This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
File:                     W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json)
Hash identifier:          a23v3+fTrXjZtwlODdOdNcvO+VbVyAMXRitwFlMf3nM=
Subject key identifier:   58:B1:69:EC:11:45:60:05:99:AC:33:02:EA:45:11:B8:15:5B:82:7C
Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF
Certificate issuer:       /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF
Certificate serial:       34FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
Manifest number:          34F5
Signing time:             Mon 22 Dec 2025 14:51:28 +0000
Manifest this update:     Mon 22 Dec 2025 14:51:27 +0000
Manifest next update:     Mon 29 Dec 2025 14:51:27 +0000
Files and hashes:         1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: E85e2cUTi+e2QobwLN7ds4kdLyoPKjCtUGiGVjP6g94=)
                          2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: IKZJx6OCFD6GBq76P/bU7hwkvd/2T4k44b0sOjzuv4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl
                          rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13563 (0x34fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D81D4, serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF
        Validity
            Not Before: Dec 22 14:51:27 2025 GMT
            Not After : Dec 29 14:51:27 2025 GMT
        Subject: CN=69495aef-0834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e2:0b:64:f9:2d:e8:20:44:bf:3b:2a:fc:12:
                    d5:fb:9d:ce:32:fe:6d:78:65:3d:46:c2:b3:16:1f:
                    fb:eb:91:9c:e9:72:75:68:ce:1d:59:25:8c:8b:9b:
                    bc:04:20:3a:c6:3d:1f:9f:fb:a3:6d:7d:c3:61:a4:
                    d2:f6:f2:61:11:9b:01:fb:6b:04:8f:ec:47:ae:f1:
                    61:d3:a5:79:3e:e7:c6:ca:f9:9e:b6:d1:03:43:af:
                    30:25:42:e6:43:01:91:63:7e:88:af:6e:69:f3:49:
                    b7:56:54:b7:3d:64:b4:27:d4:1c:92:13:33:b5:04:
                    6c:87:05:39:fb:a0:e0:47:8b:84:f5:67:4a:b2:da:
                    38:da:f1:ae:a4:2d:c8:26:39:99:41:0b:df:80:bf:
                    18:d2:9e:6f:7c:2c:31:24:02:50:3b:54:07:ce:50:
                    55:2f:76:7b:e3:ef:1d:3a:22:41:c1:78:55:b9:16:
                    c8:92:2e:fe:ae:20:ae:da:8a:d5:64:54:cd:5c:4a:
                    f6:21:74:14:41:f5:a9:90:31:01:c6:08:25:6a:44:
                    6c:52:42:34:66:97:6e:00:ef:fc:1c:7c:09:b9:64:
                    4f:b4:56:75:ac:d8:9b:9f:02:ee:e8:35:41:c0:5e:
                    2d:f3:8f:5b:af:2a:71:91:94:a2:f2:44:07:60:6d:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B1:69:EC:11:45:60:05:99:AC:33:02:EA:45:11:B8:15:5B:82:7C
            X509v3 Authority Key Identifier:
                keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:af:4a:d8:19:6d:b0:a3:4c:2b:ab:16:34:cc:78:56:d3:
         d3:f3:0e:92:27:64:1b:ce:b7:5e:b8:f9:23:bb:97:9f:97:44:
         3c:58:80:fc:31:95:e7:2d:3a:10:d6:15:f0:ee:64:97:05:ba:
         8d:80:1f:4c:b1:10:53:cd:84:88:68:d4:c7:30:bb:f9:dc:79:
         bd:07:a0:a2:c9:4f:24:b0:34:04:84:4b:0f:d3:14:32:76:6e:
         2b:80:74:8b:38:28:bb:69:36:f9:97:dc:41:0c:a4:9f:41:a4:
         7b:30:f7:d8:d5:6f:7e:43:01:df:93:23:bb:17:45:d8:0e:6c:
         67:7f:82:73:64:a5:46:24:53:bd:f2:67:1c:78:e2:78:6d:10:
         e3:e7:75:a6:ac:26:b6:e8:7d:76:25:bb:27:a1:4a:d8:58:4f:
         f9:a5:e9:ba:08:8c:16:8e:fa:13:89:c1:1b:c7:9b:e0:1c:be:
         89:6a:83:4a:2e:fb:40:cb:8a:18:ef:0e:b1:c1:cd:b5:79:8d:
         6e:02:ae:9c:21:ec:86:e6:58:ab:59:b4:c1:58:0e:a5:b4:2e:
         11:71:aa:41:ff:9f:0d:f3:34:ce:c0:d9:80:cd:6f:c8:d0:07:
         4d:d7:86:76:30:2f:02:f1:0a:2f:bc:b5:ce:ce:5c:e6:d0:46:
         07:33:e5:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgxRDQxMTAvBgNVBAUTKDVCNkFGRUM5QUVFOUVBRDREQzk2NDYzQkExQTlDQjI3
MjMzRDZERkYwHhcNMjUxMjIyMTQ1MTI3WhcNMjUxMjI5MTQ1MTI3WjAYMRYwFAYD
VQQDDA02OTQ5NWFlZi0wODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3eILZPkt6CBEvzsq/BLV+53OMv5teGU9RsKzFh/765Gc6XJ1aM4dWSWMi5u8
BCA6xj0fn/ujbX3DYaTS9vJhEZsB+2sEj+xHrvFh06V5PufGyvmettEDQ68wJULm
QwGRY36Ir25p80m3VlS3PWS0J9QckhMztQRshwU5+6DgR4uE9WdKsto42vGupC3I
JjmZQQvfgL8Y0p5vfCwxJAJQO1QHzlBVL3Z74+8dOiJBwXhVuRbIki7+riCu2orV
ZFTNXEr2IXQUQfWpkDEBxgglakRsUkI0ZpduAO/8HHwJuWRPtFZ1rNibnwLu6DVB
wF4t849brypxkZSi8kQHYG3KHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFixaewR
RWAFmawzAupFEbgVW4J8MB8GA1UdIwQYMBaAFFtq/smu6erU3JZGO6GpyycjPW3/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODFENC9EQUUzODJBQTFE
OUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0VGNsa1k3b2FuTEp5TTli
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1cyci15YTdwNnRUY2xrWTdvYW5MSnlNOWJmOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODFENC9EQUUzODJBQTFEOUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0
VGNsa1k3b2FuTEp5TTliZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCegK9K2BltsKNMK6sWNMx4VtPT8w6SJ2QbzrdeuPkju5efl0Q8WID8
MZXnLToQ1hXw7mSXBbqNgB9MsRBTzYSIaNTHMLv53Hm9B6CiyU8ksDQEhEsP0xQy
dm4rgHSLOCi7aTb5l9xBDKSfQaR7MPfY1W9+QwHfkyO7F0XYDmxnf4JzZKVGJFO9
8mcceOJ4bRDj53WmrCa26H12JbsnoUrYWE/5pem6CIwWjvoTicEbx5vgHL6JaoNK
LvtAy4oY7w6xwc21eY1uAq6cIeyG5lirWbTBWA6ltC4RcapB/58N8zTOwNmAzW/I
0AdN14Z2MC8C8QovvLXOzlzm0EYHM+VE
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:30 2025 by rpki-client