This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File:                     WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier:          OrUNbKBKo9SxotEfLtmz2LPlYVaPNskiDwkjMUchtOg=
Subject key identifier:   71:60:7F:76:7A:D3:19:94:07:95:4A:E6:EE:76:87:7D:8C:05:1C:C9
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer:       /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial:       3570
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number:          3513
Signing time:             Sat 06 Dec 2025 14:24:58 +0000
Manifest this update:     Sat 06 Dec 2025 14:24:57 +0000
Manifest next update:     Sat 13 Dec 2025 14:24:57 +0000
Files and hashes:         1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: uIwV8OUWIYMuskLsGTWprYvrIBqqSW5RZ+4ONV0ZwAE=)
                          2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=)
                          3: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=)
                          4: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=)
                          5: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=)
                          6: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=)
                          7: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=)
                          8: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=)
                          9: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: BAOg63rbaOIys2g97FtFz7H79eFm+GfNyVf99pFuu0Y=)
                          10: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: 0G3q5fTwQFZqfpwdr70W2RcZ9RQYxzqD0UwSER0DP5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
                          rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13680 (0x3570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
        Validity
            Not Before: Dec  6 14:24:57 2025 GMT
            Not After : Dec 13 14:24:57 2025 GMT
        Subject: CN=69343cba-15f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:8e:3c:0e:4a:ef:ea:1a:42:fb:8a:e3:8d:
                    0b:96:26:93:27:67:4c:b4:9c:84:2a:3c:fe:1d:01:
                    09:f3:3b:d1:8c:20:7a:40:fd:88:e5:f0:5f:5a:08:
                    26:9c:10:23:51:aa:da:9d:44:cf:15:d4:3a:a7:e2:
                    99:74:21:a0:33:d6:b2:b3:5f:f3:fe:d9:46:79:6d:
                    68:e8:7a:bc:78:43:41:42:70:7b:08:4e:4b:7d:4e:
                    c9:2c:7d:ab:2b:16:45:01:bd:0b:bb:53:97:31:51:
                    bd:d9:c8:f8:cc:f2:dd:0d:52:ae:07:5e:fe:17:87:
                    16:2d:d5:6b:e7:fb:27:53:65:73:bf:19:43:37:65:
                    2c:42:c9:75:d4:97:67:31:40:61:b8:18:42:c9:dc:
                    4e:6a:49:48:19:c6:dc:03:44:e5:14:0e:a7:e7:0e:
                    d6:c2:61:89:97:45:db:88:c8:34:42:de:0a:64:a0:
                    4b:57:4b:c2:75:9b:aa:a9:68:af:6b:9a:34:d7:6c:
                    13:ca:3e:6b:03:b6:4d:c9:31:11:d4:b2:5e:6e:f9:
                    c9:0e:95:68:35:b0:10:25:79:22:c8:d0:16:2a:99:
                    64:ed:5c:11:db:99:f8:db:ec:09:64:50:de:2c:59:
                    d4:d7:59:35:3e:63:bf:a5:c0:69:1f:33:f4:a5:24:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:60:7F:76:7A:D3:19:94:07:95:4A:E6:EE:76:87:7D:8C:05:1C:C9
            X509v3 Authority Key Identifier:
                keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f7:b5:6d:18:c6:fa:05:43:e7:80:e1:5f:5e:9c:eb:58:c1:
         9a:ef:33:fe:10:8a:be:39:57:db:04:3d:da:8d:7b:d8:b4:1b:
         ba:8b:29:40:34:6a:4d:ae:36:11:a3:7a:60:fe:b7:b5:bc:05:
         c2:d0:a2:84:32:55:00:cf:eb:29:1b:ed:a5:e6:3e:2c:dd:db:
         85:b8:5b:a4:e2:ce:62:c4:30:01:9b:63:70:a5:67:bf:6a:6a:
         86:28:57:78:58:97:d8:44:e0:91:3f:51:10:c9:d5:f1:72:b1:
         5e:a4:7a:18:51:cc:de:cf:fd:b5:1b:ed:89:dc:5d:99:42:e0:
         74:30:43:77:d0:de:80:23:a0:72:0a:82:62:58:fb:d4:71:35:
         3b:72:cf:7e:4f:b6:8f:cf:28:85:65:bf:bc:64:2d:64:6b:b8:
         49:8d:94:0e:d4:22:b2:d5:a2:80:85:39:ad:b3:9b:83:14:1d:
         2b:a4:17:ed:c8:01:48:00:d7:be:d3:72:c7:05:c6:37:59:5e:
         de:a5:63:02:13:51:63:94:b4:6b:4a:3c:66:51:1c:80:a2:d1:
         8c:01:fb:2f:2f:e1:b6:0c:d0:ba:30:a4:f8:a8:c3:e3:a7:df:
         94:42:c0:95:cc:b7:22:ed:04:76:e6:2f:77:4b:49:4c:66:e1:
         3a:c4:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:49 2025 by rpki-client