This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File:                     wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier:          kbkoPBNmUJI3y9BWwVbrSARgvbnsU/zGEn/1+9Gg8v0=
Subject key identifier:   F5:03:41:B8:E8:F4:6D:38:4A:62:B2:2C:78:64:8D:4E:74:8B:8D:98
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer:       /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number:          0118
Signing time:             Fri 05 Dec 2025 02:59:49 +0000
Manifest this update:     Fri 05 Dec 2025 02:59:49 +0000
Manifest next update:     Fri 12 Dec 2025 02:59:49 +0000
Files and hashes:         1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: 2D3n1LKVOQNaoXu2IiRnm9UU7zDfr/Wtiiyxb9f6LVY=)
                          2: 39032028BB8211F0ACBBE862C4F9AE02.roa (hash: GaLLwV5AtE+d32/hOzBxSXpg7cSHrokuqZVF2wvFzkM=)
                          3: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=)
                          4: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
                          rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
        Validity
            Not Before: Dec  5 02:59:49 2025 GMT
            Not After : Dec 12 02:59:49 2025 GMT
        Subject: CN=69324aa5-497a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:59:02:da:51:26:7e:11:d8:99:18:d2:70:
                    4b:6c:6d:00:b8:0e:c8:90:1b:eb:76:31:3e:55:86:
                    00:0e:7d:61:0d:d2:8e:26:9d:60:57:58:9a:79:18:
                    26:38:53:40:73:5e:bd:1d:1b:1b:1b:4f:98:3e:f0:
                    c2:7e:42:bf:13:d4:bd:e6:78:28:ac:03:fb:e8:65:
                    fc:3c:a5:47:8c:46:6b:2b:05:c3:6a:72:7e:14:ab:
                    7f:7e:00:b4:89:0c:4f:f7:74:5d:30:2d:93:dc:af:
                    d5:de:55:fd:d4:d7:79:7c:67:57:88:a4:90:6d:ab:
                    60:f9:0d:0a:7f:9b:fe:b2:9f:9f:c2:6c:59:c5:d8:
                    96:b1:79:12:8b:af:8f:3b:0a:d5:a0:d5:d9:c4:41:
                    58:c4:5e:7f:2d:61:92:f7:ca:37:6e:20:a6:93:20:
                    cd:cf:7f:d7:6e:95:77:99:a8:2d:76:75:c7:24:22:
                    2e:85:a1:8b:e9:ed:89:99:35:12:d9:29:be:5e:c8:
                    88:d1:d6:f7:b9:e5:fe:ce:e0:57:aa:d5:6a:0b:46:
                    f8:de:7b:76:b0:55:79:1f:e0:bf:61:71:ae:3e:7e:
                    48:e0:77:4c:92:9e:b6:66:e7:39:6e:f5:83:d1:99:
                    74:23:17:e0:c4:78:1b:dd:fe:80:24:8c:09:b8:83:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:03:41:B8:E8:F4:6D:38:4A:62:B2:2C:78:64:8D:4E:74:8B:8D:98
            X509v3 Authority Key Identifier:
                keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:04:19:9c:1a:1b:af:bd:8a:43:ec:f1:9b:3b:24:5c:8d:9e:
         42:ec:90:c1:b3:13:78:e6:f7:ce:2d:e1:df:8c:1a:6e:3e:62:
         94:bb:0b:37:7f:41:55:f9:be:10:00:80:c4:9b:a6:f3:89:d3:
         60:f7:87:a4:17:a4:13:e6:47:b5:ed:f3:e6:ba:8a:47:66:0c:
         5b:71:f3:4c:0a:3c:d1:dc:40:d4:2e:a6:34:c6:6f:64:ae:96:
         e1:3f:72:84:c7:99:27:bb:b4:b8:04:9b:f5:aa:d2:f1:c1:a4:
         c6:6d:c3:48:fe:ce:54:1a:e6:d9:67:37:16:b2:67:22:0e:be:
         18:93:96:e9:0f:1b:00:35:08:2c:31:95:21:ab:85:1a:84:b9:
         35:94:e0:c5:da:3c:04:e1:43:46:63:9a:34:33:66:73:c4:d4:
         81:90:49:53:fb:6a:f5:c7:b2:c2:93:c5:22:15:de:e9:52:2d:
         f0:e4:91:e3:c8:5b:eb:15:2a:93:4c:ab:64:bd:de:4a:d3:46:
         63:e7:7f:b6:15:8f:a2:d0:0e:67:bf:4a:a0:b1:61:06:d3:3e:
         c0:97:5d:b9:78:10:39:05:bd:9e:61:aa:a3:91:e2:5f:d8:c6:
         72:32:a4:78:33:c9:82:de:ec:97:44:2c:e3:46:a4:dc:04:4e:
         f8:4f:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:54 2025 by rpki-client