This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
File:                     wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json)
Hash identifier:          xJ3Q2rWBkUfIjDSazkn72N2plhuwlN0E+mAzZWYQvyY=
Subject key identifier:   BF:17:7F:C3:2C:A4:B2:8B:02:5C:55:E0:E5:AD:2A:91:EC:4D:20:84
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Certificate issuer:       /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial:       079E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
Manifest number:          0798
Signing time:             Sat 06 Dec 2025 20:29:33 +0000
Manifest this update:     Sat 06 Dec 2025 20:29:33 +0000
Manifest next update:     Sat 13 Dec 2025 20:29:33 +0000
Files and hashes:         1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: vnNWEvC/Cbf0v8k0hZ8J+yxr7M7wyAoc3EFARRyOPls=)
                          2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
                          rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D
        Validity
            Not Before: Dec  6 20:29:33 2025 GMT
            Not After : Dec 13 20:29:33 2025 GMT
        Subject: CN=6934922d-96f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c1:eb:47:a7:33:ba:10:f8:b2:3d:09:e1:40:
                    c0:73:32:f0:18:7c:d1:f2:c5:2f:49:71:d2:c6:78:
                    01:00:1b:4b:7e:30:9b:87:a0:6f:e0:42:f2:10:66:
                    f6:32:da:39:fa:63:e8:4c:4e:51:21:5f:12:b8:8d:
                    cc:ea:2f:3a:b2:8f:b6:b4:27:19:a0:93:7d:e5:47:
                    ca:a2:d2:6f:8c:28:ff:85:7b:53:c6:a2:98:68:8c:
                    5b:25:86:c0:6b:68:6e:4a:9c:5d:fe:70:dc:ef:11:
                    7f:e8:96:cd:51:8a:7f:79:9f:df:76:a8:14:bc:c5:
                    3f:6a:db:84:36:d7:e1:87:57:d7:4d:33:e8:95:0d:
                    71:32:d9:3c:68:0e:5c:6b:e8:99:82:ec:21:22:57:
                    d3:a8:78:53:e0:20:76:af:2b:08:4b:3c:5f:0c:f4:
                    92:83:3f:5b:bb:71:69:4f:ff:d8:ee:e5:7a:5f:8b:
                    60:65:41:71:db:d7:b5:26:68:0b:ac:00:81:81:50:
                    62:77:3c:f8:b7:2a:e9:e8:72:0a:14:91:70:72:0a:
                    23:c6:11:e4:8a:83:6d:64:75:87:53:47:26:6d:88:
                    6d:69:41:f2:5d:f5:d4:c1:a2:6e:8b:ee:22:57:29:
                    6a:3d:ae:af:b1:cc:20:41:7a:94:4c:f6:79:b9:22:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:17:7F:C3:2C:A4:B2:8B:02:5C:55:E0:E5:AD:2A:91:EC:4D:20:84
            X509v3 Authority Key Identifier:
                keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:17:cf:14:7d:e2:94:7a:e9:e6:ba:f5:30:03:61:b9:98:14:
         e8:1e:88:ee:20:83:6d:d8:ae:7d:9f:7d:fa:42:1c:22:8a:0a:
         b3:fb:7c:a3:d7:2b:9a:b8:5c:3f:91:64:88:85:a3:34:05:0d:
         2e:56:c9:c6:45:32:fd:84:2b:73:93:47:8c:5a:f3:0f:0b:ff:
         2e:eb:cf:a6:d2:ee:48:fd:5a:74:48:d9:60:a7:52:4c:39:23:
         b5:4b:91:a5:e2:4c:8d:0b:79:55:bc:8f:ec:59:f6:8b:a8:1e:
         06:24:c0:a9:1c:69:db:bc:c1:27:47:cd:4b:e9:4d:cb:c7:5f:
         0a:21:7d:83:e6:21:2d:4d:2f:c5:89:0b:43:6b:97:25:44:05:
         f5:c2:ad:ba:33:3a:25:e8:72:d0:13:2f:da:6c:8c:1d:9b:1a:
         22:2d:e9:87:b7:e7:a0:e0:e2:87:7d:c6:01:12:86:4b:db:3d:
         b2:55:0b:c0:3f:38:a5:70:f9:4c:a8:e0:27:e8:ca:a2:73:76:
         fe:fa:c4:47:7f:59:77:16:b5:69:6b:b5:ae:a6:d3:ec:b9:2b:
         47:12:f8:c8:6a:d3:57:2f:d9:cc:ef:6e:07:c1:74:5c:3f:68:
         4f:ee:ea:91:b7:5d:32:5a:94:37:07:c4:30:52:35:33:11:07:
         79:ba:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:50:54 2025 by rpki-client