This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          eA0mZOR0PLgYfwzT2p/mTom4Z2ke3TmJwyFcpiDZeZM=
Subject key identifier:   20:1C:EA:90:19:E2:4C:9C:8C:F3:96:80:3C:B3:6F:E8:CA:54:BF:9D
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1396
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          1280
Signing time:             Sat 06 Dec 2025 16:41:21 +0000
Manifest this update:     Sat 06 Dec 2025 16:41:21 +0000
Manifest next update:     Sat 13 Dec 2025 16:41:21 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: NkTe3xthRvzgZXb4RpkysjAlTeoIA2nQTCUKnl7HodU=)
                          2: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: GR7vQYmLyzxJEas0mYDVxALBB8DKhJeqrbl3u+F+zek=)
                          3: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=)
                          4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: 8rT3PqZci4f5Ml5bfePstSioC/qOql4PWazhv4sDx8U=)
                          5: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: tY9T8lU5kcHY3u57MMofX3/O0BgwKesBYrVdBe32n74=)
                          6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: ew8cW9pgjuyfp1DgnDklnBC1cWChQLDChxAz6sJgc3o=)
                          7: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6QULpY0nwICQI5KzGG+hH2ilXe6jG7YgfCERUQkDC9w=)
                          8: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: Cl2KWkJMmgS/msfjoIb/24y+W648m1pybjj0isVF+vk=)
                          9: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: qioL4f3Nv8IN5xmx7gisd0+PyYeZ++sJbxfOgfDQBd4=)
                          10: 7CB2221C91E111F09C322980C4F9AE02.roa (hash: Jm69XnxkSt8CaD8B4M7m2OfdxuyjH53yi3Y2n3LjPoQ=)
                          11: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: UbbJeh1gWwixc1KBx/TcENcb/xObt11wZD4U7s3lZJw=)
                          12: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: jaKd9YmNH2ThL3gQ5R9WUaO7/+PuHPSBitTnvOMLiws=)
                          13: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: LghbHudSYXpZvbN5rcOeOmOH0Pzs46h/rkleKElMl2o=)
                          14: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: 8NzEuEnykX7h6fS43cE+6wqCd/7p7Nr/SKrcmIr6n8w=)
                          15: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: KlRlIQIriEHzptBPZWJtv0ze/AJ1Mbh5VvKzMPz2Ls0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5014 (0x1396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Dec  6 16:41:21 2025 GMT
            Not After : Dec 13 16:41:21 2025 GMT
        Subject: CN=69345cb1-b687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:a8:75:23:b3:69:a3:63:7b:b7:a6:40:d6:
                    ae:fb:99:c2:0f:4c:7a:42:f4:d3:d5:6c:c4:57:9a:
                    92:dd:b9:e5:84:40:6c:fd:6e:b9:e1:aa:3b:3a:5f:
                    bd:dc:40:88:11:69:79:45:52:af:a8:6d:7a:91:ee:
                    ad:ab:17:15:c5:2c:ff:9b:a7:69:0f:a7:a4:f5:37:
                    ad:b7:dc:72:6f:34:8a:61:31:f3:6e:2d:1d:2d:e8:
                    12:7f:ed:62:0b:68:1e:f5:39:3e:e3:01:3c:d9:d0:
                    34:e3:04:47:4d:c4:92:25:f1:0f:6d:a7:6b:f4:4a:
                    bc:9e:68:a9:a3:68:aa:ca:26:c4:84:21:73:bb:85:
                    27:0e:91:84:a5:8e:7a:ce:68:56:72:d9:86:1a:63:
                    b3:4f:69:6b:b6:45:4c:f9:25:7d:e0:56:e5:75:bd:
                    7d:87:a2:0e:30:d4:6c:2a:a6:da:5e:6b:2c:d7:3a:
                    ed:57:1e:bf:96:ef:9f:7f:08:04:85:63:f8:a0:dc:
                    e8:c7:e2:d4:b7:5f:1e:c9:e2:cb:9f:de:dd:0b:53:
                    3f:4b:09:e9:6a:e4:f8:f7:9d:67:74:9c:09:43:11:
                    26:e0:99:c5:cc:f0:78:7f:c2:7a:70:45:d2:60:fa:
                    71:d0:88:96:7b:db:a1:f3:22:e5:18:ec:3c:17:aa:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1C:EA:90:19:E2:4C:9C:8C:F3:96:80:3C:B3:6F:E8:CA:54:BF:9D
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c9:a0:95:0f:84:c1:91:83:c8:d0:bb:a1:b2:07:87:27:de:
         d4:b5:ad:1e:c6:02:f6:b0:d2:56:06:f4:7f:41:fd:eb:54:56:
         7a:b8:e8:c1:9a:02:b4:b1:91:b2:da:a1:f8:09:c9:99:cb:52:
         73:a8:32:c3:59:5a:40:8d:ad:4b:2f:c4:4a:f8:6b:09:ac:6e:
         fd:6f:a9:f9:50:7f:1b:92:cb:3d:17:23:e8:2e:1a:38:5b:49:
         e0:97:14:56:a4:20:f8:8b:29:74:49:8d:d4:e2:d7:4e:f1:f8:
         79:e5:7b:5f:a0:fd:0a:16:8b:bb:9c:27:a5:0d:cb:10:e7:94:
         af:78:32:09:b4:0d:ec:3e:c0:0b:fa:a1:29:5c:69:8b:3e:d5:
         94:82:83:fc:2c:26:e1:e2:b4:d8:b2:01:4a:21:4e:88:70:d0:
         71:3d:c4:93:dd:02:a4:24:97:96:ef:6b:4d:d8:e2:10:5b:44:
         6b:fb:cb:0a:e2:c6:d0:80:16:43:f5:a5:72:ba:f9:ab:d3:10:
         f8:98:d2:7a:97:99:de:d4:75:bf:fb:46:78:20:11:11:5c:7b:
         6c:be:b3:dc:28:f1:9c:bd:26:3f:d4:c2:b4:31:3c:15:92:83:
         1c:48:a4:b4:a5:f7:c0:3a:df:5e:0e:e3:3b:07:6a:f6:68:c4:
         d1:84:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:00:55 2025 by rpki-client