This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
File:                     wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json)
Hash identifier:          E0+xfhyW6LYlf5ptC4IutEw3CJgKghrgq1pZqKalzXg=
Subject key identifier:   CD:C9:CE:B8:C4:2A:AB:4B:57:E8:BE:A4:99:B4:47:A3:EA:39:96:B7
Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45
Certificate issuer:       /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
Certificate serial:       047C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
Manifest number:          1C43
Signing time:             Mon 22 Dec 2025 16:18:43 +0000
Manifest this update:     Mon 22 Dec 2025 16:18:43 +0000
Manifest next update:     Mon 29 Dec 2025 16:18:43 +0000
Files and hashes:         1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: sFeP/osy//aGJekZ48Z8Q19EBN3a/1TWxmrRRUss7dE=)
                          2: F9D345C0DE8811F0B0147CB83D6F56BC.roa (hash: 9LZHUJ48ZB+c/Aj0hibpaG7ilv/wbJ9nVDLdm2suDsk=)
                          3: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: +EpmAAjo6yFTAjun44cjj7Z2OPFIr6kC+2bjFTkfQ8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl
                          rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
        Validity
            Not Before: Dec 22 16:18:43 2025 GMT
            Not After : Dec 29 16:18:43 2025 GMT
        Subject: CN=69496f63-3691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:c3:45:31:bb:60:e3:3c:6b:9c:68:29:bf:
                    6e:e0:8e:e6:28:7a:3b:76:ca:d8:b5:06:a0:33:82:
                    82:4c:7c:71:f1:8c:a1:ed:ed:22:23:77:10:99:04:
                    2c:20:3f:1f:20:27:7b:dc:49:cd:c6:87:e0:0a:42:
                    fc:9d:24:98:b7:21:a5:69:c7:23:16:42:f8:99:00:
                    81:ef:c7:0a:10:91:2b:4e:3b:75:31:10:d7:b3:9b:
                    e5:10:ed:fb:d7:d1:ed:81:2f:7b:b8:fa:bc:cc:d2:
                    64:62:ad:2e:f9:ea:38:6a:f4:a7:bf:cf:45:c6:ab:
                    36:36:85:18:20:32:d7:44:4e:b4:44:3f:24:ed:16:
                    d2:40:11:83:fb:f3:13:56:26:fa:83:0a:13:d7:83:
                    45:41:81:08:2e:2a:ff:44:c1:ff:dd:16:38:7b:eb:
                    d1:98:f2:c4:47:75:64:30:bc:df:b4:93:fe:16:f7:
                    c7:e4:91:18:14:0f:ba:87:52:34:28:30:1e:fa:59:
                    05:16:70:16:d4:21:e0:90:92:c1:55:a8:39:3a:2f:
                    88:48:0c:5f:7c:f1:29:0b:b8:ca:18:cd:a3:ed:29:
                    6a:e3:c7:9d:78:f7:ef:07:b7:17:18:62:07:ee:b6:
                    7d:25:8a:c6:ac:5a:2b:08:29:f7:5e:5b:88:68:06:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:CE:B8:C4:2A:AB:4B:57:E8:BE:A4:99:B4:47:A3:EA:39:96:B7
            X509v3 Authority Key Identifier:
                keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:81:c6:41:8e:f0:b8:ee:c4:f0:4a:56:a9:c0:42:ab:04:39:
         7f:35:c7:0e:57:5b:41:50:9a:41:ed:49:4e:b4:8c:c3:1c:6d:
         af:cf:2c:68:e3:1b:4f:db:0b:40:a0:b8:0b:69:7b:f8:15:e4:
         28:2b:5a:b9:d3:95:67:b8:01:99:25:86:d3:0e:21:56:c1:89:
         8c:08:bf:31:3f:8c:44:50:d6:07:3c:09:37:2c:7a:96:7c:6a:
         6a:1c:e0:1c:86:26:26:3c:cb:7f:76:42:66:a0:35:48:1c:69:
         bd:a4:2b:0d:68:61:c7:e1:5f:06:c2:eb:dc:8e:a2:93:e8:8e:
         2b:59:c9:da:b6:e3:97:83:62:0b:a5:f2:2d:41:a9:66:ce:23:
         37:d3:e1:78:ae:2a:4f:7b:5e:17:49:03:42:eb:95:3d:85:4a:
         67:89:91:86:eb:df:75:e3:80:df:40:4f:d9:c3:cb:34:41:5c:
         0d:29:a4:38:c2:9d:0e:db:d6:e5:3e:a0:db:03:70:6c:9a:08:
         99:e4:29:ab:12:4a:11:ba:1d:e2:25:ce:c7:1a:95:a0:6b:1f:
         61:27:b0:75:08:a6:89:57:7e:61:36:56:c9:79:05:4c:1b:57:
         e8:ad:f1:91:a3:2a:c1:1b:20:dc:0a:bf:db:f9:6d:be:bf:14:
         45:0d:30:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5
MzBCQkYwNDUwHhcNMjUxMjIyMTYxODQzWhcNMjUxMjI5MTYxODQzWjAYMRYwFAYD
VQQDDA02OTQ5NmY2My0zNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCbDRTG7YOM8a5xoKb9u4I7mKHo7dsrYtQagM4KCTHxx8Yyh7e0iI3cQmQQs
ID8fICd73EnNxofgCkL8nSSYtyGlaccjFkL4mQCB78cKEJErTjt1MRDXs5vlEO37
19HtgS97uPq8zNJkYq0u+eo4avSnv89Fxqs2NoUYIDLXRE60RD8k7RbSQBGD+/MT
Vib6gwoT14NFQYEILir/RMH/3RY4e+vRmPLER3VkMLzftJP+FvfH5JEYFA+6h1I0
KDAe+lkFFnAW1CHgkJLBVag5Oi+ISAxffPEpC7jKGM2j7Slq48edePfvB7cXGGIH
7rZ9JYrGrForCCn3XluIaAZp8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3JzrjE
KqtLV+i+pJm0R6PqOZa3MB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1
OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj
QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpgcZBjvC47sTwSlapwEKrBDl/NccOV1tBUJpB7UlOtIzDHG2vzyxo
4xtP2wtAoLgLaXv4FeQoK1q505VnuAGZJYbTDiFWwYmMCL8xP4xEUNYHPAk3LHqW
fGpqHOAchiYmPMt/dkJmoDVIHGm9pCsNaGHH4V8GwuvcjqKT6I4rWcnatuOXg2IL
pfItQalmziM30+F4ripPe14XSQNC65U9hUpniZGG699144DfQE/Zw8s0QVwNKaQ4
wp0O29blPqDbA3BsmgiZ5CmrEkoRuh3iJc7HGpWgax9hJ7B1CKaJV35hNlbJeQVM
G1forfGRoyrBGyDcCr/b+W2+vxRFDTBw
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:42:57 2025 by rpki-client