This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft
File:                     WQ7DC8ELPV581YJhihmywXBLBRE.mft (raw, json)
Hash identifier:          ECGUsgV9xR5n5EM/yz7g2f21fzORhzLQH64kwPZgGuI=
Subject key identifier:   C7:33:F0:0E:B8:99:C1:CF:17:AE:ED:24:3B:1B:62:21:3F:92:BF:7D
Authority key identifier: 59:0E:C3:0B:C1:0B:3D:5E:7C:D5:82:61:8A:19:B2:C1:70:4B:05:11
Certificate issuer:       /CN=A919D594/serialNumber=590EC30BC10B3D5E7CD582618A19B2C1704B0511
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft
Manifest number:          14
Signing time:             Tue 23 Dec 2025 06:44:04 +0000
Manifest this update:     Tue 23 Dec 2025 06:44:04 +0000
Manifest next update:     Tue 30 Dec 2025 06:44:04 +0000
Files and hashes:         1: WQ7DC8ELPV581YJhihmywXBLBRE.crl (hash: mykdrt6DRyOR7C4f21TJ3uLKh1nxiTzmf5sUYPzfOCY=)
                          2: 61D451B2C41411F097D26439C4F9AE02.roa (hash: 44wCJ2MH/ME4Z6tIy4xx9cgeQi0Iq724YgG7y5IrzSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.crl
                          rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D594, serialNumber=590EC30BC10B3D5E7CD582618A19B2C1704B0511
        Validity
            Not Before: Dec 23 06:44:04 2025 GMT
            Not After : Dec 30 06:44:04 2025 GMT
        Subject: CN=694a3a34-3c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:b1:b4:77:40:de:d6:c8:8c:66:e7:f1:e5:
                    0a:e7:50:1d:12:fa:54:84:86:15:6d:f4:00:73:17:
                    04:ae:22:30:b6:0e:bb:b8:62:2f:77:6d:70:87:fd:
                    56:bd:3a:2b:43:aa:2f:e3:70:cf:34:65:8c:42:fa:
                    17:53:c7:f4:b3:d9:b7:c6:de:38:0b:5d:ff:19:31:
                    cc:6e:20:09:e1:09:86:50:15:d4:b6:a1:8b:f1:69:
                    7f:2e:b2:a7:fd:2b:11:55:4c:e0:1a:32:da:1a:74:
                    cb:30:29:15:4f:de:4d:5b:1d:d0:d2:90:d6:df:90:
                    8e:37:b8:23:68:5d:6a:ed:fc:70:92:ee:0c:31:c8:
                    23:12:8b:5b:e0:71:85:a6:cd:31:1c:9b:e8:5d:fb:
                    62:3a:66:c1:ab:5b:21:b2:0a:f9:b6:0d:01:17:e9:
                    f9:d9:cc:ad:c3:2d:5a:e2:05:1b:9e:e1:35:6d:a1:
                    a2:e4:74:f3:eb:85:3e:ac:98:f1:41:e0:bf:71:bb:
                    f3:f3:c6:19:e0:5e:a8:ef:d7:f7:6c:28:c8:11:04:
                    04:6a:3f:f5:4d:ec:ca:6d:29:6e:19:f8:98:95:20:
                    b6:09:e6:41:73:36:8f:b0:54:06:c2:77:1c:e0:2e:
                    07:21:6b:96:d7:98:2f:b2:da:da:30:8e:0b:0a:93:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:F0:0E:B8:99:C1:CF:17:AE:ED:24:3B:1B:62:21:3F:92:BF:7D
            X509v3 Authority Key Identifier:
