This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
File:                     WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json)
Hash identifier:          Z5hOSbj+XtJy4XHgowscGCN6n1sq6NgaMPS1thhoWU8=
Subject key identifier:   94:42:6C:71:CA:50:A3:98:DF:09:9A:BD:54:AB:47:2B:54:9A:AF:73
Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
Certificate issuer:       /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
Certificate serial:       0FBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
Manifest number:          0FB5
Signing time:             Sat 06 Dec 2025 16:58:55 +0000
Manifest this update:     Sat 06 Dec 2025 16:58:55 +0000
Manifest next update:     Sat 13 Dec 2025 16:58:55 +0000
Files and hashes:         1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: LB2roXp6T9MvLmjMnDLSKC8FzC/wIRKqEAKNJqZGqKo=)
                          2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: JDJx+bW699vTjkG4SZTOilca+2ZG/Wo+x5hxTR1zUag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl
                          rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4030 (0xfbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
        Validity
            Not Before: Dec  6 16:58:55 2025 GMT
            Not After : Dec 13 16:58:55 2025 GMT
        Subject: CN=693460cf-ccf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:16:db:c8:be:9a:7f:82:1c:f2:8a:6f:7a:
                    28:c7:b9:27:c8:4c:61:46:54:71:10:c1:b4:28:3b:
                    c6:4c:85:5c:a6:f6:f2:85:b7:99:32:36:af:1b:cc:
                    13:8a:8a:66:19:4e:ea:ad:91:37:73:36:c6:aa:a9:
                    a5:e3:2a:27:0f:41:d9:e2:de:5e:de:e2:fc:06:e7:
                    ac:50:a1:14:8c:ff:ec:11:b6:58:fd:b8:cb:c1:f6:
                    83:4b:ca:f8:dc:de:4c:c2:6c:03:a3:7c:a7:42:3c:
                    ed:d6:a2:73:68:92:b2:09:9a:4e:11:c5:c1:c9:6b:
                    47:8b:55:80:28:07:f6:94:e7:15:ed:17:cc:f7:d9:
                    7b:7e:0f:b8:95:7f:34:4e:4a:95:be:dd:bc:ce:b1:
                    03:ed:8e:09:fc:a5:d0:31:ce:05:ec:a5:51:d3:f4:
                    d9:e9:86:2f:9d:de:39:cd:8d:c9:f4:f3:da:63:69:
                    4a:de:13:34:80:4d:ae:89:58:8a:85:96:b0:39:65:
                    62:49:5b:fa:ad:22:f9:b4:c5:45:05:be:cd:3f:5e:
                    52:d5:91:e1:2d:96:aa:c0:60:3a:c3:a7:64:fa:ff:
                    27:d3:ac:3f:6b:c2:75:ad:a8:11:8c:8f:08:f4:30:
                    95:fb:3e:56:a1:32:4e:82:1f:6f:46:2c:cc:a9:fc:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:6C:71:CA:50:A3:98:DF:09:9A:BD:54:AB:47:2B:54:9A:AF:73
            X509v3 Authority Key Identifier:
                keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:62:9b:da:0e:8c:a8:89:b4:9e:02:9f:2d:67:86:32:a0:eb:
         b8:41:79:09:5e:43:f9:47:3f:2c:07:65:3a:5f:3b:e8:68:c7:
         f4:6f:4d:17:c9:5c:16:2c:15:b4:03:52:0c:a3:0a:e3:ca:74:
         3d:f0:45:9a:3d:9d:4e:81:f8:88:18:35:a2:4c:db:1c:72:92:
         c2:46:64:c6:b7:59:14:20:bd:06:e7:c6:88:01:68:6c:b8:42:
         d2:63:ec:0a:ef:16:38:c8:48:d8:e2:55:dc:a4:53:07:7b:da:
         cd:d8:78:24:8b:bc:94:55:8b:44:78:8f:f5:11:7a:73:ee:ca:
         8b:05:8b:3d:77:5e:6f:1e:df:4b:e5:a6:94:86:fb:7b:71:10:
         cb:9f:00:57:cd:fa:4d:35:0a:f9:21:eb:4a:1d:15:27:f4:36:
         45:1f:85:ab:7a:fd:76:92:a4:f7:77:49:8e:cc:07:97:44:3f:
         62:b3:1b:14:11:a0:94:a7:74:fb:12:4f:79:3a:79:8d:1d:e6:
         34:03:8e:60:69:54:1a:e4:9e:82:54:0e:34:63:5a:e0:fd:e3:
         fe:0f:e5:b4:34:e4:d4:3a:9e:82:17:4e:15:35:98:cb:b7:37:
         d4:cf:bf:af:73:81:eb:6f:26:13:9a:7f:99:f1:e3:f1:46:8c:
         ad:2c:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:32 2025 by rpki-client