This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File:                     wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier:          haibZRnuT8yx9aW809jI0UMCi73K37vY5AWjDQJmmh4=
Subject key identifier:   CD:F6:A2:7E:A0:05:43:62:FB:55:C1:8C:7B:6C:EC:89:A0:32:5D:BD
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer:       /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial:       05D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number:          059F
Signing time:             Tue 02 Dec 2025 22:17:03 +0000
Manifest this update:     Tue 02 Dec 2025 22:17:03 +0000
Manifest next update:     Tue 09 Dec 2025 22:17:03 +0000
Files and hashes:         1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: 5wXiczVJB39t7Uu3ABgFlzkbKLv5m6dCxmia/94Zmx0=)
                          2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: P6wLHpQqCHGL554TbsS5XznXqZdAAm0+usW172StxkE=)
                          3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: 9XIDfJY0Nbkx5W4WrOh9skXlNedfJVNiInoNg42Y+8s=)
                          4: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: GP/xk9klfhzGUqC9zVSgLsFcoj/SNA7QNKZizL06GJY=)
                          5: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: bKJMqVVKRvZ4SvMBFN3lmqToCrhVtOKwpkwkSKOCPAY=)
                          6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: Jx8gJbXn9OtsYSW59bLdCCTB+IjRw64vOzcz4bDoiq4=)
                          7: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: 2I5Ge7KBh0e5lEpfrh8ZbOfF9fHkRChHLpkEq2RW7oE=)
                          8: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: WGM85d42jF0RvgbFfnNoubVrh59/d23ICHptXHKbWpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
                          rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 22:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
        Validity
            Not Before: Dec  2 22:17:03 2025 GMT
            Not After : Dec  9 22:17:03 2025 GMT
        Subject: CN=692f655f-a21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:19:b9:c3:52:f1:ea:b6:70:70:99:9f:69:
                    1a:9f:21:e0:d3:bb:51:3a:7d:b2:b9:07:f5:3b:02:
                    1d:2f:95:2a:ab:3a:6c:94:09:0d:16:f3:46:2e:ac:
                    50:e2:3b:93:b3:9e:ad:14:8f:f7:d7:0e:d4:51:27:
                    15:8f:54:52:ad:43:5e:5d:72:a3:d7:f2:49:36:91:
                    8c:6d:ae:ba:38:93:4a:0c:1e:c3:46:e7:ed:ed:09:
                    29:fd:df:9e:0f:d6:13:d7:24:15:8b:43:63:76:35:
                    84:d5:59:3f:0f:53:48:59:4d:50:4e:f3:7a:aa:b9:
                    d7:98:e3:29:33:70:62:e9:8d:36:f3:68:fb:8f:5a:
                    43:b5:eb:5f:2c:31:55:d8:c9:b1:43:57:db:5c:49:
                    34:b9:64:82:de:8e:bf:e9:98:2b:52:2a:bd:9c:a9:
                    33:c5:5c:25:ea:67:1e:a1:a5:6a:5a:d8:5d:42:ba:
                    d1:39:04:19:ee:71:d1:91:a7:92:06:fd:c0:e2:20:
                    74:29:36:d2:c5:8e:83:91:b4:27:25:85:0e:40:3b:
                    08:2e:07:52:25:c7:9e:f2:50:ef:31:d7:07:97:7a:
                    14:b1:eb:ad:50:92:18:b9:74:65:7a:3b:b6:09:42:
                    ea:53:7e:a2:22:ae:1d:1f:e2:ad:95:c0:92:8b:3c:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:A2:7E:A0:05:43:62:FB:55:C1:8C:7B:6C:EC:89:A0:32:5D:BD
            X509v3 Authority Key Identifier:
                keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d3:c5:0f:6d:c6:f1:c6:2e:75:26:48:28:8b:ca:aa:0d:13:
         25:7d:be:d7:9a:5f:7e:6a:61:08:7b:25:75:d2:3b:ca:fa:50:
         fb:c0:be:7b:8a:8a:07:48:6c:b6:5f:70:40:73:ac:a1:bd:c1:
         47:53:ca:ea:b2:9c:2a:bd:56:9b:64:ea:45:31:0f:ca:06:e4:
         98:3d:25:40:e1:13:bb:45:a5:77:1c:f1:54:45:27:52:bc:76:
         79:6f:f1:12:9f:bc:d9:b2:08:9d:23:61:27:95:dd:e5:21:69:
         d5:90:ca:51:24:b6:99:4a:ad:47:4c:d6:ff:f6:86:13:09:2c:
         21:ee:37:b6:a5:7b:95:53:35:a1:b0:19:b4:5b:6b:16:0c:23:
         06:a3:d9:58:62:cc:d9:d6:73:13:9e:6f:5f:45:03:4a:de:e6:
         ba:09:e3:a1:cb:02:ab:ac:cf:5d:4b:a2:d3:f9:c7:af:df:77:
         97:08:44:7a:9e:31:84:16:c4:c2:03:61:80:05:3c:c3:4f:2c:
         ba:a9:a5:35:de:c9:8e:27:5c:0b:10:e4:f7:51:df:b2:8e:f8:
         88:8f:91:e5:9c:d7:ac:98:4e:53:cd:51:a0:3a:54:1a:73:94:
         b2:14:ae:bd:a4:9e:07:21:cb:f5:26:c4:fa:12:cf:75:e5:29:
         1c:d8:f9:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0
MjQ5NjI5MUQwHhcNMjUxMjAyMjIxNzAzWhcNMjUxMjA5MjIxNzAzWjAYMRYwFAYD
VQQDEw02OTJmNjU1Zi1hMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5YZucNS8eq2cHCZn2kanyHg07tROn2yuQf1OwIdL5UqqzpslAkNFvNGLqxQ
4juTs56tFI/31w7UUScVj1RSrUNeXXKj1/JJNpGMba66OJNKDB7DRuft7Qkp/d+e
D9YT1yQVi0NjdjWE1Vk/D1NIWU1QTvN6qrnXmOMpM3Bi6Y0282j7j1pDtetfLDFV
2MmxQ1fbXEk0uWSC3o6/6ZgrUiq9nKkzxVwl6mceoaVqWthdQrrROQQZ7nHRkaeS
Bv3A4iB0KTbSxY6DkbQnJYUOQDsILgdSJcee8lDvMdcHl3oUseutUJIYuXRleju2
CULqU36iIq4dH+KtlcCSizwoBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM32on6g
BUNi+1XBjHts7ImgMl29MB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC
RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j
VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/08UPbcbxxi51Jkgoi8qqDRMlfb7Xml9+amEIeyV10jvK+lD7wL57
iooHSGy2X3BAc6yhvcFHU8rqspwqvVabZOpFMQ/KBuSYPSVA4RO7RaV3HPFURSdS
vHZ5b/ESn7zZsgidI2Enld3lIWnVkMpRJLaZSq1HTNb/9oYTCSwh7je2pXuVUzWh
sBm0W2sWDCMGo9lYYszZ1nMTnm9fRQNK3ua6CeOhywKrrM9dS6LT+cev33eXCER6
njGEFsTCA2GABTzDTyy6qaU13smOJ1wLEOT3Ud+yjviIj5HlnNesmE5TzVGgOlQa
c5SyFK69pJ4HIcv1JsT6Es915Skc2Pkc
-----END CERTIFICATE-----
Generated at Thu Dec 4 08:25:27 2025 by rpki-client