This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File:                     WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier:          aJVyTsawxZayZLxe7EaWCf0ViBc/B2yGZ5x7dt/N5pM=
Subject key identifier:   4B:F1:84:70:46:14:32:D1:71:1D:09:5B:65:29:33:AA:04:80:71:E0
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       05E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number:          05DF
Signing time:             Mon 22 Dec 2025 22:08:43 +0000
Manifest this update:     Mon 22 Dec 2025 22:08:43 +0000
Manifest next update:     Mon 29 Dec 2025 22:08:43 +0000
Files and hashes:         1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: RicNm1w8G9LL+yC1zVAW4BwZvL4CSMpYs0CLqKcBIuo=)
                          2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: eAEKnlDfmbmvzyOLqZ04+l0qIxLGX9JSF33CVH6hcIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508 (0x5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Dec 22 22:08:43 2025 GMT
            Not After : Dec 29 22:08:43 2025 GMT
        Subject: CN=6949c16b-04b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:cd:ef:59:f5:6a:59:7d:7a:1b:6e:e7:9f:
                    e7:91:07:e9:60:c6:5e:b9:f9:13:86:59:4c:65:f5:
                    e9:85:21:2a:d6:4b:81:73:52:13:d0:6d:99:df:f6:
                    1d:9f:a5:da:cf:68:54:b1:e0:b8:10:fc:b7:8a:92:
                    2e:0c:a2:9d:9a:e1:7a:96:67:b4:44:70:54:6f:da:
                    84:0c:1a:48:f3:9d:fc:28:68:df:de:77:d1:f3:c3:
                    2f:01:28:89:c6:b1:ac:5c:ca:25:83:4c:06:2c:16:
                    ab:b7:87:4a:00:b6:4f:18:48:44:84:c5:18:86:1e:
                    02:e8:f9:79:c8:2c:81:e8:bd:25:31:d6:8c:1d:d1:
                    21:7a:b8:cd:3c:60:1f:c1:a5:87:a8:11:cf:9d:00:
                    7f:88:1c:a7:8c:6d:c7:8a:e7:24:d8:78:18:8b:95:
                    6a:79:98:b0:4b:78:a7:e0:08:e1:03:88:b5:dd:57:
                    50:b0:d3:db:18:fc:7f:fc:b4:8c:83:fa:c6:83:46:
                    f2:65:8e:32:e5:a2:53:71:8a:82:b3:c3:46:37:f9:
                    b9:2f:82:09:0e:86:cc:41:a8:c4:ee:01:ed:d0:af:
                    03:76:61:56:c2:23:94:20:7a:cc:aa:9f:61:ae:03:
                    a8:2d:96:df:5b:d6:2b:86:4c:92:d6:37:a4:b7:6f:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F1:84:70:46:14:32:D1:71:1D:09:5B:65:29:33:AA:04:80:71:E0
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:1e:8f:75:54:f8:b8:fb:13:5a:23:b5:e9:92:37:d7:e7:
         12:cd:33:7a:96:38:b6:d9:81:1d:85:6b:fb:01:ac:c5:4d:0e:
         6d:6e:67:e6:37:ca:08:f7:c3:17:0c:d7:9b:27:3a:af:7e:cd:
         77:31:d3:43:7c:e2:61:d6:c5:41:1a:b7:ee:b4:71:2f:e1:60:
         88:0b:7d:01:a6:98:91:61:f6:db:39:ec:60:e3:ce:c2:2c:ad:
         cf:44:15:e5:38:fc:72:f2:3b:2b:d5:2a:ec:2f:c8:2c:f1:f5:
         5f:72:26:3a:14:15:40:e2:5c:7d:b2:00:2f:ca:6c:39:85:7d:
         73:67:08:38:97:57:03:ed:35:f9:be:3f:93:b4:75:6d:e7:72:
         9a:1f:54:7c:70:3e:52:7e:cb:d4:7c:a7:d8:12:1b:a9:67:5a:
         ea:03:fa:77:10:d8:e2:6c:06:2d:6d:b4:e4:cb:73:dd:78:cc:
         82:3d:e0:40:41:82:6e:b8:f6:15:57:a2:34:1a:3b:d7:0c:5b:
         18:fe:1c:38:df:f5:f0:56:79:2b:a6:81:6c:5b:18:31:5b:9f:
         0c:97:bb:0b:fc:81:d9:db:79:36:f3:fb:eb:0f:4c:80:15:48:
         ed:90:a8:0b:5b:24:ac:ff:7c:14:9a:2e:19:61:a1:81:db:6b:
         9f:06:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:40 2025 by rpki-client