This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
File:                     wpWXslitZgzgunl1gwnrjFeVlDU.mft (raw, json)
Hash identifier:          UP2DktzMDR985Ebr28pt1nygwGSHu25Vb2dKXz3xKCU=
Subject key identifier:   F1:09:D2:E8:6D:A4:09:D8:93:9D:4E:F9:80:A9:81:C0:19:BA:6E:EF
Authority key identifier: C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
Certificate issuer:       /CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
Manifest number:          FB
Signing time:             Tue 23 Dec 2025 04:09:24 +0000
Manifest this update:     Tue 23 Dec 2025 04:09:24 +0000
Manifest next update:     Tue 30 Dec 2025 04:09:24 +0000
Files and hashes:         1: wpWXslitZgzgunl1gwnrjFeVlDU.crl (hash: TZ2lbueQcgskX3EqgmTfv0EIn/O8sre2C+YtbZniZmM=)
                          2: B28CA9F85F3711EFA108CA0CC4F9AE02.roa (hash: hNKZg5U6CuduqjU9m9FE6idsp6kIvYIqECKnhkzHT9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED, serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
        Validity
            Not Before: Dec 23 04:09:24 2025 GMT
            Not After : Dec 30 04:09:24 2025 GMT
        Subject: CN=694a15f4-07cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:8f:75:b2:48:95:c5:e1:6f:b5:c7:92:58:
                    95:8a:2c:b4:28:fd:c5:42:86:5c:61:16:ba:e2:3b:
                    91:14:3f:7f:58:8e:7b:b6:17:67:fa:41:d0:e2:4c:
                    7b:d9:6d:fa:e6:03:15:5b:08:7c:ea:01:82:0a:76:
                    3d:f4:e9:d0:fe:9f:53:7c:49:c0:56:d5:38:85:ff:
                    d6:60:e5:30:4e:30:c1:04:01:69:b8:ba:5a:18:3d:
                    2c:d9:12:91:6a:62:5c:88:23:52:b8:a4:4f:a3:f7:
                    78:73:1f:0e:60:77:38:09:c9:c6:c7:14:fd:28:72:
                    f7:31:68:73:cc:95:21:fb:52:eb:5d:8c:24:5e:d6:
                    71:fa:3d:ed:52:63:b0:7c:d4:bc:97:80:07:7b:2b:
                    74:f2:76:ab:2f:de:02:30:ea:a3:35:9f:b0:ee:24:
                    f4:1a:87:79:3c:85:10:4d:ed:b7:a6:e5:ec:d3:e9:
                    79:86:74:11:ef:6c:72:22:81:4b:6b:41:de:88:de:
                    37:ad:24:b2:42:b1:7e:9f:92:e8:b5:61:34:3b:5a:
                    1f:18:4a:35:82:7d:32:7f:e3:a1:60:92:22:dd:af:
                    e3:d4:bc:b9:34:9b:b6:5e:de:aa:0c:56:60:f6:4c:
                    f0:7e:35:ae:d0:19:d3:32:1c:6d:71:69:20:29:4e:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:D2:E8:6D:A4:09:D8:93:9D:4E:F9:80:A9:81:C0:19:BA:6E:EF
            X509v3 Authority Key Identifier:
                keyid:C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:98:4e:3b:03:a0:38:24:98:6f:9b:a5:9b:18:03:80:31:f8:
         f7:41:16:9d:a4:f2:c7:a6:c7:8e:5c:5e:fc:66:8b:95:75:ea:
         6c:28:ff:54:0f:3c:a4:ac:2f:4e:23:87:9c:fa:20:b0:26:f0:
         e5:e8:de:8c:07:52:94:2a:38:33:d4:c9:d9:95:3d:5f:08:40:
         9f:37:9d:82:2b:c7:89:93:11:9d:9f:2d:13:e1:17:c2:8d:51:
         77:28:5c:bc:56:9f:01:0a:b0:ab:8f:37:b2:a6:0d:3b:73:e4:
         70:5c:42:d2:0a:bf:b9:9a:0b:b0:1e:87:2b:50:25:be:6b:15:
         39:7c:8d:6c:83:6f:a7:0c:79:48:ba:c1:38:e1:8b:02:46:c4:
         f0:8a:be:d6:ac:a5:9b:29:65:d0:18:57:8c:bf:6b:81:ad:50:
         4d:6f:bd:98:03:22:f1:e9:7d:16:14:29:b2:ee:7b:1e:87:72:
         59:4c:f2:1c:30:88:c3:0d:39:e8:c7:21:55:72:a5:3e:6d:c4:
         d5:78:8b:ab:f9:ad:45:bf:df:b3:87:39:ec:a4:94:ea:38:ba:
         8c:69:d3:5a:7a:6d:9c:5e:60:7d:fc:6a:3f:0e:e4:c7:1a:48:
         6f:41:8b:27:ff:ff:69:a0:88:45:d9:30:cc:a4:e2:e0:db:23:
         86:de:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:34 2025 by rpki-client