This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
File:                     wEyBplFeUCbiG-aMudUdQTmoWpI.mft (raw, json)
Hash identifier:          sS5qqe5yVBG+ItJDGaAuPGj+pHW2C5Jf/15lqghiQXw=
Subject key identifier:   5F:F8:89:B4:ED:63:E8:9D:7F:9D:B0:58:3B:CB:31:35:24:1B:51:9D
Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92
Certificate issuer:       /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
Certificate serial:       0530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
Manifest number:          0526
Signing time:             Mon 22 Dec 2025 22:39:51 +0000
Manifest this update:     Mon 22 Dec 2025 22:39:50 +0000
Manifest next update:     Mon 29 Dec 2025 22:39:50 +0000
Files and hashes:         1: wEyBplFeUCbiG-aMudUdQTmoWpI.crl (hash: ajtzDlzZ1oZl9HGchJid8iq/ddr1GI/ZvFFk9EQlWgU=)
                          2: 20B772FA7F4411F0B804E363C4F9AE02.roa (hash: GHU46pwFdHH/MxA4DwdKP3Yka/se9HwPFbcdAQRWGBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl
                          rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
        Validity
            Not Before: Dec 22 22:39:50 2025 GMT
            Not After : Dec 29 22:39:50 2025 GMT
        Subject: CN=6949c8b7-7fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:57:59:27:59:ed:cc:d2:1b:1b:f4:f1:98:
                    70:aa:cf:ed:97:25:2c:c1:c8:bb:9b:f9:c9:fa:76:
                    dd:f8:60:a7:da:cc:7c:e5:f7:8a:18:52:0c:61:75:
                    fb:b4:3a:4b:49:bf:81:04:e5:bc:97:a1:a8:fe:07:
                    25:fe:59:52:60:df:74:31:30:ef:d3:01:a1:26:29:
                    88:ab:ee:b1:c2:09:fc:b4:bd:09:16:14:bb:55:73:
                    c6:4f:55:dc:08:e6:3e:bd:f9:da:b0:9c:e9:78:ad:
                    01:09:8a:e2:fc:ba:d3:61:66:dc:16:47:2c:b4:1d:
                    37:49:78:b5:d6:5f:70:51:a2:43:74:8b:38:7f:65:
                    ef:73:84:7c:d1:a4:d9:8a:f7:d4:dd:06:3d:30:3e:
                    81:f4:0c:95:d9:e1:8a:a0:ad:06:12:31:33:4f:7a:
                    d3:a3:b3:a5:49:70:0f:a4:51:29:d5:e4:87:83:eb:
                    c7:06:51:96:71:5a:63:19:9c:79:a6:2c:70:0e:40:
                    15:58:3a:13:54:2c:6d:1a:4c:74:3f:9c:e4:88:d8:
                    16:8a:8a:8e:0a:17:08:a0:17:bb:06:ae:75:7e:ef:
                    76:c3:81:be:2a:af:56:12:35:2d:3a:10:91:fe:1e:
                    62:69:f7:77:67:38:92:58:ec:b7:95:75:11:ac:e0:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F8:89:B4:ED:63:E8:9D:7F:9D:B0:58:3B:CB:31:35:24:1B:51:9D
            X509v3 Authority Key Identifier:
                keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:7e:cb:9a:ea:57:37:17:4f:52:71:2a:f1:a1:fd:c7:42:
         47:53:92:ef:9d:2c:da:9b:c4:1d:c1:b3:31:0f:bb:24:59:b6:
         ed:dc:bf:7e:76:dd:04:7b:ef:af:11:a9:04:80:8b:60:c4:b7:
         30:f9:ea:58:d7:a0:96:52:e3:00:de:1c:6c:fc:aa:77:62:db:
         fb:dc:8a:7e:fe:15:8f:d1:81:0d:7e:42:c4:ba:04:35:ed:3a:
         cb:3b:6c:c7:30:56:a0:9c:ca:3b:f8:94:60:84:11:9a:3c:ab:
         7e:07:f6:ad:1d:c6:df:b6:09:c3:6b:77:67:64:a5:07:32:b9:
         92:be:17:6b:52:13:3f:4f:e4:30:1c:61:50:24:fe:f2:64:ec:
         c1:c7:b9:ce:0d:eb:9b:e5:1f:ce:fe:b9:21:93:d3:8c:84:62:
         86:a2:28:29:6a:3d:13:76:61:2c:29:50:f4:d9:fe:b1:0d:ea:
         50:1f:dc:c7:38:68:b3:31:5a:85:e4:73:d8:69:bc:9c:e9:d1:
         2e:13:22:4f:d1:8e:75:96:40:66:25:9a:d3:c6:05:73:04:a0:
         91:2f:ae:56:9a:69:a4:95:75:80:22:55:02:cf:42:0d:8a:46:
         67:4a:bb:a2:32:64:56:8b:c3:27:67:8a:5e:76:1e:a2:bc:4d:
         72:cc:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:00 2025 by rpki-client