This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
File:                     wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json)
Hash identifier:          E7ACAcN8VcoSPq8H+WZ6r8+yUpOfkcWWLidL1YlGMo8=
Subject key identifier:   0E:64:73:A1:ED:45:F7:3B:87:93:15:3E:C2:22:F6:6E:82:9F:1A:96
Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
Certificate issuer:       /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
Manifest number:          0161
Signing time:             Fri 05 Dec 2025 02:10:42 +0000
Manifest this update:     Fri 05 Dec 2025 02:10:42 +0000
Manifest next update:     Fri 12 Dec 2025 02:10:42 +0000
Files and hashes:         1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: lfZOTv4V+mcFvqysVONwvuw1KChCEQ0+AwLpwd5QrSo=)
                          2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: mx+hZNnEHjoWsdsKMFKjqe1rg9GBHxL9Qf87GWS5aXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
                          rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
        Validity
            Not Before: Dec  5 02:10:42 2025 GMT
            Not After : Dec 12 02:10:42 2025 GMT
        Subject: CN=69323f22-1b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:e1:6f:c9:8e:57:c0:98:35:93:2c:d7:2e:
                    3a:b5:98:90:10:11:cd:5c:55:46:42:1e:e5:1a:ee:
                    77:de:6d:65:8a:81:8d:1b:2c:b7:ee:bc:df:cd:73:
                    e9:6d:9d:d4:60:f0:2c:3a:37:a2:09:dc:1d:a1:fd:
                    90:f8:b8:d3:2f:f3:bb:fe:e1:7c:a9:eb:1d:fe:2c:
                    71:e9:63:b5:c3:cd:64:e0:fc:01:1f:99:c2:41:da:
                    17:79:15:fe:4e:cb:7f:c9:c6:f8:c6:f0:3e:fa:73:
                    f0:27:56:96:bb:47:96:90:7d:e4:0d:4c:a4:5f:41:
                    9c:68:c1:40:19:18:ce:a5:34:e2:5c:b7:60:63:79:
                    2b:75:8e:a7:7b:3f:ba:db:30:22:28:ca:21:04:0e:
                    4f:53:00:76:e6:89:66:ba:c8:bd:fe:a6:9b:b1:05:
                    34:91:6e:10:63:1f:7e:96:12:c3:c0:12:0a:71:ce:
                    64:b7:64:36:46:e2:07:2c:5d:1e:84:02:fb:2c:22:
                    12:3c:3e:2f:77:a8:27:4f:70:2b:5a:65:df:19:7d:
                    06:14:d0:6c:af:80:00:f7:a6:06:10:5c:43:8a:b4:
                    66:8a:d0:88:79:32:48:a1:47:14:26:3c:c6:3d:88:
                    13:0e:bc:81:39:c6:7a:cb:69:45:81:59:40:30:fe:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:64:73:A1:ED:45:F7:3B:87:93:15:3E:C2:22:F6:6E:82:9F:1A:96
            X509v3 Authority Key Identifier:
                keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:44:9e:94:6f:76:20:a7:bb:28:db:68:48:f5:19:b0:e1:7b:
         b1:a8:6f:0d:c5:fc:e3:07:d0:f9:30:9d:fe:f1:91:f1:9b:e2:
         1f:e5:84:84:29:e1:c4:7a:08:cd:28:d4:4b:14:6d:3a:59:4d:
         28:43:f1:cb:23:b8:aa:75:90:6d:83:ff:7f:e3:6b:ec:10:58:
         19:52:69:c5:94:8f:6e:57:d5:a7:ed:b0:7d:06:c4:8b:7d:86:
         2a:b4:41:25:a0:2a:09:4a:fd:ab:8e:19:c3:9e:6b:4d:13:87:
         1c:38:9d:b9:7b:43:74:7e:c8:e5:e1:79:b7:45:bb:fb:38:d2:
         69:02:90:6c:e5:a3:74:17:d6:78:64:89:80:b7:4e:b2:ca:fe:
         af:5d:9a:d5:87:df:22:6b:06:3c:5a:77:96:1b:63:f7:8a:0e:
         0b:a7:2b:ac:ca:60:2a:4c:f8:dc:c0:9d:b5:3e:18:e3:45:12:
         9a:97:2d:b5:6b:93:5a:be:6d:23:28:ea:db:a9:35:8f:6c:4a:
         81:c2:33:b0:cd:f4:1a:41:c3:96:76:08:3c:48:cf:60:98:fb:
         4e:f5:a7:d5:ec:25:eb:2a:9f:7d:31:22:08:8e:cb:18:28:52:
         05:96:78:14:46:d7:61:5a:41:c4:e2:c9:b4:19:1f:63:ea:c5:
         70:db:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:08 2025 by rpki-client