This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
File:                     r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json)
Hash identifier:          D+mqvZkaESqokY0ziYf7GFITqdBCc7KiBtRAw2pjsJM=
Subject key identifier:   A4:30:72:DD:59:8B:7A:6A:86:5D:0E:B9:A4:42:49:4E:F5:7F:90:06
Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
Certificate issuer:       /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Certificate serial:       0785
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
Manifest number:          0774
Signing time:             Mon 22 Dec 2025 20:54:34 +0000
Manifest this update:     Mon 22 Dec 2025 20:54:34 +0000
Manifest next update:     Mon 29 Dec 2025 20:54:34 +0000
Files and hashes:         1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: H36xIbxbMsSzRj+hiM9MG9wK6ZsYPlGvRdBnk0vNtsA=)
                          2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: czgCm9inUwQtKmsycjisqnVVnUqNecHZYtpi4MypO+s=)
                          3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: I3DJPrqQDQWNYUcfVkhfL36sgECV3rkEkAXDv9beZH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl
                          rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
        Validity
            Not Before: Dec 22 20:54:34 2025 GMT
            Not After : Dec 29 20:54:34 2025 GMT
        Subject: CN=6949b00a-2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:7d:e2:34:83:ce:3f:48:eb:05:d7:a8:c0:
                    fb:3b:5a:0b:e2:16:12:11:92:f0:6c:f4:92:04:64:
                    d5:ef:8b:e0:74:6b:09:e1:9c:e7:9d:cf:d1:00:30:
                    57:1e:85:e1:d8:99:5f:82:c7:f3:2d:36:30:a6:43:
                    46:70:74:0d:36:a5:55:ce:70:2d:53:1e:57:cf:e1:
                    2d:b9:e9:2e:78:93:e5:07:55:ba:c0:4c:de:d1:3f:
                    74:db:65:43:c4:d4:23:68:b6:1d:cb:31:cf:25:2d:
                    16:26:9c:58:bd:fb:b0:b2:4c:31:0f:55:68:4c:4e:
                    06:eb:ed:b5:87:62:62:19:29:c1:a8:ba:10:93:35:
                    26:37:69:a2:b5:88:13:5e:47:7b:1e:f4:c9:19:5f:
                    ec:6b:9d:f1:8e:22:c5:f7:b1:3a:56:5a:9c:7b:7a:
                    23:50:a2:1b:96:76:0d:6a:44:6e:ca:9f:63:50:15:
                    aa:74:7e:af:88:27:f5:28:53:79:50:ca:7a:0b:fe:
                    4c:5f:b9:6c:fc:d4:49:35:02:fa:b7:d6:4f:97:3e:
                    f7:2f:81:77:38:e9:49:c5:36:48:15:68:a6:90:7c:
                    d7:83:76:f0:86:6b:8c:fa:8b:a5:f3:33:bd:6b:97:
                    ed:02:3b:30:4d:cd:51:fb:cf:59:f0:fb:64:23:e5:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:30:72:DD:59:8B:7A:6A:86:5D:0E:B9:A4:42:49:4E:F5:7F:90:06
            X509v3 Authority Key Identifier:
                keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f8:73:b8:e8:aa:e7:57:4d:0e:3b:5e:47:7a:25:e5:99:a6:
         41:32:bf:9b:1c:f7:48:c6:6a:01:a1:5f:c8:12:81:5f:22:c7:
         2b:c1:cf:12:6a:13:8c:8c:28:66:53:15:fc:02:10:20:9e:6d:
         9c:1b:fb:a4:7a:44:70:3f:5f:b8:40:6c:e4:93:a2:f3:7f:83:
         70:11:66:a2:e8:ae:bc:07:ec:36:6a:db:80:2f:c6:3a:eb:44:
         7e:a1:3a:ec:4f:19:b9:88:12:4a:f4:76:e8:85:32:84:da:e5:
         f6:e7:08:05:fe:9a:88:b2:de:52:b8:96:c3:b1:92:be:2c:6e:
         e0:93:c5:3b:6c:fd:f9:07:a9:bb:39:06:7d:a8:35:94:99:42:
         08:c7:df:03:4f:89:30:b0:1b:8e:84:36:cf:f7:0b:28:1e:1d:
         5a:fb:1c:11:2a:21:2c:08:7c:4b:50:2f:94:ea:42:ca:5c:69:
         c9:65:75:a2:54:46:05:6b:f1:2f:bf:74:47:95:5e:1d:81:a9:
         58:01:69:12:32:0c:1c:7e:c7:e6:ea:30:17:e7:6f:58:1e:50:
         ce:21:72:b2:75:e8:db:1a:bc:1d:8d:09:8f:3c:ac:b1:18:f3:
         5a:9b:87:40:ee:fb:5c:ba:13:7f:50:72:2c:10:79:a8:49:59:
         50:54:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:10:09 2025 by rpki-client