This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
File:                     wpOM5j17miRX6TKieulx0gcEp_0.mft (raw, json)
Hash identifier:          HBnnc6vSF2a5JHabT2L94Lwkoqubk6j1a801OVQjrRk=
Subject key identifier:   B4:B0:B1:2E:B3:65:C1:3A:2E:6D:D3:4C:FC:CF:16:C0:A3:4A:05:19
Authority key identifier: C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD
Certificate issuer:       /CN=A91BB5D6/serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
Manifest number:          CB
Signing time:             Sun 21 Dec 2025 04:59:45 +0000
Manifest this update:     Sun 21 Dec 2025 04:59:45 +0000
Manifest next update:     Sun 28 Dec 2025 04:59:45 +0000
Files and hashes:         1: wpOM5j17miRX6TKieulx0gcEp_0.crl (hash: pg40tG+/HknZ513/FJQ3QtmhFbTwbzTl0Z4WvovIZjg=)
                          2: EBA68084CB5011F0931F9B82C4F9AE02.roa (hash: 9fQAL/bzJXwpZXC3gS3XqEhK3DPphX2H+iZZTEZAEJY=)
                          3: 486461F6AFD211EF96F7E025C4F9AE02.roa (hash: atU5jRflrWRdDeNRrXad3/x5zwvsglIX5TcPYZiGeNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D6, serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
        Validity
            Not Before: Dec 21 04:59:45 2025 GMT
            Not After : Dec 28 04:59:45 2025 GMT
        Subject: CN=69477ec1-ebb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:da:0c:97:97:dc:3f:d7:50:31:d6:37:a8:
                    81:46:24:cf:85:3a:24:0b:f3:da:35:f2:6b:a0:cf:
                    95:f0:36:b0:9c:5a:45:8e:a1:0a:28:bf:e9:cc:7e:
                    ef:22:04:c1:a0:5c:2f:56:30:ec:57:d1:1d:27:92:
                    b4:db:b6:fb:99:71:e0:9e:91:5a:91:68:fc:05:dc:
                    7a:f6:a3:37:cb:b1:f6:d1:fe:2f:22:41:d9:ed:4a:
                    22:c5:a4:6d:a9:5e:55:bf:17:1f:ee:d3:70:e5:e0:
                    7a:ab:e3:86:b7:12:71:dc:fe:15:52:80:52:27:f2:
                    e1:0b:20:11:69:8d:e6:4b:f2:34:e0:ae:96:f4:63:
                    a0:86:16:c9:b4:66:70:b4:e4:82:76:54:84:dc:57:
                    bd:85:9e:a8:ff:57:03:88:ba:b4:34:fb:25:d0:73:
                    80:21:d8:9e:49:97:6a:34:27:44:f0:81:f9:d5:07:
                    82:7b:2c:76:78:6a:37:44:08:c0:86:62:0c:f4:6f:
                    9e:3a:ba:5c:5a:6e:7d:38:9a:37:d1:08:bf:15:9b:
                    ad:2d:41:8e:01:d7:08:b9:e6:73:39:a2:03:d1:49:
                    13:ae:c5:de:be:01:dd:7e:5a:c9:37:68:fa:2f:51:
                    bd:74:12:71:fe:e1:09:6b:45:83:75:db:2a:54:28:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B0:B1:2E:B3:65:C1:3A:2E:6D:D3:4C:FC:CF:16:C0:A3:4A:05:19
            X509v3 Authority Key Identifier:
                keyid:C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:d9:84:1e:d2:9c:b2:a8:58:73:49:27:ad:96:ed:39:13:
         9e:07:ef:ad:53:f0:16:22:fa:bb:9a:7e:dd:40:99:3e:7b:7c:
         63:04:5f:58:f5:b3:26:8c:88:12:7e:33:99:5d:b5:f5:45:73:
         ec:5a:40:75:08:77:20:f6:87:60:a0:36:03:50:6a:28:a8:3f:
         a2:02:ed:9b:04:e4:63:2e:f8:42:5e:94:00:a4:2e:51:f3:cb:
         5c:cc:48:ac:d4:88:d1:56:cd:ff:69:19:fc:ab:bc:9d:cb:e6:
         93:50:79:81:ff:90:46:b8:fe:c0:e2:e6:df:26:97:f1:e8:e6:
         24:ce:81:af:6d:c2:06:d6:67:b9:ab:b4:58:14:90:74:22:84:
         6e:04:7a:49:51:40:c7:bd:d8:53:1e:bd:ad:08:2f:25:57:53:
         14:26:cd:3c:a4:48:fd:f7:a3:b1:66:ad:bb:ac:99:51:5f:6f:
         ff:c3:6d:7a:da:84:33:59:0a:52:09:44:04:20:e8:17:18:b7:
         72:fb:9a:27:8c:d7:97:b2:ef:99:2c:eb:88:54:39:cb:97:43:
         b1:dd:60:ef:bc:96:43:dc:90:84:80:ce:8f:01:c6:0b:70:2a:
         ef:e4:58:f4:64:0c:24:8d:a0:77:3d:d7:6b:6f:cc:44:b1:a8:
         f8:7e:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:35:22 2025 by rpki-client