This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
File:                     wtbHmmd8l-xwBjE76RZ-DeZspFI.mft (raw, json)
Hash identifier:          u43Rs53o3WtQLiXMkZqUVK7qG45ERtxRRATVtzXbTHc=
Subject key identifier:   58:00:83:36:B4:A0:C1:D6:CE:A6:5A:DE:DA:99:67:E5:04:7F:35:66
Authority key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
Certificate issuer:       /CN=A9192F5B/serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
Manifest number:          14
Signing time:             Wed 03 Dec 2025 06:04:30 +0000
Manifest this update:     Wed 03 Dec 2025 06:04:29 +0000
Manifest next update:     Wed 10 Dec 2025 06:04:29 +0000
Files and hashes:         1: wtbHmmd8l-xwBjE76RZ-DeZspFI.crl (hash: QK95R4p05Xs+rD2PzTo9oeVQMOnWFNckDqIr6NRs6Tc=)
                          2: B3DF86F0B4B211F08EEFDF43C4F9AE02.roa (hash: 9BgHHX+tZSg5UrBQAvKkyv4nk9+XnQQVbjiVq6USYrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
        Validity
            Not Before: Dec  3 06:04:29 2025 GMT
            Not After : Dec 10 06:04:29 2025 GMT
        Subject: CN=692fd2ed-9df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:7d:a4:02:3f:b7:4a:d0:7c:36:8a:1f:fe:
                    d9:a3:82:98:54:5a:e1:b4:4e:fa:d8:6d:48:65:52:
                    9f:46:fc:00:62:af:57:b5:13:42:43:19:25:15:d9:
                    bf:6c:a4:30:f5:8a:c2:74:50:a7:eb:cc:39:a7:5e:
                    9b:53:d2:7e:10:16:3a:25:d4:ec:87:25:03:36:de:
                    39:3b:49:b2:46:c8:5c:6b:8c:f1:47:42:1d:69:a7:
                    9b:60:da:c9:4f:43:c1:43:a3:06:9c:80:20:a8:c3:
                    4e:70:e2:1d:8c:87:1d:05:76:7e:f7:99:a9:c3:94:
                    00:9f:96:f7:46:38:33:3a:ee:0b:ae:d9:44:b0:01:
                    ae:2f:8c:23:9a:aa:36:e4:65:d4:4f:07:79:c6:a4:
                    90:92:e8:3d:04:69:be:a5:f1:2d:fa:f9:68:7a:e1:
                    56:98:42:4a:7d:cc:eb:bc:63:4d:ad:1c:53:d2:14:
                    81:48:a0:44:d2:0b:71:a0:0f:48:3e:af:ea:54:ba:
                    1c:cc:23:5c:90:19:2f:a8:1b:cd:81:ad:fa:76:85:
                    db:c5:71:45:ee:db:98:a7:45:a1:8a:1e:17:b5:91:
                    03:cf:ca:c3:25:06:0e:1d:3b:19:fe:1c:6a:d3:67:
                    c6:f1:1d:25:2f:1d:ec:be:10:9e:51:85:94:45:26:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:83:36:B4:A0:C1:D6:CE:A6:5A:DE:DA:99:67:E5:04:7F:35:66
            X509v3 Authority Key Identifier:
                keyid:C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:91:ba:11:d2:e0:86:03:68:a5:49:20:af:c0:f5:8a:79:ff:
         b5:a6:ea:c6:e4:d7:b7:1f:65:5d:22:cf:f5:cf:5c:9a:82:b1:
         b0:1e:a1:4b:c1:ac:e7:8f:8f:5c:64:ed:86:b7:a7:0b:d3:b6:
         05:3c:17:83:06:88:7f:48:e6:ec:e2:0b:11:ab:0b:4e:8d:25:
         f5:b6:35:e3:3b:4d:53:10:77:81:22:3d:60:86:c2:46:e2:dd:
         5c:9c:fe:82:32:cb:1f:24:61:b2:d5:a2:2a:85:32:03:b4:f8:
         81:7b:34:47:07:51:dd:b6:3c:3a:94:f3:a1:34:bf:0e:78:0b:
         d1:30:dc:7b:63:f8:c8:74:af:0b:3d:37:6e:50:4b:19:1f:96:
         ef:24:bb:69:6a:07:00:58:bb:98:74:fc:35:44:7f:e5:60:f9:
         a8:48:15:e8:2c:2c:53:84:c2:a5:a1:92:70:2b:b2:fe:d3:f9:
         df:7f:d5:05:68:1f:d0:19:b7:b7:be:af:a5:a2:68:34:e2:f5:
         f0:60:60:0d:47:0f:d9:c4:72:7e:ea:72:42:7b:7f:d1:18:2b:
         01:48:e8:29:38:0c:83:0a:6b:bb:b4:02:c5:7b:b3:f2:52:e6:
         e6:89:47:15:0f:ef:ec:ad:94:76:ed:d6:1e:d4:e9:25:e5:67:
         53:eb:8f:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MkY1QjExMC8GA1UEBRMoQzJENkM3OUE2NzdDOTdFQzcwMDYzMTNCRTkxNjdFMERF
NjZDQTQ1MjAeFw0yNTEyMDMwNjA0MjlaFw0yNTEyMTAwNjA0MjlaMBgxFjAUBgNV
BAMTDTY5MmZkMmVkLTlkZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChIn2kAj+3StB8Noof/tmjgphUWuG0TvrYbUhlUp9G/ABir1e1E0JDGSUV2b9s
pDD1isJ0UKfrzDmnXptT0n4QFjol1OyHJQM23jk7SbJGyFxrjPFHQh1pp5tg2slP
Q8FDowacgCCow05w4h2Mhx0Fdn73manDlACflvdGODM67guu2USwAa4vjCOaqjbk
ZdRPB3nGpJCS6D0Eab6l8S36+Wh64VaYQkp9zOu8Y02tHFPSFIFIoETSC3GgD0g+
r+pUuhzMI1yQGS+oG82Brfp2hdvFcUXu25inRaGKHhe1kQPPysMlBg4dOxn+HGrT
Z8bxHSUvHey+EJ5RhZRFJgyhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWACDNrSg
wdbOplre2pln5QR/NWYwHwYDVR0jBBgwFoAUwtbHmmd8l+xwBjE76RZ+DeZspFIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0NEQUJGMTgyQjRC
MTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14d0JqRTc2UlotRGVac3BG
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd3RiSG1tZDhsLXh3QmpFNzZSWi1EZVpzcEZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
RjVCL0NEQUJGMTgyQjRCMTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14
d0JqRTc2UlotRGVac3BGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAO2RuhHS4IYDaKVJIK/A9Yp5/7Wm6sbk17cfZV0iz/XPXJqCsbAeoUvB
rOePj1xk7Ya3pwvTtgU8F4MGiH9I5uziCxGrC06NJfW2NeM7TVMQd4EiPWCGwkbi
3Vyc/oIyyx8kYbLVoiqFMgO0+IF7NEcHUd22PDqU86E0vw54C9Ew3Htj+Mh0rws9
N25QSxkflu8ku2lqBwBYu5h0/DVEf+Vg+ahIFegsLFOEwqWhknArsv7T+d9/1QVo
H9AZt7e+r6WiaDTi9fBgYA1HD9nEcn7qckJ7f9EYKwFI6Ck4DIMKa7u0AsV7s/JS
5uaJRxUP7+ytlHbt1h7U6SXlZ1Prj74=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:22 2025 by rpki-client