This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
File:                     W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json)
Hash identifier:          8zWawkZ/QlQeZHTciydK+Cfl2ncfV0j1jsERd6xWMqA=
Subject key identifier:   20:1F:F9:11:D2:11:52:91:62:DA:1C:5E:93:FB:8E:F2:DE:B2:47:AF
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Certificate issuer:       /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
Manifest number:          019D
Signing time:             Sun 21 Dec 2025 02:37:09 +0000
Manifest this update:     Sun 21 Dec 2025 02:37:08 +0000
Manifest next update:     Sun 28 Dec 2025 02:37:08 +0000
Files and hashes:         1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: VCf/lFkRk9dkrNw1SeNwYvzXvCCpfeeta5SX3zIJAi8=)
                          2: E286BAA24B5611F0A987864DC4F9AE02.roa (hash: +qxfuU3gIMXAGQMi2xVqEYmAlmIt7blHD4cbq1UZ4Zw=)
                          3: 12C3947A66F611EE82864875C4F9AE02.roa (hash: jGy1zmRFGKjgznbJPpHPfnv/NfD7nxR5cPMbL3NNWqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
                          rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
        Validity
            Not Before: Dec 21 02:37:08 2025 GMT
            Not After : Dec 28 02:37:08 2025 GMT
        Subject: CN=69475d54-6a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:46:5a:47:7c:d4:e2:96:a6:0c:65:60:77:
                    d6:88:44:35:f8:6b:48:3f:1a:6c:61:5d:b8:d8:d4:
                    21:7a:ce:91:fd:65:aa:ca:41:f7:be:86:8d:b7:a8:
                    1d:ac:c8:b6:5d:1d:91:a6:d2:6c:ac:a7:85:4a:7e:
                    ca:2b:68:67:c1:c9:24:49:84:59:7b:8d:eb:78:48:
                    e7:de:e4:88:2b:3f:1c:d5:0b:4d:8a:90:03:be:44:
                    14:61:d2:27:d1:5a:14:d7:7e:65:ff:ec:f2:a4:c6:
                    61:63:b6:44:a2:7c:a4:43:17:47:a5:a8:a9:e7:f9:
                    de:5f:56:7d:19:3a:28:84:6f:61:c2:15:08:1c:50:
                    4d:22:ce:04:ac:03:26:e4:6e:f8:4b:f2:3e:7f:6e:
                    09:b3:50:51:54:3f:79:99:c9:10:3a:aa:d3:95:9e:
                    c7:5d:af:70:f8:6f:42:03:8f:24:33:09:da:50:32:
                    f8:b9:0d:2d:69:54:d9:d0:00:1d:76:ac:49:ce:7c:
                    c0:3b:20:de:93:26:93:11:b1:06:ca:68:7f:9f:95:
                    cc:f2:79:07:82:3e:11:3d:ec:77:5d:ed:61:2f:39:
                    6b:75:87:65:30:6d:35:a1:51:c9:dc:85:d5:91:08:
                    04:76:61:16:68:15:5f:f2:65:41:b0:53:02:6d:dc:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1F:F9:11:D2:11:52:91:62:DA:1C:5E:93:FB:8E:F2:DE:B2:47:AF
            X509v3 Authority Key Identifier:
                keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d5:82:3b:22:2f:76:3a:56:e1:2a:09:4f:1f:4c:33:c0:2f:
         a8:73:f2:e6:85:4e:64:04:d0:64:8f:e6:3d:5c:57:bd:02:0a:
         ec:81:81:18:56:f0:86:ef:59:12:3a:1b:3c:41:40:24:c3:24:
         9e:34:ef:65:0e:db:b1:d3:ca:1a:49:d5:a9:5a:c5:9f:16:3f:
         c9:d5:fa:79:57:e2:8c:c8:51:35:7c:fe:4a:ca:38:f9:24:a1:
         1b:4c:53:78:de:29:46:3c:08:01:da:9b:3e:5c:e6:e0:99:3e:
         74:be:83:72:4f:4a:97:61:81:53:f5:4e:1e:93:8c:47:21:f1:
         9c:34:86:31:b7:34:fa:d9:30:e3:da:8e:38:f6:c9:50:87:67:
         a6:72:b8:64:8d:eb:00:63:63:5a:c2:7b:1a:77:93:a4:d0:fd:
         23:28:ad:fe:a9:46:2b:35:4a:9e:31:84:03:0a:62:50:eb:53:
         18:1e:78:28:1b:84:8c:7e:bb:5d:28:6b:b1:51:fc:20:10:23:
         81:b1:b0:b2:31:8d:9c:a0:b0:21:b7:79:97:eb:ca:d0:ac:c1:
         e1:5d:17:a9:1d:eb:ae:74:88:23:34:58:2d:5d:8d:92:57:28:
         b4:f9:dd:c7:4e:d5:dd:9c:81:50:72:77:4b:4c:f8:38:7d:ef:
         73:c5:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:17:04 2025 by rpki-client