This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File:                     wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier:          nHgKenhRXgddTSWb84CbIzN1GvtblKJ/Xc/DnWlOB64=
Subject key identifier:   70:66:DC:B5:A4:53:E1:21:24:1C:76:97:8B:98:C3:12:38:A2:09:60
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer:       /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial:       0812
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number:          080C
Signing time:             Sat 06 Dec 2025 20:04:00 +0000
Manifest this update:     Sat 06 Dec 2025 20:04:00 +0000
Manifest next update:     Sat 13 Dec 2025 20:04:00 +0000
Files and hashes:         1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: S3liKYd8Z/AEQjI5G03voKUgcCAkBhNi/kSavUTKYiU=)
                          2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: j533qWfQDQ1HymyH0hgMDgvytaiHKZxrVSfT2G+RT2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
        Validity
            Not Before: Dec  6 20:04:00 2025 GMT
            Not After : Dec 13 20:04:00 2025 GMT
        Subject: CN=69348c30-236d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e6:91:56:d6:38:eb:f6:f5:5d:68:99:e9:b1:
                    1f:f4:1a:9d:b0:e6:25:e0:90:82:27:a2:e5:e9:e1:
                    15:9c:3c:69:5d:e1:fb:18:6a:46:bc:ff:8f:57:a8:
                    c7:2c:2d:83:7b:b4:8d:63:20:0e:b5:56:76:cf:e6:
                    33:c7:70:9a:a7:44:46:1b:a8:91:36:76:b2:6f:55:
                    61:97:8c:9b:97:eb:c6:85:88:c0:10:5f:fa:b1:a3:
                    0b:f8:e9:e2:17:05:49:41:81:c3:2b:07:ad:11:e9:
                    60:a0:7d:1f:71:c9:64:ca:a8:e6:e9:12:c3:b7:94:
                    5a:59:fe:62:38:4e:1e:a4:92:84:08:61:7f:1b:1f:
                    db:94:af:ef:3a:b6:6e:14:c7:88:f2:08:d1:91:29:
                    bd:b7:16:93:30:dd:f1:1b:39:01:c7:52:05:29:ee:
                    16:c2:c8:29:de:6d:b2:1f:d9:0f:95:91:a6:8f:01:
                    a2:5f:cb:95:62:f7:e8:3e:6e:e9:62:7d:52:c4:a4:
                    d6:5f:39:68:f3:97:1c:da:a0:80:2b:50:c8:10:27:
                    f7:8c:9e:33:1f:8a:60:22:66:e3:c6:2f:37:f3:74:
                    3a:17:8e:04:b7:40:33:6a:9f:12:6b:98:e4:d8:7b:
                    f1:e8:ff:56:ad:58:6b:b6:8b:3a:c1:de:c2:31:60:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:66:DC:B5:A4:53:E1:21:24:1C:76:97:8B:98:C3:12:38:A2:09:60
            X509v3 Authority Key Identifier:
                keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f9:aa:a2:a9:e1:48:21:47:1b:bf:16:be:97:ef:a5:10:0f:
         1b:79:fb:3c:40:96:2a:a7:9e:1f:fd:3b:8c:0a:cc:75:ef:0a:
         c8:64:f2:ca:60:f2:33:6b:ad:46:f5:ef:03:67:d9:94:ec:37:
         9c:b3:2c:c0:93:b7:10:6f:2a:45:c5:6f:3a:e5:65:c1:84:dc:
         1c:6c:fe:fe:f2:6b:9e:33:0b:c1:97:50:c0:0e:4c:0b:f6:91:
         53:6d:b9:3f:4c:6a:79:4c:f3:91:83:f7:f1:1c:48:1c:1a:4e:
         7c:6d:2f:0f:ed:a8:d3:1a:84:e1:4d:8b:65:72:98:b7:7a:d1:
         c1:76:e9:8c:f8:77:b6:ca:e1:37:5f:82:66:9d:6f:86:4d:17:
         f2:88:94:d2:03:f4:fb:5a:de:21:65:93:f9:bf:e9:7a:fb:43:
         99:e1:8d:36:1b:bc:20:14:35:0a:6b:bd:34:6b:ce:6c:5e:2b:
         83:47:36:2f:8c:c9:6f:c1:21:5a:7f:7f:71:45:38:f5:13:7a:
         25:1a:aa:4d:c3:f0:34:2c:01:92:77:d3:fe:c9:b8:ba:11:7c:
         f3:47:af:7d:df:85:b3:45:ce:c7:f2:b9:65:f7:38:cf:33:c0:
         28:89:0f:69:a5:cb:91:4b:c0:0a:3c:12:bf:44:33:3f:e6:d4:
         05:1e:ba:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:03:58 2025 by rpki-client