This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
File:                     -4WO-66Tw4ktlJvcQfxEao687hs.mft (raw, json)
Hash identifier:          zPEGaAp/AYZIL3nnD/B2iWFM+ES/p9zufdTdPffuE+4=
Subject key identifier:   1B:F8:DD:B4:13:B6:46:4B:8E:2B:B7:E8:F0:62:BE:56:5B:C7:01:3D
Authority key identifier: FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
Certificate issuer:       /CN=A919B59F/serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
Manifest number:          06
Signing time:             Wed 03 Dec 2025 06:14:20 +0000
Manifest this update:     Wed 03 Dec 2025 06:14:20 +0000
Manifest next update:     Wed 10 Dec 2025 06:14:20 +0000
Files and hashes:         1: -4WO-66Tw4ktlJvcQfxEao687hs.crl (hash: IHGC2QMA1DORC+5TxP1/xS8I+piq0UTkDeA58nw4hyA=)
                          2: 45395E28C8F411F0A2F04129C4F9AE02.roa (hash: afkEaQ/8swH1PQQMSELASTKf/x3bI9lkHYSPkyJ2iSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
                          rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B59F, serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
        Validity
            Not Before: Dec  3 06:14:20 2025 GMT
            Not After : Dec 10 06:14:20 2025 GMT
        Subject: CN=692fd53c-392b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:64:f2:2e:02:b5:5d:dd:b9:27:e7:00:02:
                    95:70:26:ed:66:13:b2:d0:42:be:f7:c1:d9:d2:4e:
                    28:a3:12:d2:52:54:8f:1b:0d:20:c5:e3:52:e6:e2:
                    fe:3d:97:59:ed:a2:e3:62:c7:26:95:c9:b5:d4:b7:
                    3d:12:f5:dc:10:e2:ec:69:49:f0:f4:09:7f:8d:7a:
                    fa:bd:13:ed:61:8a:c1:35:0f:96:84:6b:69:87:76:
                    66:ef:76:f9:ae:40:a3:0b:2d:ea:2e:d6:59:43:b3:
                    bc:08:21:51:4e:c4:0a:b4:ba:93:26:be:b7:76:55:
                    4d:79:5a:b3:09:1d:66:31:47:5d:e6:0c:a7:a4:75:
                    b6:52:d8:65:d9:d9:36:09:3d:62:d2:82:b3:ec:15:
                    ea:93:dd:a9:60:56:b4:d8:fe:1a:77:cb:0c:11:22:
                    e3:5d:f8:eb:89:4a:f5:72:4e:7e:35:2a:e8:1d:fb:
                    7f:1c:70:e2:88:41:48:fc:3b:22:60:fb:95:bd:b2:
                    9f:c7:d0:61:8f:0e:96:96:56:c7:c7:a9:60:d1:b2:
                    9e:5d:29:e4:ee:5b:33:5b:cf:cc:8e:55:f0:67:13:
                    dc:5f:32:00:65:49:8c:68:8e:45:21:e5:61:fd:3e:
                    09:31:99:e0:e2:3a:f3:87:60:51:be:0b:5f:43:4d:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F8:DD:B4:13:B6:46:4B:8E:2B:B7:E8:F0:62:BE:56:5B:C7:01:3D
            X509v3 Authority Key Identifier:
                keyid:FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:a5:db:f2:43:47:05:bb:0e:0c:5c:19:32:a3:a8:61:65:
         36:af:3b:09:e5:8e:40:94:8f:2d:ed:02:c2:af:ba:12:d5:2d:
         81:31:61:43:62:a2:8c:2b:58:f1:ec:58:36:a6:fe:dd:dd:65:
         28:d5:f4:29:58:69:91:a4:34:b2:68:d4:3b:be:82:ed:23:7b:
         66:71:f4:0d:58:54:8f:a9:95:10:18:32:4d:d9:98:14:95:2c:
         75:44:77:91:47:82:95:b0:ef:dd:be:5f:32:14:57:ce:ed:d2:
         4d:24:ac:21:8c:39:91:51:58:50:cc:5c:75:28:e2:29:6e:05:
         d4:41:2b:5d:fa:7c:a5:a0:03:7a:d5:b7:4e:c4:cd:26:42:a4:
         65:ad:90:18:f2:6c:20:1a:63:0d:f6:33:71:f2:fd:09:80:b4:
         8f:24:a4:f1:99:66:ca:d4:9c:5f:5a:d8:9a:8d:f6:28:51:b6:
         0f:44:dc:90:79:f6:9f:19:48:66:5c:e6:72:11:3f:15:33:2f:
         d0:0f:e5:f2:c9:b9:37:c1:19:a3:76:31:64:28:cc:92:fa:10:
         d9:f8:ad:43:d8:77:77:49:6e:8e:27:83:4f:ca:74:92:71:21:
         c0:fb:37:35:a2:57:82:13:a0:29:8a:2b:95:04:87:a4:d5:77:
         98:bb:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:09 2025 by rpki-client