This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft
File:                     WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json)
Hash identifier:          N5r2IichhqU629MpQy2Tb/D7N8TV8kcIX6r+nRPFlI0=
Subject key identifier:   85:5E:DB:8F:B2:DE:BE:61:5E:9F:CE:E1:F3:78:B4:7B:D9:90:21:F4
Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05
Certificate issuer:       /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005
Certificate serial:       0B8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft
Manifest number:          0B87
Signing time:             Sat 20 Dec 2025 18:36:32 +0000
Manifest this update:     Sat 20 Dec 2025 18:36:32 +0000
Manifest next update:     Sat 27 Dec 2025 18:36:32 +0000
Files and hashes:         1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: 1mZphQpbHJMJ9Hw+uQL77EAsyOVbAPdxKwo00A2Wrw8=)
                          2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: thbx7wB2Yko7c9vVEn1C7De9utHqQJCytkIE+aVUcMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl
                          rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2958 (0xb8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6990, serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005
        Validity
            Not Before: Dec 20 18:36:32 2025 GMT
            Not After : Dec 27 18:36:32 2025 GMT
        Subject: CN=6946ecb0-55dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:98:34:d2:83:eb:ef:c7:20:1f:67:b7:90:
                    cb:31:e7:dc:4c:3b:b4:a3:c6:22:45:90:4c:c2:67:
                    ec:76:83:fd:14:d4:47:86:40:ff:92:55:73:ad:73:
                    6d:05:57:4d:73:d3:cd:ac:51:33:df:97:dc:10:6d:
                    99:a2:ad:ba:d6:45:f8:1f:be:a3:b1:de:0a:de:83:
                    4f:97:b3:76:75:f0:61:2e:2d:5c:5c:99:b9:e9:4a:
                    80:3e:34:05:2b:7d:89:54:33:46:42:9a:cd:e2:97:
                    14:25:9b:49:2b:12:9b:96:20:5d:77:db:ed:76:21:
                    96:13:7d:93:f4:fb:44:67:73:e1:1d:32:c9:6a:87:
                    99:8a:a4:ab:7f:b9:7e:1e:4f:25:d4:e3:af:43:84:
                    49:da:79:34:4e:0d:ff:87:f0:01:2f:11:38:82:d4:
                    cc:73:ed:f1:05:7f:ab:a8:ee:8d:c0:76:6c:7e:b4:
                    26:67:05:80:1b:ab:0c:98:59:6f:48:07:e9:9a:c7:
                    f5:42:79:0a:d5:37:77:98:ae:5e:38:aa:dd:f7:9b:
                    a3:d4:80:6a:c6:92:1f:e6:a2:89:cf:48:94:6b:48:
                    8f:02:ff:66:1a:34:cb:68:3a:4d:79:fd:8b:4a:2c:
                    ec:88:33:4d:f6:d7:49:e2:5d:c3:96:8e:e3:f1:9c:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5E:DB:8F:B2:DE:BE:61:5E:9F:CE:E1:F3:78:B4:7B:D9:90:21:F4
            X509v3 Authority Key Identifier:
                keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:00:9f:fc:51:d6:be:29:4e:8f:12:65:23:a4:dd:12:39:7a:
         3a:bb:87:e7:d9:e8:ac:5d:e3:b5:75:81:ea:45:00:d4:f2:25:
         9a:12:12:ff:0a:46:28:63:a6:3c:b7:ba:e5:2b:3b:c0:4e:83:
         44:1d:d5:c4:0c:e6:a5:38:a9:85:14:0a:00:e6:1c:2c:c9:cb:
         40:21:37:21:67:fc:ab:ee:4f:f2:4d:d9:97:1f:21:9b:46:26:
         cc:02:34:29:ec:23:e2:b5:23:75:42:e1:a3:07:6b:dd:8b:57:
         97:89:de:d4:25:b1:d7:de:2d:97:b1:33:7d:7b:f8:a6:70:db:
         2e:41:00:69:4f:8b:6c:73:38:4e:42:0a:da:f4:c5:c9:53:34:
         c9:67:96:7b:59:cf:5a:e6:7a:0f:86:72:a6:af:3f:b2:8d:88:
         42:60:4b:c4:30:bf:61:f6:3c:7e:83:03:23:d7:15:b2:34:d9:
         bd:f7:2f:9e:b7:e8:3f:f4:2a:bf:cf:2c:4e:7c:e8:30:12:72:
         df:f2:d7:26:fa:61:99:16:2f:a4:fe:fa:aa:28:4a:db:1c:c1:
         11:9b:8a:71:f7:79:f3:02:a6:c9:66:e6:09:1b:05:28:d9:10:
         46:48:9e:4d:21:2a:09:a1:6b:1a:87:0c:a7:5e:68:cc:fb:e0:
         6b:9e:43:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC
OUM2RjYwMDUwHhcNMjUxMjIwMTgzNjMyWhcNMjUxMjI3MTgzNjMyWjAYMRYwFAYD
VQQDDA02OTQ2ZWNiMC01NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA04uYNNKD6+/HIB9nt5DLMefcTDu0o8YiRZBMwmfsdoP9FNRHhkD/klVzrXNt
BVdNc9PNrFEz35fcEG2Zoq261kX4H76jsd4K3oNPl7N2dfBhLi1cXJm56UqAPjQF
K32JVDNGQprN4pcUJZtJKxKbliBdd9vtdiGWE32T9PtEZ3PhHTLJaoeZiqSrf7l+
Hk8l1OOvQ4RJ2nk0Tg3/h/ABLxE4gtTMc+3xBX+rqO6NwHZsfrQmZwWAG6sMmFlv
SAfpmsf1QnkK1Td3mK5eOKrd95uj1IBqxpIf5qKJz0iUa0iPAv9mGjTLaDpNef2L
SizsiDNN9tdJ4l3Dlo7j8ZwWVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVe24+y
3r5hXp/O4fN4tHvZkCH0MB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE
RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU
RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4AJ/8Uda+KU6PEmUjpN0SOXo6u4fn2eisXeO1dYHqRQDU8iWaEhL/
CkYoY6Y8t7rlKzvAToNEHdXEDOalOKmFFAoA5hwsyctAITchZ/yr7k/yTdmXHyGb
RibMAjQp7CPitSN1QuGjB2vdi1eXid7UJbHX3i2XsTN9e/imcNsuQQBpT4tsczhO
Qgra9MXJUzTJZ5Z7Wc9a5noPhnKmrz+yjYhCYEvEML9h9jx+gwMj1xWyNNm99y+e
t+g/9Cq/zyxOfOgwEnLf8tcm+mGZFi+k/vqqKErbHMERm4px93nzAqbJZuYJGwUo
2RBGSJ5NISoJoWsahwynXmjM++BrnkMV
-----END CERTIFICATE-----
Generated at Sun Dec 21 21:16:01 2025 by rpki-client