This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
File:                     W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json)
Hash identifier:          gjpy6lEY/OZTsgRQ1dzEB6VKxD+CBSTuCfXu5V67R8w=
Subject key identifier:   4D:E8:BA:13:39:DB:10:D2:97:D8:2F:BB:0D:D1:54:06:85:2A:58:E8
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Certificate issuer:       /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
Manifest number:          02CA
Signing time:             Tue 23 Dec 2025 00:23:49 +0000
Manifest this update:     Tue 23 Dec 2025 00:23:48 +0000
Manifest next update:     Tue 30 Dec 2025 00:23:48 +0000
Files and hashes:         1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: gFZtvVYduMosJKdZXe5KNwRYDhmUC3dN8XUXGE28EBQ=)
                          2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: adnEf98Mcb3FBLEgu6RCjZRZJRsX9673EsNnM8Jow7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
                          rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
        Validity
            Not Before: Dec 23 00:23:48 2025 GMT
            Not After : Dec 30 00:23:48 2025 GMT
        Subject: CN=6949e114-f408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e1:92:dd:a0:01:c0:7c:de:4f:b1:cd:ab:3b:
                    d4:b1:b8:c1:a1:0b:bc:59:64:b6:a1:a0:71:3b:d5:
                    3f:e4:7b:25:2e:03:9e:34:81:24:12:b6:c5:53:5f:
                    90:3b:b5:8e:7f:94:73:28:6e:27:38:ac:51:c4:5e:
                    cd:60:5b:ae:5b:3e:44:e0:9a:f9:f3:b0:1b:34:e6:
                    d3:a6:f0:c2:4d:4f:cf:4d:69:79:2c:0c:08:0e:f5:
                    6a:27:b2:b7:c9:2f:ab:12:24:c6:c8:ff:72:c4:05:
                    ed:ef:a8:d9:b1:fd:7e:0f:dd:91:8e:8e:43:86:3e:
                    18:4a:1e:52:60:c8:e7:0a:e0:09:fc:ef:34:57:3c:
                    17:1b:52:e6:49:aa:0b:a3:82:09:10:2d:51:2a:df:
                    9c:3d:cb:a4:45:a0:15:c3:bf:10:88:0c:be:ad:e6:
                    d8:6b:a4:8c:13:7d:42:cd:e0:1c:e2:ed:e3:ea:4c:
                    1b:b8:9c:11:17:27:50:37:e5:c6:cb:7f:af:f5:9f:
                    63:76:4e:36:1c:9b:8a:52:91:a6:a1:0b:a0:5b:ce:
                    a8:66:a5:04:2c:2e:fb:7f:58:f7:fb:4d:fa:60:5a:
                    3e:33:fa:0e:06:f1:c6:f9:0d:f1:e4:22:bf:e8:b7:
                    92:96:ce:a4:be:91:76:d3:8e:80:0a:e8:2e:5d:05:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E8:BA:13:39:DB:10:D2:97:D8:2F:BB:0D:D1:54:06:85:2A:58:E8
            X509v3 Authority Key Identifier:
                keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a5:e2:17:dc:fe:f4:ae:e3:4f:72:50:f3:c3:5d:95:fb:55:
         4d:2f:2d:d4:48:87:7c:b8:07:cf:87:f4:5c:29:b4:14:d7:c7:
         34:9f:df:0e:26:29:4a:21:4d:48:37:11:9b:51:1c:6e:fc:ef:
         2e:4d:f3:c5:f6:29:94:23:ff:9a:0c:48:4f:b6:4e:33:b5:9f:
         94:f5:87:a7:22:48:14:c6:03:96:4c:d6:6b:57:10:0f:1a:15:
         db:a3:63:4f:69:3c:bb:99:5f:87:03:f4:af:6f:0e:9c:b6:53:
         bc:be:71:5f:79:6d:69:92:a6:ad:31:71:43:5e:5f:e9:24:ef:
         00:1d:62:8e:87:a4:e2:06:44:e7:25:15:47:cf:da:50:83:1d:
         17:b9:81:0f:38:22:18:73:4c:b1:1e:cb:75:b3:61:4f:ea:97:
         54:33:19:2f:7c:94:df:ba:82:56:68:83:b8:ad:89:63:c5:ec:
         0e:3f:fc:47:1c:ed:6e:c4:f0:a7:c7:55:fb:f9:8b:2a:2d:76:
         4a:78:1c:8d:de:58:46:2b:33:ff:40:b1:1d:8f:4c:ab:8c:c7:
         bf:ca:b4:fe:2e:1b:f1:99:49:54:4e:cc:a6:90:db:8e:ef:ad:
         30:99:4e:15:88:0e:ad:a2:0c:a7:40:9c:96:c4:d2:7c:af:eb:
         f2:d7:8b:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy
QkEzN0NEQTcwHhcNMjUxMjIzMDAyMzQ4WhcNMjUxMjMwMDAyMzQ4WjAYMRYwFAYD
VQQDDA02OTQ5ZTExNC1mNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8uGS3aABwHzeT7HNqzvUsbjBoQu8WWS2oaBxO9U/5HslLgOeNIEkErbFU1+Q
O7WOf5RzKG4nOKxRxF7NYFuuWz5E4Jr587AbNObTpvDCTU/PTWl5LAwIDvVqJ7K3
yS+rEiTGyP9yxAXt76jZsf1+D92Rjo5Dhj4YSh5SYMjnCuAJ/O80VzwXG1LmSaoL
o4IJEC1RKt+cPcukRaAVw78QiAy+rebYa6SME31CzeAc4u3j6kwbuJwRFydQN+XG
y3+v9Z9jdk42HJuKUpGmoQugW86oZqUELC77f1j3+036YFo+M/oOBvHG+Q3x5CK/
6LeSls6kvpF2046ACuguXQXABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3ouhM5
2xDSl9gvuw3RVAaFKljoMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2
QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5
VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxpeIX3P70ruNPclDzw12V+1VNLy3USId8uAfPh/RcKbQU18c0n98O
JilKIU1INxGbURxu/O8uTfPF9imUI/+aDEhPtk4ztZ+U9YenIkgUxgOWTNZrVxAP
GhXbo2NPaTy7mV+HA/Svbw6ctlO8vnFfeW1pkqatMXFDXl/pJO8AHWKOh6TiBkTn
JRVHz9pQgx0XuYEPOCIYc0yxHst1s2FP6pdUMxkvfJTfuoJWaIO4rYljxewOP/xH
HO1uxPCnx1X7+YsqLXZKeByN3lhGKzP/QLEdj0yrjMe/yrT+LhvxmUlUTsymkNuO
760wmU4ViA6togynQJyWxNJ8r+vy14tW
-----END CERTIFICATE-----
Generated at Tue Dec 23 11:02:49 2025 by rpki-client