This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
File:                     wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json)
Hash identifier:          xdMKbClJ3JyaCwWi/rJNa/uR5iZwLJBIcBChnEJH/j4=
Subject key identifier:   95:35:B6:80:11:4E:10:B3:02:18:12:12:BC:88:BD:55:B8:C2:D8:CA
Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
Certificate issuer:       /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
Manifest number:          014F
Signing time:             Tue 23 Dec 2025 03:13:18 +0000
Manifest this update:     Tue 23 Dec 2025 03:13:18 +0000
Manifest next update:     Tue 30 Dec 2025 03:13:18 +0000
Files and hashes:         1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: IVGhEq/slaPI5xwrwsHFD1Svs41+kuEVwAPrQUrsYUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
                          rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
        Validity
            Not Before: Dec 23 03:13:18 2025 GMT
            Not After : Dec 30 03:13:18 2025 GMT
        Subject: CN=694a08ce-d425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:17:4e:d1:14:e0:b4:10:4f:2e:78:d5:db:
                    d2:5e:73:96:04:54:57:17:a2:29:4a:ea:1c:f6:77:
                    9d:37:03:14:83:35:fe:50:fe:b0:b1:65:13:86:34:
                    08:e7:4a:cf:3e:d0:e9:ba:1c:ad:7b:61:f5:ee:25:
                    65:8f:94:19:45:b2:6b:92:c4:2f:f0:f1:2d:e1:d9:
                    78:3c:80:1d:d4:91:82:97:9c:ec:e3:f0:49:d8:30:
                    4b:fd:82:0c:d5:7f:9d:3d:f3:86:2a:e2:6a:76:1e:
                    99:eb:6c:65:82:0d:2c:7f:84:31:bc:94:5e:0e:0b:
                    04:a7:e1:33:cc:8f:14:90:da:4d:50:5d:6c:a0:cb:
                    bc:74:1f:57:85:77:96:07:08:b6:fb:33:78:4b:87:
                    9e:ff:e6:6a:f6:31:d0:69:b5:3d:bc:29:0b:10:dd:
                    f7:62:f3:40:0f:13:fe:f9:1c:38:a8:90:5b:9d:a2:
                    a7:1f:6b:82:24:9b:22:5d:91:e5:ed:d4:10:e8:e8:
                    9b:94:85:43:56:19:46:93:2d:f0:8a:9a:ee:33:6f:
                    8d:8d:50:d6:65:23:ff:89:7b:6b:fe:bc:a3:99:52:
                    6b:c2:09:fe:4f:6c:af:2d:eb:ef:ec:5f:c9:9a:98:
                    66:16:0e:54:0c:46:ae:ca:a8:6e:2a:4b:ed:35:a6:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:B6:80:11:4E:10:B3:02:18:12:12:BC:88:BD:55:B8:C2:D8:CA
            X509v3 Authority Key Identifier:
                keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:d8:eb:48:09:6a:7b:92:a2:43:58:f6:83:f8:0b:42:52:
         1a:50:97:89:c8:10:ac:bd:16:61:8f:5e:af:c5:e8:9d:78:d3:
         80:ab:28:b0:c8:9c:a7:1b:f4:34:b4:13:63:91:3c:35:6a:39:
         94:e9:4b:86:76:a2:3b:1a:5c:be:b8:11:bd:7c:88:03:f6:92:
         3c:a7:42:7b:de:2c:38:d6:7a:04:50:94:e7:bb:25:96:65:bc:
         6c:90:f7:ba:78:29:37:bc:d0:3f:45:f4:a4:28:29:76:74:31:
         12:47:ad:9b:44:b8:68:d7:ea:5d:0d:bd:ea:6f:85:e3:6b:79:
         42:c1:2c:e6:11:40:56:11:65:83:8a:e7:43:b4:08:ee:da:09:
         de:2e:32:47:46:a2:3e:36:de:98:c8:8e:1d:9b:3c:b9:3c:0d:
         4e:5c:2d:0a:d4:d0:d4:d1:db:05:b1:87:00:90:a7:b4:3a:8c:
         20:6b:4e:8c:e9:c2:16:9d:b2:0e:47:88:5b:c3:d3:2a:b1:90:
         4f:0c:dd:bd:14:db:d1:dd:f5:0d:29:bd:12:c1:70:c3:ad:04:
         af:3c:6a:07:eb:6a:bd:4a:38:84:85:88:1e:08:51:74:53:36:
         cc:df:f3:f1:e2:20:0b:01:6a:ef:97:d8:51:be:98:da:0b:09:
         64:20:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:15 2025 by rpki-client