This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File:                     WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier:          x+4Frw2XBHMkroT6nTpYpmAjgTSGlAs1vCCy3YgBztg=
Subject key identifier:   86:49:33:40:9A:56:7A:9F:20:80:F1:1A:38:32:DC:D1:1F:9C:FD:32
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer:       /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial:       021C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number:          0219
Signing time:             Sun 07 Dec 2025 00:44:35 +0000
Manifest this update:     Sun 07 Dec 2025 00:44:35 +0000
Manifest next update:     Sun 14 Dec 2025 00:44:35 +0000
Files and hashes:         1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: qQQiDlqLwUFYJVWrYy8BdFHgkzHX3a/0MOjCVryZ0lA=)
                          2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
                          rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
        Validity
            Not Before: Dec  7 00:44:35 2025 GMT
            Not After : Dec 14 00:44:35 2025 GMT
        Subject: CN=6934cdf3-98df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:c3:4c:db:e2:fb:28:fc:35:91:e1:67:4d:
                    55:7a:61:c2:1e:ba:87:60:61:63:c6:b8:d5:3f:2b:
                    32:84:22:20:3c:6c:75:bc:d4:29:97:46:d8:52:d6:
                    3c:1f:e6:a7:64:3b:e8:6d:dd:44:29:7e:7a:2e:87:
                    59:04:9a:7d:f4:50:82:8d:cf:3e:a1:30:04:95:04:
                    2d:49:99:d5:f1:f5:fd:97:c8:5e:74:f7:f9:51:31:
                    ef:e6:d5:e8:70:d5:86:7a:79:8a:d0:40:07:e0:93:
                    00:4c:ba:c6:cb:33:0d:ce:4b:63:49:2d:81:fa:2c:
                    54:7b:9b:59:87:05:67:04:50:40:a9:e8:7d:38:09:
                    5d:97:b9:cc:0b:4b:36:6c:67:bc:a7:b5:7f:e9:9d:
                    1a:87:1d:45:49:7d:9f:64:a0:4f:9a:56:0c:f3:95:
                    d3:5a:82:cf:1d:4c:7f:d2:3d:57:89:9b:b3:56:cf:
                    97:d9:ec:da:26:c8:4a:a6:f3:da:cd:aa:92:73:c9:
                    f1:9c:74:d9:d5:2c:a8:44:68:c0:52:13:b1:76:aa:
                    02:a8:55:12:76:79:01:a2:8d:7c:e0:55:f0:ad:c8:
                    c6:39:74:e7:8d:2a:f3:35:ce:2c:4a:38:a0:f2:98:
                    aa:c5:75:1a:84:35:68:58:1c:9b:fe:dc:7c:da:6b:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:49:33:40:9A:56:7A:9F:20:80:F1:1A:38:32:DC:D1:1F:9C:FD:32
            X509v3 Authority Key Identifier:
                keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:93:d9:fd:14:ad:f7:62:79:a4:aa:d3:66:93:95:73:e3:7a:
         ae:98:17:30:17:15:58:17:5c:05:12:60:24:82:72:16:58:2b:
         f3:ea:e5:d8:b1:e4:f5:67:37:12:dd:da:b8:23:fd:51:dd:b5:
         fc:ee:28:88:7b:95:bb:d6:fa:57:35:0c:81:ec:11:73:f5:7e:
         56:89:84:0b:b8:a7:44:ff:55:e4:fd:bb:7f:d4:6c:70:e5:ec:
         6b:a4:a7:56:5b:d6:a8:73:7f:45:68:bd:80:af:03:db:06:1f:
         6d:da:72:a2:a8:d3:e8:1d:37:8d:d7:cd:53:50:95:eb:56:ac:
         53:26:a2:55:97:cf:e2:c1:8b:8e:2e:ce:a4:e3:b9:5f:5a:a3:
         5e:af:28:1e:0f:8c:3c:0f:02:24:2b:34:52:0c:45:65:cc:a1:
         6e:ae:77:4a:63:c2:c6:1c:1f:dc:f2:e7:c7:6a:d8:2a:0a:6f:
         25:d8:77:89:68:b7:bf:fa:45:54:8a:70:48:79:d2:82:f1:64:
         d9:d1:72:29:97:9e:95:71:22:ae:a8:0a:26:f7:88:ff:7f:85:
         2e:40:ad:80:56:b7:b0:66:5d:57:a3:a4:29:8f:e2:a6:28:1e:
         e5:11:6f:2b:b1:4f:5e:65:dc:22:15:1f:5e:4d:90:3b:05:7f:
         1b:53:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:48:05 2025 by rpki-client