This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
File:                     wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json)
Hash identifier:          y4Hz699/9h5WQ5sjp2TmLTixgJ3p3bkakNzd0vP3lac=
Subject key identifier:   6D:6A:93:5E:D8:17:05:69:31:87:10:79:20:60:2D:9F:64:35:F4:93
Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
Certificate issuer:       /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Certificate serial:       07FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
Manifest number:          07F6
Signing time:             Mon 22 Dec 2025 20:24:06 +0000
Manifest this update:     Mon 22 Dec 2025 20:24:06 +0000
Manifest next update:     Mon 29 Dec 2025 20:24:06 +0000
Files and hashes:         1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: 2NTL127xviVxqBVaiQN+e7JUFi0ABh5LX9xq0H6DkLY=)
                          2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: FR2j5cdA1il7bWue4siZvyTa/nS4sn/xHWVg4a7OgZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl
                          rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
        Validity
            Not Before: Dec 22 20:24:06 2025 GMT
            Not After : Dec 29 20:24:06 2025 GMT
        Subject: CN=6949a8e6-6baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:9a:4e:dc:84:e0:d1:00:f4:9d:7d:83:93:
                    b8:b5:46:e0:4f:03:86:9d:2f:c2:b5:c8:27:5f:1e:
                    d3:47:7c:fa:48:db:b9:65:25:44:f7:2b:c5:cf:90:
                    3f:7f:33:e1:c6:95:31:62:c5:dd:69:da:80:d0:43:
                    7a:b7:58:86:46:ea:d8:bb:8a:31:12:e1:0c:1a:9e:
                    c0:1c:b7:45:9a:8e:1f:1a:e7:80:d4:9a:34:77:e6:
                    dc:9a:5c:85:85:b9:a5:07:b5:7b:a7:0a:51:8c:6a:
                    ac:62:8e:2e:c7:02:b5:82:38:ce:1d:7a:78:4f:b1:
                    50:77:09:0d:6d:da:ed:81:11:20:1f:b5:53:4a:f3:
                    af:56:86:9f:d2:5b:9c:5b:1f:33:05:66:49:1f:1a:
                    31:82:66:74:bf:89:06:cf:64:d7:8b:cb:f9:14:c7:
                    e1:ef:07:0e:3a:51:16:19:8e:68:26:12:d5:b3:33:
                    7f:e4:fe:c8:b7:21:35:68:27:29:f4:8a:fa:93:8f:
                    c4:6a:47:cf:e8:0e:c5:da:bf:b5:2e:2c:9e:64:93:
                    80:cb:64:3b:69:c8:fe:fb:8f:f7:ea:ab:4d:09:5b:
                    85:ee:4a:00:ad:6b:41:49:ee:e6:92:16:a7:8b:d0:
                    8d:9a:ee:40:eb:25:4e:d6:1a:c5:9b:b2:8c:ed:bb:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6A:93:5E:D8:17:05:69:31:87:10:79:20:60:2D:9F:64:35:F4:93
            X509v3 Authority Key Identifier:
                keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:62:a6:c1:19:c2:80:41:13:cf:84:17:22:1b:3d:58:8c:3d:
         55:84:2d:60:ef:75:44:90:3f:74:e3:0d:8c:d3:eb:87:cb:ee:
         49:28:4f:ca:01:07:07:ae:5b:9a:8d:cc:bd:3c:11:16:28:31:
         e2:13:ba:ae:02:dc:93:12:a7:00:7e:77:bc:9a:cc:64:73:d5:
         80:c2:72:9a:52:96:72:fd:90:41:69:a4:db:94:bc:ac:d4:d6:
         d4:b1:26:9c:2a:52:99:8e:62:df:3d:f8:5e:0a:6e:5c:bf:34:
         89:cb:e4:13:90:ee:b3:49:78:06:f8:c4:31:bc:50:6b:b9:2c:
         08:5d:d5:a2:b9:64:7a:68:0d:9a:48:c9:b0:e1:86:72:0e:45:
         ed:12:6d:20:f2:0e:3a:37:a6:d3:d8:f7:ff:62:7c:37:41:0c:
         ea:36:2a:9d:ac:d0:33:e0:f1:f9:d5:51:96:18:7f:6d:2d:83:
         de:10:c2:f7:98:49:c4:a9:69:2e:e6:30:69:3e:42:3e:7a:8a:
         28:b9:18:cc:24:a8:d6:a8:31:2e:db:c9:fb:58:2f:10:ef:6d:
         17:2d:fe:07:62:d3:67:68:d1:e7:af:61:e4:9a:31:89:38:07:
         6a:bb:95:17:ed:14:ca:a8:6f:81:65:fa:80:4a:25:9f:0a:88:
         5a:50:d3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:05 2025 by rpki-client