This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
File:                     w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft (raw, json)
Hash identifier:          W7zbZgkD4At/yn590X9v76X/yj5x1H0xA/aOQfD/xTI=
Subject key identifier:   4C:D7:0E:E3:AE:1D:D1:DD:AE:12:EB:77:7B:3C:BF:8B:35:8F:D1:31
Authority key identifier: C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1
Certificate issuer:       /CN=A91B1AE1/serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
Manifest number:          0100
Signing time:             Tue 23 Dec 2025 04:12:48 +0000
Manifest this update:     Tue 23 Dec 2025 04:12:48 +0000
Manifest next update:     Tue 30 Dec 2025 04:12:48 +0000
Files and hashes:         1: w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl (hash: Id4Lq6pZB7NWPnyOOq+w7YKoyGkzMcHYegt8g8C450I=)
                          2: 1A760026E06311EFB6B86F0AC4F9AE02.roa (hash: BcuVtmOHXLPxkjx7hblzpyOxk5cBOskxSlEb1CxWfWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1AE1, serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
        Validity
            Not Before: Dec 23 04:12:48 2025 GMT
            Not After : Dec 30 04:12:48 2025 GMT
        Subject: CN=694a16c0-a511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0f:f9:8f:a7:8c:a6:60:3f:80:65:6d:05:04:
                    7d:55:b2:09:a3:1c:a3:9b:ac:b4:f3:6a:76:b1:b5:
                    fb:ce:88:0e:b5:39:60:f1:83:c0:7b:c3:d5:3b:8f:
                    cc:aa:00:7e:ae:1c:2f:a3:74:b0:7e:29:1b:c5:40:
                    8e:f9:d8:5d:00:73:a9:ef:5f:1a:e0:8b:62:a3:3a:
                    4a:1f:46:a6:ed:06:6a:61:12:19:be:9a:60:eb:47:
                    4d:73:d8:25:89:8a:09:1f:0b:c0:dd:dd:59:9d:02:
                    56:15:06:60:b0:19:ee:2f:4c:9e:73:4b:09:ca:7b:
                    cf:a4:58:e9:11:5c:52:34:67:21:9b:c8:00:d3:28:
                    7c:38:bb:49:39:58:78:56:80:4b:e8:d0:ab:bc:3c:
                    16:e9:68:b4:87:3d:0a:8f:a6:fa:36:a0:dc:bf:98:
                    5b:be:36:d6:3a:0b:f7:a7:a6:3a:81:4a:64:7d:e1:
                    02:af:22:40:9d:fb:e5:01:3a:a7:0a:2c:c4:71:4c:
                    60:5e:23:16:8a:cf:5f:9f:ef:69:95:40:9f:8a:e5:
                    09:82:e0:25:dc:26:c3:fd:4a:c2:07:f4:a1:b4:e9:
                    38:37:71:38:42:d5:5f:63:95:b9:f8:f1:6c:ec:f0:
                    99:0e:4b:4c:d5:ab:43:f3:e3:c9:31:d3:37:74:08:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D7:0E:E3:AE:1D:D1:DD:AE:12:EB:77:7B:3C:BF:8B:35:8F:D1:31
            X509v3 Authority Key Identifier:
