This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
File:                     WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft (raw, json)
Hash identifier:          GFaBOF/yuApF3Mud7gjqhmmfCG/WYwpHdk0Rn2/kx5M=
Subject key identifier:   1B:2D:C8:E7:3A:E1:AC:44:0F:54:59:24:25:80:A0:07:49:8C:AF:92
Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
Certificate issuer:       /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Certificate serial:       0C7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
Manifest number:          0C5A
Signing time:             Mon 22 Dec 2025 18:15:38 +0000
Manifest this update:     Mon 22 Dec 2025 18:15:37 +0000
Manifest next update:     Mon 29 Dec 2025 18:15:37 +0000
Files and hashes:         1: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl (hash: 7qhAT7V/Z6JGqNIragS/deGFFvh0kwvlDoUAYKRMP9w=)
                          2: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (hash: Px6aMKtlWF5XwCjucHGFP24YGenLJrBION7t9QonxCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7E85, serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
        Validity
            Not Before: Dec 22 18:15:37 2025 GMT
            Not After : Dec 29 18:15:37 2025 GMT
        Subject: CN=69498aca-a401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:49:60:a2:fe:a0:2b:d9:b8:9f:07:a1:54:
                    55:99:6e:ce:fc:b0:5e:54:9f:51:f3:cf:f6:be:fe:
                    f8:77:ee:0f:09:0d:27:44:88:df:99:14:77:93:42:
                    80:ea:0e:52:4d:fd:a4:10:28:d9:f7:43:dd:c1:97:
                    37:ac:67:88:9a:0e:d7:01:f9:b2:a7:d7:a7:f2:44:
                    98:b5:ca:c1:50:8f:26:a4:55:b4:d7:80:ab:49:b2:
                    a1:67:84:7a:30:c3:98:91:b3:bc:74:06:e2:5d:53:
                    68:d3:62:fe:71:2f:46:78:fd:45:88:c3:82:04:e5:
                    55:d8:35:86:59:ce:5c:4c:9d:54:aa:49:09:a8:fb:
                    59:17:9d:b1:52:e1:5e:1b:36:40:3e:54:31:5d:dd:
                    6c:76:53:25:69:d1:51:fa:ec:b7:ce:4a:02:19:48:
                    55:6d:6c:30:3e:05:37:1b:54:00:29:1f:ad:35:e8:
                    47:e2:4d:43:40:34:0e:5f:1a:6e:06:a6:1d:32:c9:
                    9a:2f:97:89:51:44:91:2c:24:62:e2:67:f3:fd:59:
                    a5:0e:f3:b0:43:2d:67:ce:2e:ef:4d:df:70:af:c2:
                    c7:d8:10:56:9b:8a:21:7d:97:a1:ee:99:ca:e0:7a:
                    d8:1e:83:65:3a:f6:46:f4:f7:59:59:b6:53:22:d5:
                    2d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2D:C8:E7:3A:E1:AC:44:0F:54:59:24:25:80:A0:07:49:8C:AF:92
            X509v3 Authority Key Identifier:
                keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:03:7c:03:bc:b2:a1:9c:a0:51:29:76:bc:b1:e2:08:78:c2:
         dc:16:ce:59:22:a0:1d:98:11:31:b2:01:f9:48:fd:31:e6:4f:
         25:cc:66:e3:6c:b9:1a:69:c4:c6:49:66:76:1d:e7:88:f9:01:
         58:1a:0a:83:3d:78:53:3e:f0:e0:d9:e5:41:d9:c3:a8:9e:d8:
         d5:5f:9d:c8:bb:da:e5:f3:42:e3:02:a6:94:de:d6:03:15:fe:
         58:ed:0c:08:2c:75:df:bb:a6:4f:15:8e:cc:1f:58:8f:0c:9d:
         3a:d0:8a:5f:f6:7b:cd:d2:ca:b9:57:f5:af:1b:4e:c4:5f:9d:
         cf:ed:80:8f:10:05:a5:cd:d1:6b:3b:07:c3:fa:26:87:ca:79:
         fa:f8:4c:6d:ed:aa:cf:18:de:09:a6:99:73:e9:2e:1c:e7:3f:
         c3:76:b8:93:1e:9e:89:04:5f:ea:5c:89:98:04:d9:ba:20:fc:
         ee:53:26:53:a0:72:fc:c9:a4:51:3d:ed:15:b6:8d:d5:73:a1:
         87:bc:e4:92:84:9e:1c:cc:a1:98:7c:1c:6e:5a:c3:88:01:52:
         e6:33:57:4e:ae:5f:5a:eb:64:0f:b0:c2:d7:98:43:99:21:79:
         88:c5:fe:8d:e6:5e:39:e5:79:9b:b9:1d:9c:55:e2:0d:64:2f:
         bf:fe:8d:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdFODUxMTAvBgNVBAUTKDU5Njg1MkQ1Mjk5NEZCQjY3QTYzNzlBQjFFMEFGNTE0
NTUzRUU4ODYwHhcNMjUxMjIyMTgxNTM3WhcNMjUxMjI5MTgxNTM3WjAYMRYwFAYD
VQQDDA02OTQ5OGFjYS1hNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqP1JYKL+oCvZuJ8HoVRVmW7O/LBeVJ9R88/2vv74d+4PCQ0nRIjfmRR3k0KA
6g5STf2kECjZ90PdwZc3rGeImg7XAfmyp9en8kSYtcrBUI8mpFW014CrSbKhZ4R6
MMOYkbO8dAbiXVNo02L+cS9GeP1FiMOCBOVV2DWGWc5cTJ1UqkkJqPtZF52xUuFe
GzZAPlQxXd1sdlMladFR+uy3zkoCGUhVbWwwPgU3G1QAKR+tNehH4k1DQDQOXxpu
BqYdMsmaL5eJUUSRLCRi4mfz/VmlDvOwQy1nzi7vTd9wr8LH2BBWm4ohfZeh7pnK
4HrYHoNlOvZG9PdZWbZTItUtjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBstyOc6
4axED1RZJCWAoAdJjK+SMB8GA1UdIwQYMBaAFFloUtUplPu2emN5qx4K9RRVPuiG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0U4NS9CMkUwRTVBRTFD
MzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03WjZZM21ySGdyMUZGVS02
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dXaFMxU21VLTdaNlkzbXJIZ3IxRkZVLTZJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0U4NS9CMkUwRTVBRTFDMzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03
WjZZM21ySGdyMUZGVS02SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYA3wDvLKhnKBRKXa8seIIeMLcFs5ZIqAdmBExsgH5SP0x5k8lzGbj
bLkaacTGSWZ2HeeI+QFYGgqDPXhTPvDg2eVB2cOontjVX53Iu9rl80LjAqaU3tYD
Ff5Y7QwILHXfu6ZPFY7MH1iPDJ060Ipf9nvN0sq5V/WvG07EX53P7YCPEAWlzdFr
OwfD+iaHynn6+Ext7arPGN4Jpplz6S4c5z/DdriTHp6JBF/qXImYBNm6IPzuUyZT
oHL8yaRRPe0Vto3Vc6GHvOSShJ4czKGYfBxuWsOIAVLmM1dOrl9a62QPsMLXmEOZ
IXmIxf6N5l455XmbuR2cVeINZC+//o1a
-----END CERTIFICATE-----
Generated at Wed Dec 24 09:01:53 2025 by rpki-client