This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
File:                     wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft (raw, json)
Hash identifier:          AglvIwGPw72Ufumcvj11svtl4jj4zVlvhWleUQbcd8o=
Subject key identifier:   DC:09:AA:C1:4B:B6:98:7C:F8:5C:55:9F:CC:D1:C6:3E:7E:33:4D:AA
Authority key identifier: C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1
Certificate issuer:       /CN=A9134309/serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
Manifest number:          69
Signing time:             Tue 23 Dec 2025 05:51:43 +0000
Manifest this update:     Tue 23 Dec 2025 05:51:42 +0000
Manifest next update:     Tue 30 Dec 2025 05:51:42 +0000
Files and hashes:         1: wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl (hash: WfGeRbV53MAQQaXNsgaBtUijtruxkOMUIIMNdrycsdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
        Validity
            Not Before: Dec 23 05:51:42 2025 GMT
            Not After : Dec 30 05:51:42 2025 GMT
        Subject: CN=694a2def-7db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:66:82:20:b1:73:b7:5c:ed:e9:1f:34:dd:
                    e3:b4:a0:64:59:62:3f:ea:58:9d:d4:55:4c:f6:c6:
                    3e:93:f2:d4:70:f3:46:b9:dd:d7:82:93:af:ff:08:
                    94:25:cc:35:22:56:ca:c4:40:cf:81:bd:b9:28:63:
                    c5:43:61:c1:d8:07:52:be:08:1d:ce:9c:3d:2a:01:
                    f6:dc:fa:75:fd:88:bb:aa:ed:a8:88:48:55:dc:9c:
                    23:a7:b9:01:5e:f9:0f:e9:ea:6b:b5:bb:dc:87:36:
                    e6:2a:51:a0:14:04:73:21:b7:ba:60:07:ed:46:d5:
                    0f:30:92:bc:28:5c:ad:ac:93:b9:71:c2:17:66:b3:
                    95:a8:6e:e6:0f:e2:cc:d7:e4:85:5b:42:93:bb:0d:
                    de:c9:9f:32:44:56:a4:c0:1b:24:05:01:a2:14:95:
                    ed:ff:ce:82:92:1f:d2:15:14:71:bc:8f:99:f1:12:
                    b1:b2:d3:c5:a7:63:08:79:b4:17:19:66:0a:93:87:
                    50:e0:e8:71:5f:41:ad:00:73:b0:f4:2f:92:6f:ad:
                    53:05:92:5e:d5:2c:26:16:71:92:f6:34:1d:b0:d4:
                    07:c5:7d:a8:2c:f3:06:1a:68:24:ea:1e:af:73:63:
                    98:16:ae:b6:ce:d5:aa:80:77:b9:2f:d4:79:b1:b9:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:AA:C1:4B:B6:98:7C:F8:5C:55:9F:CC:D1:C6:3E:7E:33:4D:AA
            X509v3 Authority Key Identifier:
                keyid:C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:43:b9:32:47:fe:fa:c5:b1:33:b8:aa:83:99:ef:1e:6d:
         9b:b5:bd:8c:03:fd:b3:ad:d6:42:36:c4:5a:b8:36:81:11:51:
         44:de:6b:9f:31:44:fa:62:fd:04:c8:33:9d:da:a0:45:bb:bc:
         92:0d:e7:24:42:1c:d9:b6:22:62:86:5d:99:a0:7f:c5:98:69:
         f3:ac:e1:94:51:b7:e2:1d:ac:5a:14:68:8f:e1:33:25:e6:2d:
         80:25:7a:42:56:65:3e:97:64:e9:f6:f7:73:f1:f8:07:38:c5:
         14:ba:c6:b9:79:b5:85:c1:c8:e0:2e:72:80:54:6d:10:47:3d:
         41:2c:f3:a9:4a:c4:15:b7:1c:b4:38:aa:e4:ff:f6:8c:8e:49:
         ba:b1:d5:16:c0:5a:be:a1:23:f1:6c:77:92:99:70:44:6e:ea:
         14:46:86:cd:46:d2:c8:1f:c3:33:cb:24:45:8a:5e:c2:f8:d5:
         ab:58:b0:1f:2e:6d:e8:77:80:36:62:0d:a1:45:73:5f:f3:f7:
         6d:8c:de:43:c7:8f:12:d8:95:e8:cd:5a:73:1b:f7:54:11:ba:
         b9:cc:fb:8b:87:b2:54:98:cb:a1:f8:57:f1:05:49:63:6d:79:
         b7:f0:49:c3:53:d5:84:a6:41:07:62:34:23:2e:c9:be:9f:ac:
         22:12:13:c2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NDMwOTExMC8GA1UEBRMoQzBCNDY2RDk5OUI4MUJGOTVENkY5NUQ2QzEyQUIzQzlD
NzVCNDJEMTAeFw0yNTEyMjMwNTUxNDJaFw0yNTEyMzAwNTUxNDJaMBgxFjAUBgNV
BAMMDTY5NGEyZGVmLTdkYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHGWaCILFzt1zt6R803eO0oGRZYj/qWJ3UVUz2xj6T8tRw80a53deCk6//CJQl
zDUiVsrEQM+BvbkoY8VDYcHYB1K+CB3OnD0qAfbc+nX9iLuq7aiISFXcnCOnuQFe
+Q/p6mu1u9yHNuYqUaAUBHMht7pgB+1G1Q8wkrwoXK2sk7lxwhdms5WobuYP4szX
5IVbQpO7Dd7JnzJEVqTAGyQFAaIUle3/zoKSH9IVFHG8j5nxErGy08WnYwh5tBcZ
ZgqTh1Dg6HFfQa0Ac7D0L5JvrVMFkl7VLCYWcZL2NB2w1AfFfags8wYaaCTqHq9z
Y5gWrrbO1aqAd7kv1HmxuQyNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3AmqwUu2
mHz4XFWfzNHGPn4zTaowHwYDVR0jBBgwFoAUwLRm2Zm4G/ldb5XWwSqzycdbQtEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0RFMzYzNDVDM0VF
MzExRjBCOTM5ODQ0MkM0RjlBRTAyL3dMUm0yWm00R19sZGI1WFd3U3F6eWNkYlF0
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd0xSbTJabTRHX2xkYjVYV3dTcXp5Y2RiUXRFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0
MzA5L0RFMzYzNDVDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL3dMUm0yWm00R19s
ZGI1WFd3U3F6eWNkYlF0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJxBQ7kyR/76xbEzuKqDme8ebZu1vYwD/bOt1kI2xFq4NoERUUTea58x
RPpi/QTIM53aoEW7vJIN5yRCHNm2ImKGXZmgf8WYafOs4ZRRt+IdrFoUaI/hMyXm
LYAlekJWZT6XZOn293Px+Ac4xRS6xrl5tYXByOAucoBUbRBHPUEs86lKxBW3HLQ4
quT/9oyOSbqx1RbAWr6hI/Fsd5KZcERu6hRGhs1G0sgfwzPLJEWKXsL41atYsB8u
beh3gDZiDaFFc1/z922M3kPHjxLYlejNWnMb91QRurnM+4uHslSYy6H4V/EFSWNt
ebfwScNT1YSmQQdiNCMuyb6frCISE8I=
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:04 2025 by rpki-client