This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File:                     WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier:          KN/RnM0DBg9GX1D30jUGSB2fA/VCRXKy0D3Gk9cTI0E=
Subject key identifier:   5C:CD:C2:42:20:AB:83:1C:8B:61:D2:0C:96:60:9F:1A:67:03:AF:C7
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer:       /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial:       0729
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number:          2D07
Signing time:             Wed 24 Dec 2025 15:33:46 +0000
Manifest this update:     Wed 24 Dec 2025 15:33:46 +0000
Manifest next update:     Wed 31 Dec 2025 15:33:46 +0000
Files and hashes:         1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: 5T2VQQHPzpfEU5MbJ9YUKES2EQmOef4oWB6ttzX6u1o=)
                          2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: yv4yXxdZSOzS3VJoLoyhG//bnrtF6VAnh10WOZtqxtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 15:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
        Validity
            Not Before: Dec 24 15:33:46 2025 GMT
            Not After : Dec 31 15:33:46 2025 GMT
        Subject: CN=694c07da-cf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:d8:4a:9e:10:d0:af:b4:20:52:18:64:85:
                    72:e4:ab:98:5d:3d:fb:d2:4c:ea:86:a3:bb:58:37:
                    0e:e9:9b:ee:61:d9:a4:ed:24:c7:93:b8:7c:da:f3:
                    fe:e2:8f:de:23:ac:49:b2:21:d8:da:a7:b7:df:5d:
                    d7:bf:a0:3c:a3:f9:73:cc:3e:0c:17:a1:fe:ed:8f:
                    dd:44:2d:3e:48:8a:67:8a:87:87:fb:1c:ef:93:be:
                    18:35:97:f5:94:73:d0:0e:e2:f6:f0:2c:7c:29:8b:
                    9e:36:ea:c5:ef:50:40:0d:d1:3f:4a:a7:82:11:85:
                    3b:8e:a6:c7:e4:4a:f3:6e:ee:b1:7d:5d:96:9c:70:
                    ae:81:2a:25:39:d4:ad:2b:e3:22:c4:29:94:0f:c7:
                    3c:0d:1b:5c:c1:c1:8b:5c:da:d6:b1:93:6e:2f:48:
                    c6:04:6e:02:4f:19:5f:d9:6a:c0:44:e4:f4:31:44:
                    a8:08:7a:51:35:87:59:2f:e4:8f:66:48:c0:ec:df:
                    fe:60:53:ab:31:55:6c:c4:78:e0:2d:ec:de:91:06:
                    2c:f3:15:f8:35:e1:98:b0:a5:be:9a:81:b1:a2:61:
                    5a:19:c0:d4:6e:7f:4d:85:d0:e5:26:9d:f9:a5:2a:
                    a8:c6:a0:28:ff:51:96:03:b9:1a:64:a4:02:11:37:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CD:C2:42:20:AB:83:1C:8B:61:D2:0C:96:60:9F:1A:67:03:AF:C7
            X509v3 Authority Key Identifier:
                keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:81:0a:87:c8:59:5b:2b:c4:c8:5e:79:30:21:34:f9:37:b3:
         5c:f1:4a:d8:9a:ff:38:dd:ea:a1:47:9f:ed:e2:5e:ba:01:12:
         17:04:fe:ff:96:e4:36:07:63:67:e6:1b:08:50:70:e5:b7:bf:
         d9:28:7f:3b:a1:4f:25:9f:e5:22:c5:e9:80:cd:eb:f9:65:44:
         c9:97:4e:15:37:cf:ba:99:3b:a9:99:e7:f2:d6:d2:a3:27:f6:
         52:da:71:2d:f4:90:95:ef:94:fa:ae:75:25:f1:eb:de:1b:51:
         b3:ed:de:7f:fb:a0:d4:d8:a2:41:4c:77:5f:4b:13:97:cb:39:
         a9:0c:3e:ff:8d:96:2c:d3:a9:68:1c:7e:6a:d0:fa:cc:2e:3e:
         bb:cb:35:a2:7a:d4:e5:48:b6:4a:42:e3:f0:57:2a:e7:be:d5:
         b7:8c:dc:bf:96:af:fe:01:bc:9d:c0:d9:3f:9b:26:d3:5c:f3:
         a7:4e:b6:71:ea:f4:e9:97:b7:74:e1:c9:ab:7a:fb:99:dd:ba:
         8f:bd:62:3f:54:32:24:25:99:28:f2:1e:26:ed:bb:bf:c5:a8:
         a5:73:e0:4a:fb:b8:75:0b:a1:a6:4f:02:21:cb:19:95:6c:0e:
         9a:da:89:73:44:23:03:ef:bc:b2:34:70:ee:01:78:f0:a0:92:
         14:04:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:30:37 2025 by rpki-client