This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
File:                     WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json)
Hash identifier:          Crvj/LrO4QWRXem2NWgJ5z0yfdzAc7TDRzq63lkWIYQ=
Subject key identifier:   66:BE:65:D7:73:7B:AE:77:1C:CD:4B:94:FF:B2:38:AD:C7:BF:28:EF
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Certificate issuer:       /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial:       0A19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
Manifest number:          09FF
Signing time:             Sat 06 Dec 2025 19:06:25 +0000
Manifest this update:     Sat 06 Dec 2025 19:06:24 +0000
Manifest next update:     Sat 13 Dec 2025 19:06:24 +0000
Files and hashes:         1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: +FfGLsCgVfWM/ejmS7dOFAfOiHg3AfPgxt+ZcytodH8=)
                          2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: OxqkPAcwe8U/URYzB78s+OkY3R6dzxppCgDSq39fiQ0=)
                          3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: EhKz+qpZCdGGz4K9XW4D89cMEqKMRNKMYWUEYrhee9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585 (0xa19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
        Validity
            Not Before: Dec  6 19:06:24 2025 GMT
            Not After : Dec 13 19:06:24 2025 GMT
        Subject: CN=69347eb0-85bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:5d:e3:93:5f:85:45:79:9a:d4:1e:b3:03:
                    19:29:06:5c:36:ed:49:58:bf:e8:d2:2c:c1:8e:28:
                    69:54:a2:18:a1:a2:0e:a8:f2:77:93:b4:f1:b1:d6:
                    ac:91:e4:83:dc:ab:f6:fa:b8:43:10:07:d4:1d:0d:
                    3e:0c:d5:9d:61:79:80:46:a7:6a:b2:c3:f6:f9:cc:
                    1b:99:21:a5:3f:06:c4:fb:cb:48:78:25:11:f0:57:
                    fc:eb:06:1b:0b:9f:01:a9:90:2e:99:ac:76:a8:e5:
                    65:fd:42:90:18:34:d2:a1:88:8e:56:11:eb:a2:17:
                    7e:77:0f:7b:90:dd:91:c1:e3:0e:83:28:e9:bf:e7:
                    24:d3:08:88:5b:dc:67:37:65:14:8a:c2:06:15:24:
                    9a:19:aa:4b:50:b8:83:20:df:e4:95:4f:b4:04:84:
                    9e:08:e4:41:f5:65:c9:71:b5:ac:a6:78:9a:91:23:
                    5f:3a:f1:e3:9e:5f:6b:b7:a8:42:35:3a:00:a6:aa:
                    0a:10:5d:7b:73:13:6c:10:a7:91:7e:a3:23:31:01:
                    d9:8f:8c:eb:b1:8d:68:6a:03:2c:4f:e5:f1:24:fe:
                    f5:3a:79:e0:76:c5:fc:50:0b:6b:b3:38:e1:6a:43:
                    a1:d8:e8:e5:29:b4:84:07:0b:01:2e:a5:c5:e6:cb:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BE:65:D7:73:7B:AE:77:1C:CD:4B:94:FF:B2:38:AD:C7:BF:28:EF
            X509v3 Authority Key Identifier:
                keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:da:8f:86:41:97:ff:e3:57:e1:fc:96:86:5e:d0:cc:b4:e7:
         46:6e:8d:90:79:86:ea:f9:7e:a3:94:a0:20:f2:e4:31:37:b1:
         c9:9e:09:cf:20:ee:ab:32:78:a6:21:a7:2a:1f:30:3d:91:7c:
         d1:ec:79:65:00:d8:ee:dc:86:66:94:73:20:96:fe:63:2a:a5:
         cb:d2:1b:95:4e:13:82:e4:25:b9:44:e0:64:2f:37:19:3b:cc:
         ee:3d:37:60:ba:df:db:68:d9:64:a1:ea:98:27:52:9c:07:d6:
         fa:d1:e9:8b:ed:03:10:b7:42:3f:31:7d:53:e8:14:01:b7:ae:
         7b:ed:40:16:a6:9e:04:e2:75:83:73:0f:36:e2:0c:5a:66:ac:
         3a:78:cc:86:09:1a:58:83:ca:a3:39:6f:c0:f7:16:80:09:05:
         f5:dd:8c:42:3b:0f:0b:77:19:ae:ce:22:cb:3a:4a:fa:ad:b8:
         e0:24:fe:57:0c:b8:d0:20:fa:1d:ce:59:a5:ce:26:b4:38:10:
         17:c1:ce:7c:3b:42:ec:fe:53:3e:7b:4f:3c:a8:ef:76:3c:8d:
         bc:20:8e:ca:b5:5f:2b:67:57:ab:7a:91:fe:cc:5b:af:70:5a:
         0d:b3:3b:9a:6b:1a:fb:70:48:26:7f:ad:d6:80:27:78:b9:4a:
         61:b1:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:39 2025 by rpki-client