This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          9OdgD0jKt1aSTRMz0Qt6O8KwVWbidh0AocfFMVsl9V4=
Subject key identifier:   B0:6D:2F:D1:B7:62:5C:19:FA:D4:CC:9E:E4:80:CB:83:70:EE:3F:D2
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       070E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          06FA
Signing time:             Thu 18 Dec 2025 21:22:24 +0000
Manifest this update:     Thu 18 Dec 2025 21:22:23 +0000
Manifest next update:     Thu 25 Dec 2025 21:22:23 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: gfYJw4ecCYXkoNYWlLLvxvidFrRgNdwhHwhIXxVZ9vE=)
                          2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: gkjZFv8+a1pInAhzOPTg4sqJj5qO4+TAvcYmCjz+nlg=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: vTpHqcdtapOqI/Gsr+oA78H11F3thCsrtmSVIOkFq0M=)
                          4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: tEC8bz6FGj0t4tths2MmaU0LJkI5GmyVxPNnRw1U1sM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Dec 18 21:22:23 2025 GMT
            Not After : Dec 25 21:22:23 2025 GMT
        Subject: CN=6944708f-6ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ea:f4:a1:e9:5e:42:4c:3f:4c:2a:83:2f:96:
                    d4:5c:cd:4e:a7:85:d0:08:17:e7:5d:d6:61:23:f4:
                    aa:b7:5a:4d:61:50:67:2f:6a:7e:61:cf:49:7a:cc:
                    02:bf:97:64:e5:1b:2a:18:bd:96:49:5f:b9:c9:7c:
                    24:0e:49:dd:6c:1f:2c:5b:27:90:dc:11:ca:33:df:
                    a5:82:34:06:9f:f7:2c:59:68:a2:9a:f8:d1:85:d5:
                    11:8c:23:da:0f:24:fb:03:61:48:73:4e:b5:90:0f:
                    21:8e:9c:89:13:56:b3:80:e6:c8:c4:8c:01:1e:ea:
                    47:89:e7:0a:fb:0a:80:79:b4:be:8c:01:40:d9:df:
                    a9:bc:3e:e3:dd:b8:dd:ac:66:e0:47:05:a6:62:02:
                    7e:86:70:8a:74:05:49:74:d7:e0:1b:52:a8:8e:9c:
                    5d:32:a6:d5:af:55:7d:24:1a:20:dd:cb:0f:6e:96:
                    34:76:a7:6b:1e:99:96:33:87:ef:c2:64:25:9e:8b:
                    bd:d7:47:6f:c4:27:5e:5d:26:57:67:76:92:0d:1a:
                    33:4a:04:70:7f:8f:bd:97:f9:c7:7a:62:f3:d7:3c:
                    df:96:4c:20:ba:2a:e0:9b:b2:1b:77:b7:8a:a1:78:
                    2d:e1:e3:51:ad:f0:98:22:53:0c:29:63:ba:c9:fb:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6D:2F:D1:B7:62:5C:19:FA:D4:CC:9E:E4:80:CB:83:70:EE:3F:D2
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ec:92:aa:94:e0:43:92:70:49:40:36:db:b1:c0:07:c4:ad:
         7d:88:02:bb:5f:86:5b:39:d5:5e:24:31:d7:00:42:c7:ba:62:
         59:0b:71:dc:6a:f6:d6:6c:62:46:e8:a7:5f:8a:89:ff:40:64:
         b9:77:41:d4:62:f4:78:c0:9d:b7:7d:00:b2:ee:cf:94:e5:03:
         70:fb:fc:86:59:eb:b3:c2:5a:53:f3:18:ab:1c:3c:87:97:07:
         a7:b2:62:df:30:b9:14:14:e5:59:ad:a1:d2:b2:95:5f:98:7e:
         00:5d:5a:bb:84:9e:e0:34:53:bb:74:cd:90:d5:dd:bf:5a:93:
         87:c7:7e:a5:7b:22:da:1a:c3:42:3e:5c:ba:ad:79:26:14:45:
         ad:79:7b:fc:c1:da:aa:99:ac:6b:e0:5d:6f:1e:f0:81:75:74:
         9a:18:4d:9e:02:b1:56:6a:29:f1:54:19:b3:48:b8:9c:35:e1:
         c7:ef:04:19:fd:83:d1:4b:5f:d9:4b:92:ed:0b:44:21:e3:b9:
         4c:93:12:32:76:56:fb:99:f4:d2:f3:e3:69:c5:49:fc:9b:71:
         e7:1a:06:87:41:80:5b:26:62:90:51:dd:6d:6b:0c:4c:d8:f2:
         88:4d:a0:b3:f5:88:6b:63:c8:73:1f:ca:0d:6c:18:27:af:fb:
         87:a9:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:40:40 2025 by rpki-client