fPGNaNLXrAbYUeXgG9JwZB9gmRMGRi7taZBPQ4=
Subject key identifier:   76:D9:9F:62:CD:C8:69:16:83:75:3D:47:88:C3:C7:7A:B1:62:DF:23
Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Certificate issuer:       /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
Manifest number:          73
Signing time:             Tue 23 Dec 2025 05:48:32 +0000
Manifest this update:     Tue 23 Dec 2025 05:48:32 +0000
Manifest next update:     Tue 30 Dec 2025 05:48:32 +0000
Files and hashes:         1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: NIOsZAfotXRwMo3wsy3+qPvVzpLqN3aarHLDnDuZb4w=)
                          2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
                          rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
        Validity
            Not Before: Dec 23 05:48:32 2025 GMT
            Not After : Dec 30 05:48:32 2025 GMT
        Subject: CN=694a2d30-9a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:e5:9e:39:5e:ca:9d:68:3e:37:b6:7e:e1:
                    ad:0d:67:bd:37:00:72:f1:94:56:d1:7b:e5:ae:58:
                    5b:c5:97:e4:bd:83:16:39:56:77:b8:7d:19:d1:f8:
                    f7:31:33:12:77:67:62:bf:c7:a7:90:96:4f:c7:5b:
                    0a:63:20:c1:83:8b:0c:76:6b:f6:40:2e:91:03:46:
                    c5:1c:4e:33:9c:f9:40:2d:61:4b:57:1c:04:a9:5a:
                    4e:41:d3:ab:97:82:28:2f:09:b5:ad:16:45:d0:8a:
                    82:8a:42:91:fa:79:22:6b:74:99:ef:24:11:80:bf:
                    35:80:cd:14:83:4a:1f:7e:75:c9:a0:fe:d8:79:78:
                    cd:b0:b4:8f:f7:7c:a4:a7:97:1d:c3:06:72:f9:91:
                    56:7b:fd:ee:b6:28:61:a5:99:28:b6:b6:e1:06:d7:
                    78:20:d3:f5:43:02:03:81:45:ce:33:eb:14:94:3c:
                    db:d9:2e:62:f5:46:a3:93:ba:42:5a:97:1b:fb:81:
                    f9:a3:02:4f:03:21:7e:b9:d8:0e:4d:dd:5b:e6:e5:
                    d7:d4:5c:46:36:ef:48:32:88:a9:a7:2e:13:42:68:
                    cf:69:1c:3d:70:41:39:23:c3:c1:8e:10:4a:60:34:
                    48:eb:b5:c0:81:72:c7:68:c2:56:de:a3:c0:ad:f2:
                    83:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D9:9F:62:CD:C8:69:16:83:75:3D:47:88:C3:C7:7A:B1:62:DF:23
            X509v3 Authority Key Identifier:
                keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8b:9c:b7:05:a6:3f:d5:5d:3a:17:3b:71:01:65:ab:3c:50:
         c2:37:3c:fb:5a:db:9b:26:73:44:ef:8b:34:9c:c4:d9:12:6c:
         5c:3d:1a:41:47:7c:97:00:e8:da:05:c5:b9:ac:6f:5f:a6:5d:
         22:29:8c:fc:cb:ac:5e:66:d8:0d:ff:0b:fd:33:f5:d7:ae:e2:
         ac:2b:f2:7d:62:10:c5:88:7b:40:a0:69:d7:8b:9c:80:e7:ba:
         d2:40:90:fd:46:bc:13:8b:c2:61:36:79:6f:1b:5c:fb:d0:6b:
         cd:57:fe:c5:c7:5a:3e:15:91:b7:6e:a8:da:2c:f4:27:d4:cf:
         2b:d8:16:d6:8f:95:db:8e:d2:27:5b:0b:68:be:f5:09:39:9c:
         38:50:67:a3:a0:1a:66:ec:c8:a6:2e:f8:a2:46:73:8d:df:90:
         67:1b:3b:5d:df:64:21:ed:da:8e:5a:09:1c:03:f8:65:75:dd:
         7b:6d:00:a4:03:b4:2d:8d:32:bd:c6:19:16:16:2b:fa:d2:28:
         6f:ea:22:fa:83:cd:59:05:c6:a5:5c:01:82:ae:8f:7e:43:21:
         a0:bf:53:54:a1:fa:7a:9b:f1:a4:24:c5:e6:38:f6:14:7f:94:
         92:4d:7c:22:54:21:74:35:6c:d0:57:b0:a8:6f:e7:28:2f:be:
         9a:4a:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:46 2025 by rpki-client