                keyid:59:0E:C3:0B:C1:0B:3D:5E:7C:D5:82:61:8A:19:B2:C1:70:4B:05:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:7f:04:35:97:bc:d3:da:d4:26:20:56:4d:f3:b4:d5:9b:
         92:4e:ec:26:4d:fc:5b:dc:9f:03:34:bd:2f:1d:84:64:e4:43:
         9d:59:8d:f2:06:ca:22:d5:76:4a:57:59:a2:15:10:9f:ec:96:
         9d:fb:a4:a6:32:70:91:6e:4e:31:43:e0:2f:c2:4c:9b:f6:d0:
         5e:63:6d:5d:e3:bc:43:8d:6a:24:11:49:1f:1f:8a:e7:31:57:
         4f:09:ee:45:23:92:02:13:5e:e5:a2:33:d3:65:00:47:dd:c3:
         3a:36:78:c2:a5:23:1e:de:9e:9c:55:d8:21:3e:27:e9:c8:e1:
         dd:06:5d:98:24:c0:34:67:5e:56:b6:57:76:2f:f9:98:b1:38:
         d2:62:fb:b7:a6:ff:50:c5:f8:1b:b0:83:c3:d9:f5:c0:3c:c0:
         a0:4f:75:52:ca:87:12:ac:45:66:81:4b:b7:a4:62:6b:91:55:
         15:f3:3b:3b:cf:f3:65:6c:35:c5:38:be:ca:37:22:84:69:50:
         2f:ec:ff:9e:03:af:3e:4a:b9:87:2c:94:6e:62:7c:45:a6:c5:
         c4:34:96:25:13:0b:ba:1c:ab:41:e2:f2:c2:28:60:e8:cd:99:
         76:b5:db:17:e5:8b:34:36:a1:b6:e6:fe:26:bf:54:60:46:12:
         fd:4a:fc:ba
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RDU5NDExMC8GA1UEBRMoNTkwRUMzMEJDMTBCM0Q1RTdDRDU4MjYxOEExOUIyQzE3
MDRCMDUxMTAeFw0yNTEyMjMwNjQ0MDRaFw0yNTEyMzAwNjQ0MDRaMBgxFjAUBgNV
BAMMDTY5NGEzYTM0LTNjMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiurG0d0De1siMZufx5QrnUB0S+lSEhhVt9ABzFwSuIjC2Dru4Yi93bXCH/Va9
OitDqi/jcM80ZYxC+hdTx/Sz2bfG3jgLXf8ZMcxuIAnhCYZQFdS2oYvxaX8usqf9
KxFVTOAaMtoadMswKRVP3k1bHdDSkNbfkI43uCNoXWrt/HCS7gwxyCMSi1vgcYWm
zTEcm+hd+2I6ZsGrWyGyCvm2DQEX6fnZzK3DLVriBRue4TVtoaLkdPPrhT6smPFB
4L9xu/PzxhngXqjv1/dsKMgRBARqP/VN7MptKW4Z+JiVILYJ5kFzNo+wVAbCdxzg
Lgcha5bXmC+y2towjgsKkyufAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxzPwDriZ
wc8Xru0kOxtiIT+Sv30wHwYDVR0jBBgwFoAUWQ7DC8ELPV581YJhihmywXBLBREw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlENTk0LzZCMDFENUM2QzQx
MzExRjA4MzVEREE3MUM0RjlBRTAyL1dRN0RDOEVMUFY1ODFZSmhpaG15d1hCTEJS
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV1E3REM4RUxQVjU4MVlKaGlobXl3WEJMQlJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE
NTk0LzZCMDFENUM2QzQxMzExRjA4MzVEREE3MUM0RjlBRTAyL1dRN0RDOEVMUFY1
ODFZSmhpaG15d1hCTEJSRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAvQfwQ1l7zT2tQmIFZN87TVm5JO7CZN/FvcnwM0vS8dhGTkQ51ZjfIG
yiLVdkpXWaIVEJ/slp37pKYycJFuTjFD4C/CTJv20F5jbV3jvEONaiQRSR8fiucx
V08J7kUjkgITXuWiM9NlAEfdwzo2eMKlIx7enpxV2CE+J+nI4d0GXZgkwDRnXla2
V3Yv+ZixONJi+7em/1DF+Buwg8PZ9cA8wKBPdVLKhxKsRWaBS7ekYmuRVRXzOzvP
82VsNcU4vso3IoRpUC/s/54Drz5KuYcslG5ifEWmxcQ0liUTC7ocq0Hi8sIoYOjN
mXa12xflizQ2obbm/ia/VGBGEv1K/Lo=
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:08 2025 by rpki-client