This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
File:                     wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json)
Hash identifier:          aZP7cQqsU7agZEygoQBtsBSl0/kBRA1yvcJZz76ya9E=
Subject key identifier:   FE:B5:19:AC:0E:05:E3:17:9B:EB:D9:5A:BD:0D:7A:97:39:28:81:7A
Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
Certificate issuer:       /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Certificate serial:       0649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
Manifest number:          0643
Signing time:             Mon 22 Dec 2025 21:51:26 +0000
Manifest this update:     Mon 22 Dec 2025 21:51:26 +0000
Manifest next update:     Mon 29 Dec 2025 21:51:26 +0000
Files and hashes:         1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: R9eCAj+qMf0pUWNJkw4a7ssfMwvaCMH6pUrqq8LQaTA=)
                          2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: 3oYf4D2aeCXu56f8mNAcOhJ4M4El8ji8s2gDvwvZjUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
                          rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
        Validity
            Not Before: Dec 22 21:51:26 2025 GMT
            Not After : Dec 29 21:51:26 2025 GMT
        Subject: CN=6949bd5e-795d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:e5:ee:51:a2:c0:9c:09:59:20:38:d6:c3:
                    e3:22:67:5d:bb:31:f2:c4:3b:9e:a7:57:74:44:9c:
                    81:b2:eb:5f:f8:74:6e:80:98:d4:fa:ea:69:d5:b6:
                    9a:55:fb:af:5d:5b:34:03:b8:5f:87:f9:8d:b7:ba:
                    69:cc:ce:ff:14:e0:d0:c1:d9:b6:ec:05:6c:f2:d7:
                    bd:50:c3:5f:a8:89:15:0f:15:1c:78:b3:cf:a2:6e:
                    c3:4c:0d:d2:cd:42:70:89:40:5c:c9:0d:7d:e6:c9:
                    57:e2:7f:54:e8:1a:ba:ac:40:1b:0a:36:52:a6:ec:
                    db:21:15:14:a3:45:68:a1:25:e4:71:d0:a4:91:bf:
                    be:4b:8f:e5:4c:0b:13:3b:f8:87:32:92:cd:4f:ee:
                    d3:6c:18:7b:4e:e5:a5:c6:8c:b7:f9:8c:41:a8:05:
                    6c:b6:b7:87:c9:35:b6:28:b9:15:83:85:79:74:4e:
                    bd:1e:05:2a:33:69:a9:30:2c:5a:54:01:33:22:73:
                    f2:2a:9d:10:54:dc:83:26:31:95:97:1c:b3:7a:c2:
                    d1:73:68:00:39:16:7a:30:67:d7:d8:4d:d1:3f:47:
                    15:51:f2:ef:55:b7:25:78:57:9c:f0:2c:f6:2c:e8:
                    e3:49:aa:66:7b:8f:9d:39:f9:82:8d:97:19:0e:41:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:19:AC:0E:05:E3:17:9B:EB:D9:5A:BD:0D:7A:97:39:28:81:7A
            X509v3 Authority Key Identifier:
                keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:f9:61:b6:d6:f0:c2:b3:d5:ae:67:cc:00:2e:b0:a9:09:
         8c:81:f9:7b:ed:10:65:06:4e:f9:1f:5f:aa:5c:34:f8:7f:53:
         e8:45:b9:fe:8d:46:35:6e:de:c0:2a:14:f5:9a:55:94:a8:48:
         5e:4d:86:ec:73:df:db:36:7e:48:31:c0:fc:04:94:5e:a3:fc:
         e7:bb:e1:c4:7d:d0:49:d8:a7:51:ef:9b:84:2e:c5:5c:67:24:
         73:07:6b:cf:2c:e8:cb:ad:82:ab:98:12:5b:0a:c3:dc:a8:aa:
         e8:65:5e:25:70:bb:07:b3:50:10:b9:1a:ab:77:f3:38:57:37:
         31:3f:c4:94:dc:e1:eb:3f:23:41:ea:41:f4:69:ce:83:0c:57:
         0b:57:cf:c4:b2:35:a8:97:f1:26:aa:c3:84:b1:e0:ea:05:bc:
         2f:ab:5b:59:6a:45:f6:db:70:7d:d3:10:5b:5b:ee:be:8d:01:
         45:84:28:21:a1:c2:8e:8f:8f:f2:91:a4:39:0a:8c:a3:f7:74:
         a7:86:63:b2:cd:8d:b3:0e:fb:19:07:eb:c8:89:e2:75:8d:d2:
         51:64:f8:51:c6:0f:7c:44:68:31:63:14:ae:ba:56:81:4a:7f:
         d5:98:13:2c:1d:ae:28:ea:18:44:87:35:46:20:5c:90:ac:b6:
         15:c3:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:09 2025 by rpki-client