This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
File:                     v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json)
Hash identifier:          BxIKwIGK+9wo2Ah6/MXQhx8RX3Ie9LTEBq2gYNH2FVw=
Subject key identifier:   BA:1D:AA:5D:A2:59:DB:8A:73:ED:77:61:61:90:0C:29:AD:A3:C2:75
Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
Certificate issuer:       /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
Manifest number:          014B
Signing time:             Fri 19 Dec 2025 03:24:50 +0000
Manifest this update:     Fri 19 Dec 2025 03:24:49 +0000
Manifest next update:     Fri 26 Dec 2025 03:24:49 +0000
Files and hashes:         1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: zM1pa2/GDFU7/QUZ9Atwoy4qSB7vYjBrznzvCPMmHf0=)
                          2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: SDPNisnSYRGvj5gVjzP5feJ+X0hwI7v9EIoicUEp2e0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
                          rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DAC0, serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
        Validity
            Not Before: Dec 19 03:24:49 2025 GMT
            Not After : Dec 26 03:24:49 2025 GMT
        Subject: CN=6944c582-872b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:81:da:4f:c6:8d:45:d2:a1:77:92:b8:b8:60:
                    05:f2:71:6b:76:b5:3d:dc:cb:e8:b7:f8:21:66:0b:
                    c9:1d:ba:66:3a:ef:8a:e6:9d:ba:7a:c3:28:a3:d8:
                    d3:de:71:ab:c9:ba:bb:95:b7:36:79:70:d9:0a:56:
                    69:e6:ec:d2:c3:92:d4:f1:2e:30:42:da:e7:ba:71:
                    17:4d:71:3a:56:99:21:f9:3b:1a:7c:58:8c:91:e6:
                    c8:13:ea:50:53:c7:09:d5:0b:92:95:97:c3:f6:d3:
                    00:4a:f0:28:83:22:4c:14:f3:5b:46:bd:c4:a2:c2:
                    f9:8e:db:d2:45:56:11:12:30:44:49:6d:4f:79:53:
                    98:d0:c1:e7:21:9b:e1:a3:ed:fb:81:37:f4:be:4d:
                    f2:a1:41:41:eb:b6:aa:57:47:fd:ba:25:43:c1:33:
                    b6:3a:93:4a:90:8e:46:0b:8b:16:10:f0:52:48:a2:
                    7a:f4:fa:b2:98:3c:cd:5f:cf:19:5c:e3:82:20:a9:
                    d2:35:e1:1d:04:8c:30:37:75:95:c3:a4:99:d8:84:
                    99:fd:d1:43:f9:26:bc:97:85:5e:26:b6:4b:8d:5f:
                    d7:36:af:55:3a:78:66:f7:af:88:88:df:81:34:fd:
                    37:b2:3a:d3:cd:ae:a2:c4:3f:a0:9f:5c:ad:24:fb:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1D:AA:5D:A2:59:DB:8A:73:ED:77:61:61:90:0C:29:AD:A3:C2:75
            X509v3 Authority Key Identifier:
                keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:32:dc:d3:5f:cd:67:13:a7:04:70:92:c5:78:93:4c:83:16:
         26:21:8a:66:3b:30:4d:f8:52:2f:a6:e0:93:fb:98:f7:82:bc:
         e1:b3:4e:ea:d4:de:b7:f4:24:48:f6:6c:d5:9a:69:c4:83:af:
         6b:8d:7c:9a:c1:4e:2a:a1:90:30:a0:70:d2:cb:3e:9f:29:ec:
         82:2b:f8:f5:bf:7a:a0:64:c0:c6:1c:ce:8f:a9:22:91:f3:88:
         23:f7:e1:ea:a7:fe:24:67:f5:12:1e:24:6e:ff:7c:a2:cf:d7:
         34:84:7b:4f:02:23:d4:9b:bd:d9:37:76:12:9c:ef:66:65:94:
         e5:37:ce:43:65:64:80:ef:7c:be:e3:f4:d4:2b:fe:e0:73:c4:
         f7:4b:db:a6:0f:00:ec:d4:29:ee:78:73:98:86:41:4d:fd:a2:
         fb:15:64:40:92:b0:63:49:5b:7a:0c:99:83:07:7e:eb:57:87:
         a6:ab:56:df:18:fc:53:39:d2:48:20:1e:9e:c8:28:a0:c8:1f:
         9f:c7:15:ea:04:55:ed:d8:18:ee:8d:e3:81:53:ab:83:43:7a:
         ff:68:24:ac:a8:c6:b5:b5:a3:b3:11:c2:db:6a:1e:14:e2:0e:
         c2:af:60:06:e1:72:57:86:fc:a9:b3:5c:ad:90:67:02:ad:6f:
         7c:c4:28:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:33:25 2025 by rpki-client