This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
File:                     WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json)
Hash identifier:          Rmi5FNkE3RTNTm0yAV2RQ3JHrzloYh6zYGQSQyfPso0=
Subject key identifier:   F7:EF:40:AF:58:F5:F7:AF:A5:18:8B:CC:C9:63:EF:14:64:73:A9:AB
Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Certificate issuer:       /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
Manifest number:          6A
Signing time:             Fri 05 Dec 2025 04:54:30 +0000
Manifest this update:     Fri 05 Dec 2025 04:54:29 +0000
Manifest next update:     Fri 12 Dec 2025 04:54:29 +0000
Files and hashes:         1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: XWD+ln8x40rCBeLad+EaQlnpwx1KAdNpKrv5dQXhvJM=)
                          2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
                          rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
        Validity
            Not Before: Dec  5 04:54:29 2025 GMT
            Not After : Dec 12 04:54:29 2025 GMT
        Subject: CN=69326586-9edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:49:d9:e5:43:89:26:bd:80:2a:11:0d:70:
                    d9:a0:4c:e9:9b:d6:dc:6a:ac:d3:30:29:36:d2:71:
                    48:83:d1:4d:74:60:e6:1a:3e:23:9d:08:93:db:b7:
                    22:18:55:f7:90:df:30:b9:40:d8:76:38:0c:24:a3:
                    aa:68:af:ea:b2:b9:c9:a4:29:c4:c4:4e:87:1c:aa:
                    cc:24:48:3f:5c:c7:b3:dc:50:8c:b1:57:9e:4f:32:
                    ae:e6:7f:cc:05:13:10:6b:42:29:7e:35:af:13:44:
                    bf:65:25:8d:6e:35:1b:ec:be:d4:d1:c0:97:fd:73:
                    9a:2b:a6:b7:4e:57:d8:a6:9d:ac:73:cd:f8:78:b2:
                    39:55:47:59:0a:12:2d:37:f3:55:19:4f:8d:3b:dd:
                    f4:93:dd:21:54:97:fa:47:b2:55:0b:1e:e1:9e:ec:
                    b5:2f:a2:e1:40:f3:f4:c9:a2:02:54:20:92:7e:97:
                    2a:86:2e:d8:f0:ff:c6:2f:b6:1f:31:9d:89:92:a2:
                    79:c6:dd:b4:95:ae:43:b3:4e:48:5c:64:06:90:9b:
                    1d:f7:22:b9:1e:ce:ad:67:4d:d7:ac:05:a9:3f:6a:
                    88:73:0a:e3:3e:bd:75:d4:43:7d:9a:c3:c9:93:12:
                    ce:6e:fe:af:75:84:cc:aa:a5:54:98:27:07:b0:02:
                    da:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:40:AF:58:F5:F7:AF:A5:18:8B:CC:C9:63:EF:14:64:73:A9:AB
            X509v3 Authority Key Identifier:
                keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e1:1f:a0:50:0b:76:9f:f0:53:f9:4b:1b:dc:c0:7c:8d:dd:
         61:0f:ba:94:4d:de:ae:ea:20:5e:74:54:bf:d5:61:bc:be:1a:
         25:7f:6b:04:0d:f6:d1:69:25:a2:87:28:e5:9e:a2:bb:33:e6:
         2a:e5:0f:98:7b:2d:d0:ce:7f:97:3d:0e:78:dc:5f:08:f1:2c:
         92:10:f8:a3:72:40:4d:0d:65:d0:23:3a:04:cd:4d:01:ed:e2:
         27:a2:f4:f9:c1:69:42:82:1c:ff:3f:25:d6:41:c5:88:a8:f9:
         d3:b8:3e:e0:a0:c8:fb:86:59:16:66:38:bc:c6:b5:c4:d4:3f:
         09:17:9b:47:7f:84:a7:25:ce:06:f6:8c:54:ef:a7:3d:5e:35:
         53:dd:eb:8a:a1:50:ac:05:8c:21:d4:20:b8:49:9a:61:92:6f:
         c9:55:5f:64:2b:eb:a5:56:54:7a:56:e1:03:c5:c7:64:22:22:
         e7:01:cf:07:02:eb:f8:3b:56:8a:db:fa:0b:a4:c6:1d:aa:60:
         7a:9b:76:53:37:37:ec:0c:d0:ed:22:75:83:61:0e:91:ad:9d:
         da:40:0a:82:31:03:40:36:80:c2:3b:21:6d:dd:ca:49:ac:2a:
         47:48:f7:c5:cc:8c:6c:ae:39:81:19:15:52:49:58:44:04:53:
         6b:f0:a8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:39 2025 by rpki-client