This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
File:                     wWHphZYf2VfmZ-8ujKp3N_qShdE.mft (raw, json)
Hash identifier:          uAfszmyA3wdx5YPOOiEPFFEi918CFz5MSDYCeNUsTF4=
Subject key identifier:   6E:44:F7:FE:C4:A6:3A:9A:1B:ED:F1:19:7E:A6:E7:1A:48:20:D6:19
Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1
Certificate issuer:       /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
Manifest number:          01E6
Signing time:             Sun 07 Dec 2025 01:10:30 +0000
Manifest this update:     Sun 07 Dec 2025 01:10:29 +0000
Manifest next update:     Sun 14 Dec 2025 01:10:29 +0000
Files and hashes:         1: wWHphZYf2VfmZ-8ujKp3N_qShdE.crl (hash: oE6MhFpR4Xf1wmL1Zx44Lm7qFybJZzo3DFuwZIsnE8Q=)
                          2: 67DC0600EFF411EDB617DD7DC4F9AE02.roa (hash: Fko8PWLoyHkZtvlNQPn6FoGA+FoZdHy9TjnA+TQBUwA=)
                          3: AB6EF82E29BC11F09DD00E61C4F9AE02.roa (hash: j7aKpSf4tFkKK1Xxf4Mk1DZk8uc117owGNvyI58uXRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl
                          rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E323, serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
        Validity
            Not Before: Dec  7 01:10:29 2025 GMT
            Not After : Dec 14 01:10:29 2025 GMT
        Subject: CN=6934d406-7243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:fd:98:99:f1:88:8d:c8:5c:b4:5b:59:87:
                    f4:28:8e:73:0b:e7:af:77:59:2f:f4:6c:2a:36:18:
                    82:b4:7a:eb:ba:8b:7f:10:ac:2e:8a:e9:a2:8e:a3:
                    a2:82:0b:b2:0f:a2:a0:82:16:07:10:06:4d:c1:04:
                    66:19:7e:15:a5:54:88:b5:38:b8:20:47:0e:b0:c4:
                    e3:b8:07:98:bf:21:c7:ce:25:d4:6f:bd:99:4d:88:
                    9b:6f:73:cd:eb:97:54:80:72:f1:d9:29:44:85:d2:
                    c2:21:61:56:3b:ef:05:44:21:83:75:3e:78:70:d6:
                    be:1d:e1:49:c9:1d:31:c8:7f:68:6c:1e:dd:4a:b8:
                    8b:f1:15:6b:c4:fb:06:bb:6a:e6:79:e0:19:04:9b:
                    af:f8:5e:8b:25:9f:43:c0:ea:c7:d9:1d:bb:0a:dc:
                    3f:03:5d:87:97:b3:73:1f:40:8a:d5:c5:b9:97:ee:
                    04:3b:96:00:59:79:37:8d:b7:63:22:9c:4d:13:63:
                    86:22:ec:25:fe:91:96:44:e0:45:42:f2:21:dd:7a:
                    e1:4f:69:77:4c:42:3b:3f:22:df:bb:06:3f:a7:5a:
                    00:62:5e:74:ed:70:d8:62:24:09:a5:dc:01:96:66:
                    3d:83:3c:92:93:a8:84:86:37:1c:ce:59:e9:68:27:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:F7:FE:C4:A6:3A:9A:1B:ED:F1:19:7E:A6:E7:1A:48:20:D6:19
            X509v3 Authority Key Identifier:
                keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:72:7f:92:40:22:44:53:0d:1b:ee:39:19:3a:9a:7b:d7:fa:
         63:b5:1e:86:74:6c:3e:18:72:04:e7:98:f8:16:9c:e2:16:96:
         24:c1:78:c5:55:ab:29:20:61:15:ef:f0:5a:57:36:fe:9f:da:
         31:45:1f:55:c0:ed:52:64:a8:22:52:6c:75:31:1f:24:ab:92:
         63:0e:81:2a:04:89:c2:bf:5e:83:2a:0d:24:3f:15:d0:76:10:
         04:26:88:60:b9:b7:b4:35:42:5a:98:76:80:60:8b:83:f6:6b:
         9d:a4:2d:66:d7:1a:68:06:87:99:ba:10:23:8b:9a:ff:fa:22:
         5d:40:40:96:b9:27:1f:68:7c:e5:20:a2:a7:f5:e7:75:9e:2e:
         67:ff:b5:2f:63:20:ae:a8:7f:47:18:86:80:87:6f:f8:88:99:
         eb:15:24:01:e7:32:6b:2e:de:5d:4b:f7:bb:07:83:10:67:7f:
         57:9f:b4:d2:25:ea:7b:af:a7:ab:2d:1f:a3:2d:b1:20:eb:e1:
         e6:59:c7:56:4e:f0:1f:ad:7b:22:a5:4a:01:c1:40:d4:e2:37:
         73:6e:92:9f:41:0f:e8:ea:86:0a:5f:0c:f2:76:e3:6d:3c:a0:
         c4:4b:c2:e2:8f:45:29:f3:5d:f6:e3:9a:9a:66:15:20:24:91:
         14:55:d8:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUzMjMxMTAvBgNVBAUTKEMxNjFFOTg1OTYxRkQ5NTdFNjY3RUYyRThDQUE3NzM3
RkE5Mjg1RDEwHhcNMjUxMjA3MDExMDI5WhcNMjUxMjE0MDExMDI5WjAYMRYwFAYD
VQQDEw02OTM0ZDQwNi03MjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtL9mJnxiI3IXLRbWYf0KI5zC+evd1kv9GwqNhiCtHrruot/EKwuiumijqOi
gguyD6KgghYHEAZNwQRmGX4VpVSItTi4IEcOsMTjuAeYvyHHziXUb72ZTYibb3PN
65dUgHLx2SlEhdLCIWFWO+8FRCGDdT54cNa+HeFJyR0xyH9obB7dSriL8RVrxPsG
u2rmeeAZBJuv+F6LJZ9DwOrH2R27Ctw/A12Hl7NzH0CK1cW5l+4EO5YAWXk3jbdj
IpxNE2OGIuwl/pGWROBFQvIh3XrhT2l3TEI7PyLfuwY/p1oAYl507XDYYiQJpdwB
lmY9gzySk6iEhjcczlnpaCcmxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5E9/7E
pjqaG+3xGX6m5xpIINYZMB8GA1UdIwQYMBaAFMFh6YWWH9lX5mfvLoyqdzf6koXR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTMyMy9FN0ZDMkYxRUVG
RUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJWZm1aLTh1aktwM05fcVNo
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dXSHBoWllmMlZmbVotOHVqS3AzTl9xU2hkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTMyMy9FN0ZDMkYxRUVGRUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJW
Zm1aLTh1aktwM05fcVNoZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADcn+SQCJEUw0b7jkZOpp71/pjtR6GdGw+GHIE55j4FpziFpYkwXjF
VaspIGEV7/BaVzb+n9oxRR9VwO1SZKgiUmx1MR8kq5JjDoEqBInCv16DKg0kPxXQ
dhAEJohgube0NUJamHaAYIuD9mudpC1m1xpoBoeZuhAji5r/+iJdQECWuScfaHzl
IKKn9ed1ni5n/7UvYyCuqH9HGIaAh2/4iJnrFSQB5zJrLt5dS/e7B4MQZ39Xn7TS
Jep7r6erLR+jLbEg6+HmWcdWTvAfrXsipUoBwUDU4jdzbpKfQQ/o6oYKXwzyduNt
PKDES8Lij0Up813245qaZhUgJJEUVdjr
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:23:31 2025 by rpki-client