This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
File:                     W3UJDp6gQpi0e6-C-qIoDl42pL8.mft (raw, json)
Hash identifier:          6tIrGMOIJgHpQAISEb6hsHZwYsSgW0h2fgSabiAIEu0=
Subject key identifier:   A6:83:66:10:8E:FB:55:FB:8E:FC:0C:17:B0:68:C0:AB:76:74:5E:E3
Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
Certificate issuer:       /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
Manifest number:          0179
Signing time:             Fri 05 Dec 2025 02:03:13 +0000
Manifest this update:     Fri 05 Dec 2025 02:03:12 +0000
Manifest next update:     Fri 12 Dec 2025 02:03:12 +0000
Files and hashes:         1: W3UJDp6gQpi0e6-C-qIoDl42pL8.crl (hash: 13MwwErcdPFILzsgDUeVSTtgnAAe0lrhgFMxcg5DXwQ=)
                          2: 32776B2EF77E11EFA2C3C928C4F9AE02.roa (hash: iO0GAxxz6iQr/JhGiMVk8iBOxy3hTg8mQrZcdi3mCzM=)
                          3: 1701D3A0F36B11EF87FE3725C4F9AE02.roa (hash: QbLxvxoGtnLixtzVPkrtacYsAqvISwhCUE00pyCyTag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
                          rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913731F, serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
        Validity
            Not Before: Dec  5 02:03:12 2025 GMT
            Not After : Dec 12 02:03:12 2025 GMT
        Subject: CN=69323d60-3670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:de:a0:1f:c2:e4:b4:1a:44:50:4f:64:ce:
                    30:9d:bf:6b:4b:4d:8d:ef:2d:b5:a9:91:b6:23:70:
                    a5:70:f0:2d:4b:8f:59:00:04:0c:16:b6:9f:e9:7d:
                    61:ad:67:0e:c7:b5:d4:2e:c9:6d:2e:41:3d:92:b0:
                    52:3c:1f:ae:27:1e:ba:17:14:35:ae:2c:de:cd:55:
                    47:26:5a:1c:36:d5:4b:e5:79:af:f6:2d:1c:70:ac:
                    75:ce:31:41:7f:bf:52:b4:ed:b5:78:ec:46:ab:71:
                    38:5c:26:b5:55:e6:28:33:06:8f:1f:36:58:20:56:
                    66:6e:b1:60:28:6c:1c:08:83:f8:81:0f:6a:67:fa:
                    ae:0b:10:f5:07:61:36:96:59:7a:c9:4b:c9:7f:d9:
                    51:19:5b:aa:af:59:b9:2c:17:41:1b:49:e4:55:2f:
                    55:c7:83:13:47:63:d7:67:8c:28:5d:ce:bc:d9:32:
                    c3:dd:5b:dc:f2:9a:cf:14:eb:9d:de:dd:13:00:d0:
                    a1:80:56:a4:6b:ab:c8:cb:53:36:e6:70:41:53:ab:
                    30:d8:8f:94:93:a7:99:36:b8:dd:b7:73:31:8f:5a:
                    91:4f:fb:7d:9d:e7:ea:f7:62:9f:ef:ed:bd:0c:0b:
                    15:10:c4:de:3c:5b:4d:53:c9:bb:60:2d:b1:0b:0b:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:83:66:10:8E:FB:55:FB:8E:FC:0C:17:B0:68:C0:AB:76:74:5E:E3