                keyid:C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fe:0a:a6:10:af:ea:81:ae:e8:fc:78:17:7c:4f:38:e3:83:
         84:41:ac:b0:27:07:dd:ec:c1:0f:78:93:76:ae:5b:11:76:24:
         f9:4f:52:b2:08:63:48:4b:8c:0e:d7:d3:db:7a:b5:6e:1d:9c:
         7e:34:e8:c1:a5:bf:f1:5e:a4:77:ee:dc:3b:5e:94:27:d0:c2:
         43:a6:1f:9c:88:0c:77:ba:ec:a4:cb:23:51:56:bf:43:a1:4b:
         47:6e:5f:52:e4:98:59:7e:c8:f8:c5:c1:23:f4:b9:39:76:ad:
         c3:44:97:ad:b6:29:f1:dc:58:09:54:1c:06:8f:fb:c8:2c:2f:
         b8:93:e6:3e:77:3e:cd:16:df:32:96:80:49:4d:7b:ce:0d:b6:
         2a:1c:c2:08:20:bc:64:2c:07:1a:bd:80:2e:13:3b:7d:38:d5:
         85:8e:15:44:8a:4b:0d:fe:2b:90:4b:19:15:cf:a9:de:88:46:
         65:6d:36:fd:c1:2a:a3:51:89:19:ea:89:5c:86:35:7c:ea:b6:
         e8:e0:71:6e:b7:87:70:0f:05:a1:f3:a8:70:5f:0b:00:54:76:
         54:bf:3c:16:7b:e0:b8:6c:17:57:f2:5e:c2:49:df:78:36:a7:
         66:18:7e:a0:bd:30:ee:e1:5e:fa:71:63:b0:40:b0:cc:9b:54:
         80:9a:86:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFBRTExMTAvBgNVBAUTKEMzOTNGRTRFMzVBMjY3NDRCRjM3MDlCQzM2NzY2MDQ4
OTI3MkQyRDEwHhcNMjUxMjIzMDQxMjQ4WhcNMjUxMjMwMDQxMjQ4WjAYMRYwFAYD
VQQDDA02OTRhMTZjMC1hNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2g/5j6eMpmA/gGVtBQR9VbIJoxyjm6y082p2sbX7zogOtTlg8YPAe8PVO4/M
qgB+rhwvo3SwfikbxUCO+dhdAHOp718a4ItiozpKH0am7QZqYRIZvppg60dNc9gl
iYoJHwvA3d1ZnQJWFQZgsBnuL0yec0sJynvPpFjpEVxSNGchm8gA0yh8OLtJOVh4
VoBL6NCrvDwW6Wi0hz0Kj6b6NqDcv5hbvjbWOgv3p6Y6gUpkfeECryJAnfvlATqn
CizEcUxgXiMWis9fn+9plUCfiuUJguAl3CbD/UrCB/ShtOk4N3E4QtVfY5W5+PFs
7PCZDktM1atD8+PJMdM3dAgrrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzXDuOu
HdHdrhLrd3s8v4s1j9ExMB8GA1UdIwQYMBaAFMOT/k41omdEvzcJvDZ2YEiSctLR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUFFMS9GQzgyNDNGNDY0
RTgxMUVGOUM0MEY4NUFDNEY5QUUwMi93NVAtVGpXaVowU19Od204Tm5aZ1NKSnkw
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c1UC1UaldpWjBTX053bThOblpnU0pKeTB0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUFFMS9GQzgyNDNGNDY0RTgxMUVGOUM0MEY4NUFDNEY5QUUwMi93NVAtVGpXaVow
U19Od204Tm5aZ1NKSnkwdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAu/gqmEK/qga7o/HgXfE8444OEQaywJwfd7MEPeJN2rlsRdiT5T1Ky
CGNIS4wO19PberVuHZx+NOjBpb/xXqR37tw7XpQn0MJDph+ciAx3uuykyyNRVr9D
oUtHbl9S5JhZfsj4xcEj9Lk5dq3DRJettinx3FgJVBwGj/vILC+4k+Y+dz7NFt8y
loBJTXvODbYqHMIIILxkLAcavYAuEzt9ONWFjhVEiksN/iuQSxkVz6neiEZlbTb9
wSqjUYkZ6olchjV86rbo4HFut4dwDwWh86hwXwsAVHZUvzwWe+C4bBdX8l7CSd94
NqdmGH6gvTDu4V76cWOwQLDMm1SAmoZH
-----END CERTIFICATE-----
Generated at Tue Dec 23 18:05:44 2025 by rpki-client