This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          Se0MQkNvxNrAvcKrq5ihJpZ5L4U5bLFaaHmKeyjB5pM=
Subject key identifier:   FD:EF:CE:23:0B:CE:24:4E:4F:DB:B2:1B:85:D3:F8:B1:BE:B4:52:87
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3676
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          3584
Signing time:             Thu 04 Dec 2025 14:43:05 +0000
Manifest this update:     Thu 04 Dec 2025 14:43:05 +0000
Manifest next update:     Thu 11 Dec 2025 14:43:05 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: OcsOLRzidij5F8ImZG5oPFClIKTRGPuN/rh2VNFBq0c=)
                          2: 61352DFCC46F11F0848EF936C4F9AE02.roa (hash: rzFGoJ54qGibQHLbmWB2hMncJkQRjlW4zZk27bctTrE=)
                          3: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: bdFFvc6eNQU1+yjsu6zdGpd9HjnTWxx0y+6B+LSnliU=)
                          4: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
                          5: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
                          6: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
                          7: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
                          8: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
                          9: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
                          10: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
                          11: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
                          12: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
                          13: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
                          14: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
                          15: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
                          16: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
                          17: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
                          18: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
                          19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
                          20: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
                          21: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
                          22: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
                          23: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: FY0t2N10iRK+Zr0ip8svKKHBrZSNX6MAybdSYEAFs30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13942 (0x3676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Dec  4 14:43:05 2025 GMT
            Not After : Dec 11 14:43:05 2025 GMT
        Subject: CN=69319df9-51e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:34:e6:3b:ca:93:3c:b8:8c:2c:26:a9:c7:
                    93:05:2f:1e:d8:10:ed:83:22:ad:9d:7d:2e:12:c3:
                    09:8b:50:8e:62:d6:7d:30:9c:25:ca:28:0d:0a:8f:
                    6b:fa:55:59:18:8c:70:e4:ac:f1:8f:6a:eb:62:62:
                    38:84:76:1a:ad:36:56:31:90:44:d8:10:c3:c3:a5:
                    86:ab:da:d6:31:3f:00:ec:bd:4c:ec:73:7b:0b:92:
                    de:18:1c:4f:5a:93:c0:28:93:e2:fc:08:f6:c7:72:
                    89:0d:fa:ad:c9:0e:bd:cc:e4:27:e0:86:2c:ba:c2:
                    3b:88:0a:6c:8f:70:70:1d:29:9b:d4:01:57:b3:27:
                    40:c4:45:05:1a:a3:c4:3c:80:0b:35:90:fa:e5:d7:
                    79:54:56:32:69:47:cb:62:f8:b8:0e:c3:e3:07:6d:
                    42:c1:d9:6c:44:c2:3f:75:56:14:9f:c3:97:92:71:
                    6c:5b:7a:97:25:fe:4b:1a:35:61:c1:04:d8:21:fc:
                    13:2e:bb:ce:f1:bd:ca:54:f6:cd:da:50:00:48:2a:
                    82:b6:97:f3:29:25:31:46:e1:be:ce:13:1e:89:39:
                    c4:9f:9f:de:5a:6a:4b:fa:ec:93:3f:80:68:27:2e:
                    69:9e:75:ca:45:2b:ff:95:16:4f:15:20:a3:5a:a8:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:CE:23:0B:CE:24:4E:4F:DB:B2:1B:85:D3:F8:B1:BE:B4:52:87
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a1:cd:f4:b1:66:58:ee:41:96:61:51:c1:81:6e:4d:d2:ad:
         90:a9:30:d9:36:f1:b4:4a:87:9b:da:38:ba:51:ee:1e:24:04:
         12:05:13:c4:80:f1:d5:56:73:06:7d:05:69:6f:d1:39:4e:b0:
         51:30:76:64:06:b7:e9:a8:19:18:35:ab:fc:a2:45:3b:b2:70:
         c3:d7:59:16:4f:ae:7b:09:ec:28:07:6c:af:3a:fa:c8:2d:9a:
         f1:30:fa:5c:fe:c4:19:9e:eb:b6:60:61:c2:ad:ab:76:6e:f2:
         9d:9e:35:8a:84:ea:8e:0a:27:11:4b:d0:dc:65:ee:51:b3:e1:
         a7:8c:5c:e3:89:7c:3d:7c:fc:a1:f6:a1:fc:09:00:0f:04:ab:
         dd:0a:4a:e2:b9:fa:33:46:4b:17:9f:11:12:68:0c:5b:cf:d1:
         f4:5d:97:9c:34:ce:cc:b8:06:b2:41:cd:06:72:81:74:10:c9:
         d6:f0:55:f4:2c:ff:fc:05:17:3d:42:f2:93:26:49:83:df:51:
         39:44:5b:fc:68:e8:a1:af:1b:94:ae:0e:a2:69:4a:bc:3e:f6:
         7c:4b:d6:a2:d9:90:ed:e5:6e:a2:21:6d:bb:9c:d4:2d:07:40:
         03:b1:88:3b:22:ab:c8:7d:b0:63:d0:67:4e:d8:b1:41:f0:b6:
         01:88:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:26:48 2025 by rpki-client