            X509v3 Authority Key Identifier:
                keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:d4:91:b9:d1:6e:74:d3:c5:4c:ef:68:99:05:04:a8:4b:
         06:25:39:b1:d9:5c:64:a6:e6:b5:a0:c1:15:44:a3:95:c5:34:
         75:a2:c1:88:60:e9:86:f4:1a:49:de:eb:76:91:e6:1c:a9:7e:
         ef:7e:7c:ba:6e:87:49:d9:72:6d:97:6d:9a:84:94:67:87:df:
         f9:03:fd:fd:98:05:91:a4:ea:fd:2a:f6:56:89:c7:91:d0:dc:
         b9:11:f5:bd:11:99:a3:3b:a2:c6:0d:31:d4:c2:c6:ad:a6:26:
         38:78:1e:3c:72:45:04:09:14:e5:a1:bf:72:da:47:69:77:1c:
         2a:18:d4:3a:d4:8b:7c:72:66:ee:b8:9a:38:60:db:b3:9f:ab:
         fa:be:1e:e9:d8:76:58:a4:16:e2:84:b5:b2:cf:be:21:ae:50:
         03:77:fd:c4:01:fd:23:9e:df:e2:55:a5:5f:85:9b:a2:ac:1c:
         50:ba:ed:43:a0:1d:15:01:b3:b7:ab:bc:07:c4:42:d1:01:6c:
         36:40:ce:9d:02:cb:08:bc:fe:8e:09:b6:a5:83:51:10:e1:b2:
         01:44:f1:e7:44:d7:8c:39:7e:0f:65:aa:de:52:ab:af:de:44:
         f4:2f:f2:d0:0b:0f:3b:01:1a:a9:e6:91:35:41:b0:a3:eb:e3:
         6b:80:c9:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzczMUYxMTAvBgNVBAUTKDVCNzUwOTBFOUVBMDQyOThCNDdCQUY4MkZBQTIyODBF
NUUzNkE0QkYwHhcNMjUxMjA1MDIwMzEyWhcNMjUxMjEyMDIwMzEyWjAYMRYwFAYD
VQQDEw02OTMyM2Q2MC0zNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUHeoB/C5LQaRFBPZM4wnb9rS02N7y21qZG2I3ClcPAtS49ZAAQMFraf6X1h
rWcOx7XULsltLkE9krBSPB+uJx66FxQ1rizezVVHJlocNtVL5Xmv9i0ccKx1zjFB
f79StO21eOxGq3E4XCa1VeYoMwaPHzZYIFZmbrFgKGwcCIP4gQ9qZ/quCxD1B2E2
lll6yUvJf9lRGVuqr1m5LBdBG0nkVS9Vx4MTR2PXZ4woXc682TLD3Vvc8prPFOud
3t0TANChgFaka6vIy1M25nBBU6sw2I+Uk6eZNrjdt3Mxj1qRT/t9nefq92Kf7+29
DAsVEMTePFtNU8m7YC2xCws/CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaDZhCO
+1X7jvwMF7BowKt2dF7jMB8GA1UdIwQYMBaAFFt1CQ6eoEKYtHuvgvqiKA5eNqS/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzMxRi84MTcxMUVEODlE
NkYxMUVFQkJCQzkxODBDNEY5QUUwMi9XM1VKRHA2Z1FwaTBlNi1DLXFJb0RsNDJw
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1czVUpEcDZnUXBpMGU2LUMtcUlvRGw0MnBMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzMxRi84MTcxMUVEODlENkYxMUVFQkJCQzkxODBDNEY5QUUwMi9XM1VKRHA2Z1Fw
aTBlNi1DLXFJb0RsNDJwTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJK9SRudFudNPFTO9omQUEqEsGJTmx2Vxkpua1oMEVRKOVxTR1osGI
YOmG9BpJ3ut2keYcqX7vfny6bodJ2XJtl22ahJRnh9/5A/39mAWRpOr9KvZWiceR
0Ny5EfW9EZmjO6LGDTHUwsatpiY4eB48ckUECRTlob9y2kdpdxwqGNQ61It8cmbu
uJo4YNuzn6v6vh7p2HZYpBbihLWyz74hrlADd/3EAf0jnt/iVaVfhZuirBxQuu1D
oB0VAbO3q7wHxELRAWw2QM6dAssIvP6OCbalg1EQ4bIBRPHnRNeMOX4PZareUquv
3kT0L/LQCw87ARqp5pE1QbCj6+NrgMn1
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:38 2025 by rpki-client