This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
File:                     WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json)
Hash identifier:          z7psn3F5cwTyvBbTr26zoAdn2Qyla2z5aeUC9v6tMVc=
Subject key identifier:   60:BF:63:C2:C8:52:A2:D7:D0:47:CC:C9:00:BA:3B:BA:5A:DE:40:9B
Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
Certificate issuer:       /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
Certificate serial:       0755
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
Manifest number:          074D
Signing time:             Mon 22 Dec 2025 20:57:46 +0000
Manifest this update:     Mon 22 Dec 2025 20:57:45 +0000
Manifest next update:     Mon 29 Dec 2025 20:57:45 +0000
Files and hashes:         1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: zeVLgOUA019TgJbyXLf0M+pWhXKl5/5hcDFivWD3AZ0=)
                          2: ACD87DA66C4811EBB9A7CF73C4F9AE02.roa (hash: 4SDVk60SWQl2vTJ1K6rzs+mQCqAItGWRRGu4kfUeRwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl
                          rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
        Validity
            Not Before: Dec 22 20:57:45 2025 GMT
            Not After : Dec 29 20:57:45 2025 GMT
        Subject: CN=6949b0ca-a786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:2b:24:58:08:01:0a:d1:a9:28:41:9f:c9:
                    e2:f9:9e:fe:e4:0e:12:e4:3c:25:87:40:f6:20:e9:
                    bd:54:95:36:54:02:81:70:41:c2:87:0a:8d:95:cd:
                    92:c2:b6:7f:67:a9:8c:8f:94:6f:47:67:69:6e:d1:
                    b7:47:9f:e8:5d:88:26:1a:1a:70:12:0b:70:db:bd:
                    ae:fa:15:bf:d4:02:37:89:1a:54:ed:10:f5:a5:df:
                    a6:4a:a5:ad:7d:91:55:36:d2:f2:74:3a:03:ea:d3:
                    f0:e7:0c:20:70:98:44:07:49:dd:89:ee:2e:52:7a:
                    a3:6d:6d:9f:d0:9e:1d:0c:1b:29:d8:df:3e:ac:db:
                    b3:01:f9:83:07:98:6d:97:c6:be:25:73:d5:93:e7:
                    05:48:85:af:4e:ad:d1:23:6c:b4:59:09:8b:26:c3:
                    6f:28:09:41:e5:f1:e0:c7:93:e8:32:a6:8b:cf:71:
                    dc:45:88:3e:20:65:e3:3e:25:3d:6a:db:5c:5e:c3:
                    c3:d7:9d:d1:7e:ff:fe:86:f3:50:66:4e:f6:47:0b:
                    6a:3e:80:57:e7:27:19:37:43:7d:30:65:bf:eb:83:
                    75:78:44:6e:6a:09:0a:9b:f6:e1:10:c8:36:f8:b0:
                    93:c9:1f:97:76:04:ec:cd:82:cc:a3:a7:14:0c:a1:
                    ab:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BF:63:C2:C8:52:A2:D7:D0:47:CC:C9:00:BA:3B:BA:5A:DE:40:9B
            X509v3 Authority Key Identifier:
                keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:78:6e:dc:89:dc:11:ee:14:2b:11:2f:61:e8:3b:c2:9e:1c:
         5e:84:07:85:2c:04:bc:b4:a5:50:87:c6:ed:96:f8:c8:ef:d0:
         16:79:7d:86:f4:b1:ca:83:5a:8f:b1:77:8b:9c:00:0e:79:b0:
         d3:e8:60:1a:39:86:eb:ac:ea:af:bf:c2:3d:7b:3c:bc:00:bb:
         8a:2b:ca:f1:de:7b:3f:80:e1:fe:72:e1:dd:0a:3b:68:a1:54:
         a8:45:92:5c:53:28:bd:7e:8e:57:9c:ab:4a:0c:11:81:3b:d3:
         cd:8a:97:d1:7a:15:39:79:e5:2f:38:70:66:93:36:f1:39:7e:
         0e:3c:e0:ec:0f:de:3c:9c:20:e6:29:dd:b1:ef:52:08:41:8a:
         57:d9:f6:6d:2b:5e:90:ea:c9:09:64:5a:f4:7d:1a:b0:c4:6b:
         5d:71:a4:ce:10:7a:f1:8e:57:c0:09:43:3b:a7:a2:19:cb:84:
         8b:ff:7e:74:ea:fb:9f:2b:18:d3:b0:57:9c:72:24:f7:e5:17:
         b8:be:f4:e3:98:2d:a4:93:d9:7c:19:65:cb:e9:82:2c:39:34:
         c4:a5:54:55:91:a5:df:be:9e:3d:ba:d9:f9:5f:f9:20:49:cc:
         13:6c:58:00:4e:68:0f:3c:9a:f3:6a:db:a0:27:71:33:63:33:
         a7:af:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:32:21 2025 by rpki-client