This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft
File:                     wlVOkccHDswx5jeOpDvPrzyCE8A.mft (raw, json)
Hash identifier:          yG7wrNzr2QKzzf9MDtVwtkJnOS33nsccodoXpZJmcl4=
Subject key identifier:   EC:3B:14:37:45:9B:94:DE:9D:79:3A:D3:3D:7C:22:85:0F:85:45:02
Authority key identifier: C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0
Certificate issuer:       /CN=A9198553/serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft
Manifest number:          AF
Signing time:             Sun 21 Dec 2025 05:15:16 +0000
Manifest this update:     Sun 21 Dec 2025 05:15:16 +0000
Manifest next update:     Sun 28 Dec 2025 05:15:16 +0000
Files and hashes:         1: wlVOkccHDswx5jeOpDvPrzyCE8A.crl (hash: swSdFb+6xUUgWQuyVcJgCoWeoHtwnOJwlT0+IOEMF/8=)
                          2: 4D8A57B6D2F111EFAC77C249C4F9AE02.roa (hash: KHoPbgNVtZT0OwKjaJvVWJ02MeB3Fx2ZKzMa6yBJHMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl
                          rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 05:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198553, serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0
        Validity
            Not Before: Dec 21 05:15:16 2025 GMT
            Not After : Dec 28 05:15:16 2025 GMT
        Subject: CN=69478264-740c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:ea:9d:04:ca:d9:41:ce:24:53:ef:5e:42:
                    e1:0e:6e:61:30:6d:71:48:b7:57:63:5b:db:f1:f8:
                    0b:82:c5:56:13:01:8c:74:9f:ff:dd:31:22:4b:12:
                    54:07:a3:b4:1e:9c:21:04:16:f9:16:df:34:2a:84:
                    19:8b:8f:28:ab:6f:4d:91:85:e5:39:37:17:ef:f6:
                    35:0d:db:39:59:53:2c:47:9c:64:a0:ee:4b:05:7d:
                    1c:77:56:3f:b5:2f:70:5a:ad:f1:27:d0:7d:bd:4c:
                    d6:c2:d0:bd:98:aa:24:a5:e9:44:92:3b:6a:21:02:
                    3e:4f:cd:fb:3b:1a:eb:4c:d0:bd:cb:c9:76:c9:26:
                    e7:02:f1:56:7b:72:25:a0:17:36:a3:b5:06:f0:4e:
                    47:04:a7:8a:ba:ee:c6:5f:a7:47:5b:74:7c:02:76:
                    a0:aa:88:1a:dd:e6:36:b5:fd:5f:b7:80:dd:7f:e9:
                    98:09:73:3b:9e:b1:4d:ed:e3:12:64:d9:da:e9:fc:
                    a8:d0:d1:bc:23:9b:96:83:23:01:e7:b1:7c:72:98:
                    c0:9f:91:fb:cb:6a:97:b3:60:99:22:54:8d:36:e8:
                    f0:b0:8e:83:4b:4a:7d:f9:42:59:57:97:8f:72:ab:
                    46:0c:f0:4a:bd:7b:8e:92:8b:1e:3d:0b:76:17:b3:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3B:14:37:45:9B:94:DE:9D:79:3A:D3:3D:7C:22:85:0F:85:45:02
            X509v3 Authority Key Identifier:
                keyid:C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:96:56:ec:92:ef:6f:4a:a3:b2:7e:8e:c9:3b:a7:5b:0f:37:
         98:b6:f7:70:3b:fc:ea:79:4e:88:4e:e1:7c:b1:ff:71:fb:7e:
         ba:b9:fb:ef:be:e6:d3:d3:c6:5b:41:9a:30:02:45:06:10:5c:
         c9:8c:16:49:20:fa:8c:fd:3e:aa:ed:02:50:70:e2:dc:cf:dc:
         8a:85:da:9c:ae:7d:ea:e1:53:e2:4f:50:89:4b:bd:8f:4e:31:
         25:0c:58:a4:c9:65:50:20:9c:c7:7c:ef:11:50:94:0d:ec:fb:
         4d:47:e4:18:4f:dc:61:70:22:f8:09:d3:fe:96:78:a3:1c:ae:
         f8:ca:58:3e:39:3a:7e:df:26:c6:c6:38:4d:e2:c8:e0:a7:c8:
         53:a5:0d:4c:d8:f8:64:5c:08:46:a6:bc:73:2a:b6:3b:1e:24:
         7a:b8:17:a7:a6:a3:41:19:f3:79:f8:f8:f0:34:58:60:b9:c5:
         7b:1d:86:3f:55:98:28:b3:95:2e:28:bf:b3:a9:39:f1:7a:c7:
         31:cf:fa:0b:f1:2c:51:59:85:8d:ce:10:96:5e:c7:23:52:60:
         86:ea:0f:f8:37:3c:ee:05:e2:f4:1e:44:e6:35:9d:72:94:34:
         f5:ba:35:b9:7b:e4:81:55:b2:35:f2:76:79:4a:68:b3:b8:a9:
         34:05:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:24:24 2025 by rpki-client