This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
File:                     WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json)
Hash identifier:          6VKCDD9TEYdDixTBYM2Z02DkoHxjSw9hKMEpEFKk6i4=
Subject key identifier:   4F:5E:74:2F:9F:59:F5:7E:49:DA:C3:22:59:EB:78:42:74:7A:69:02
Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB
Certificate issuer:       /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
Manifest number:          07D6
Signing time:             Thu 04 Dec 2025 20:14:21 +0000
Manifest this update:     Thu 04 Dec 2025 20:14:21 +0000
Manifest next update:     Thu 11 Dec 2025 20:14:21 +0000
Files and hashes:         1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: yQANfQMvJlSAJ6THQPSnJR7laEA1dnS5L9CXI1Fv95c=)
                          2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: 0MFbelavrnvkHJOZxZvDps06Vm64af2RypLjbngW5IQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE9, serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
        Validity
            Not Before: Dec  4 20:14:21 2025 GMT
            Not After : Dec 11 20:14:21 2025 GMT
        Subject: CN=6931eb9d-d382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:ce:6d:11:3d:bb:af:c1:f5:02:f1:09:83:
                    c1:17:97:7d:7d:cd:47:00:e9:d9:79:1b:ef:0e:15:
                    79:fc:31:cf:83:b1:8b:3f:89:f8:1f:e4:97:ab:c1:
                    eb:17:6d:99:05:d8:ba:18:d1:1b:fe:79:fe:d7:38:
                    b3:ed:6a:03:45:d9:15:ca:b7:3a:fb:02:df:1d:b7:
                    63:01:dd:50:f0:ee:74:3e:61:5e:99:81:9d:ab:e8:
                    20:86:df:f9:f0:94:c6:96:5f:e1:ef:08:02:d1:6e:
                    73:94:62:54:de:5d:2e:ab:53:dd:4e:98:85:bb:9a:
                    a1:b2:68:c5:b1:1e:41:76:63:64:99:bf:78:0b:b7:
                    85:2b:45:11:31:94:7f:74:69:d4:46:33:37:03:2e:
                    3c:9d:9d:cb:ba:34:46:11:93:d1:54:29:20:e1:56:
                    3a:72:8e:81:8f:cb:8c:75:95:6e:12:95:5a:c7:13:
                    78:cd:07:5a:41:e6:2e:b0:44:51:26:2d:70:fd:9b:
                    2d:b6:66:2d:23:68:84:3e:01:a6:fd:d2:07:f4:07:
                    df:52:93:59:b2:f4:fd:01:94:fd:71:58:12:f3:67:
                    74:04:97:0f:ac:61:24:4e:0d:c7:d3:1d:87:87:cb:
                    e7:35:55:9a:0a:2d:d1:04:3a:23:36:f3:25:e5:4a:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5E:74:2F:9F:59:F5:7E:49:DA:C3:22:59:EB:78:42:74:7A:69:02
            X509v3 Authority Key Identifier:
                keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ec:a1:82:59:9b:fd:8c:e9:96:10:a8:1f:2d:c8:21:34:f5:
         6d:99:70:28:b4:60:b7:75:6a:62:70:22:0b:d1:3e:96:12:7a:
         e0:f6:d3:c0:d2:d7:ec:56:5f:28:69:30:98:2a:7c:79:44:a9:
         36:ad:3c:0f:2e:bb:db:91:de:dd:c4:08:2c:a5:5a:91:9b:d6:
         ce:18:a1:fd:72:89:2b:e8:af:88:f3:e5:f1:cf:42:05:95:36:
         0c:d2:d5:4a:36:f4:f1:e7:8b:cb:a5:21:98:e5:d2:31:cb:d2:
         ec:53:8b:f5:ad:5c:b9:2d:bf:8b:53:33:c8:2c:19:de:b3:a8:
         3d:d7:81:0c:e1:ad:d2:62:64:8b:2f:0f:37:51:b1:62:5f:23:
         b9:4a:c4:86:f2:72:89:60:a2:b8:d5:0f:09:1e:65:51:9f:31:
         3e:2e:ff:d5:67:e5:3e:48:3c:29:0a:fc:1f:87:37:1b:6e:ee:
         78:73:da:37:26:18:76:e7:9e:03:2c:1b:28:21:1e:22:31:ec:
         1d:3e:80:ba:7b:51:76:8d:40:e0:7b:0f:45:03:d4:18:35:97:
         a5:18:50:d1:01:65:94:e7:fa:5a:29:bd:92:48:8c:8e:82:bd:
         ba:83:ae:7e:60:bc:43:e4:49:a7:f9:5b:b5:f6:23:29:41:1f:
         26:39:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:05:37 2025 by rpki-client