This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
File:                     W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft (raw, json)
Hash identifier:          wNtpilh8kj54WVTH8OwH/ZWrAOqy3Z2k5th1xHYsQ6A=
Subject key identifier:   2C:83:A5:9A:85:A2:CD:33:71:40:CF:2B:81:23:DE:81:36:9E:09:C8
Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
Certificate issuer:       /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
Certificate serial:       05A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
Manifest number:          059A
Signing time:             Thu 04 Dec 2025 21:50:42 +0000
Manifest this update:     Thu 04 Dec 2025 21:50:42 +0000
Manifest next update:     Thu 11 Dec 2025 21:50:42 +0000
Files and hashes:         1: W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl (hash: gh98MtAXDkesL1d9SVGBCEivL6/jFebw1pOo9LwZGU0=)
                          2: 4A4C8CD0F67311EBA0F18818C4F9AE02.roa (hash: 0rxVPA3QT2bWAi8jSb9208dOgsPXpTJit9Sh4K++O/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl
                          rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B714, serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
        Validity
            Not Before: Dec  4 21:50:42 2025 GMT
            Not After : Dec 11 21:50:42 2025 GMT
        Subject: CN=69320232-a8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:17:4b:b3:f9:24:90:97:8e:8a:06:10:a3:
                    7d:44:44:25:5e:f0:8a:a0:2d:98:e7:11:6f:bb:ae:
                    58:b5:38:63:c4:fe:f0:4d:94:4b:3f:f1:e5:2c:92:
                    aa:e3:42:a7:78:ed:4e:8a:e1:dc:f3:43:7a:85:3c:
                    84:20:00:04:4e:12:97:33:8f:6c:99:e3:a5:3a:d7:
                    1c:77:71:67:1d:67:8d:5e:a5:bf:f9:b5:ab:0b:40:
                    27:77:5c:1c:e6:9e:80:80:3c:08:97:c1:02:b5:f1:
                    e3:f6:eb:7b:c6:7c:67:9c:39:91:a8:40:58:a1:52:
                    dd:e9:81:3c:78:16:1a:57:df:86:24:8f:09:8d:ec:
                    3a:7a:07:16:3c:79:68:c5:f1:90:29:6f:8e:af:9f:
                    12:93:b9:2c:92:49:ef:61:fe:6d:03:0e:12:93:a6:
                    0d:1c:87:11:72:f6:32:b6:d2:df:fd:a0:ab:98:b4:
                    f0:2d:2d:c4:2c:39:6c:79:e4:bf:64:b7:15:fd:cc:
                    de:19:46:b0:c3:21:e9:f5:28:78:2d:5a:09:58:1e:
                    3c:93:c4:97:4f:fd:94:60:ed:2a:4d:0e:28:a6:1f:
                    e1:a1:e4:fd:61:4d:5c:e9:86:24:e0:e1:93:3b:cd:
                    c4:c1:99:d2:4f:9a:39:47:50:18:a9:0b:84:2a:33:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:A5:9A:85:A2:CD:33:71:40:CF:2B:81:23:DE:81:36:9E:09:C8
            X509v3 Authority Key Identifier:
                keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:39:89:c3:b2:1c:3b:a6:74:55:36:6e:88:0c:6a:e9:9d:45:
         51:ab:f8:41:b2:0e:fa:26:ad:31:d5:e5:48:81:0a:5d:f8:d4:
         67:ff:51:b6:19:db:15:64:55:ad:bc:01:89:e9:00:f9:ad:66:
         bf:5f:f8:84:0f:35:3e:91:ea:6d:6e:14:72:bb:26:9e:da:18:
         41:7b:7c:0e:e0:6c:b2:2f:fe:8b:9a:26:67:cd:95:e4:ec:28:
         87:31:12:98:b5:95:1d:f5:59:bf:08:36:7a:46:1d:6d:ff:d4:
         96:3e:d1:95:25:07:60:ee:63:2a:53:a7:fd:cb:99:e7:59:1e:
         7f:b4:e1:5b:af:85:6d:e1:68:c9:7f:0e:5e:36:ff:63:92:f6:
         b6:df:fd:aa:00:c6:7d:89:09:6a:c7:57:fc:3c:de:3f:f3:ac:
         61:24:ab:ca:ed:2b:77:da:3b:66:59:de:6b:a4:cc:ef:26:9f:
         23:05:e9:4d:4a:7a:b3:c4:3d:a0:75:97:5b:05:21:6f:28:0c:
         df:58:02:9f:03:db:87:09:59:b2:9b:4f:cc:34:fa:f9:66:8f:
         4d:96:33:4b:23:a3:9b:64:7e:b3:71:4b:bd:0c:f3:7a:cb:63:
         69:01:4c:2d:ba:b1:f8:96:00:23:f4:0f:53:e8:fc:dc:90:65:
         67:32:37:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I3MTQxMTAvBgNVBAUTKDVCRTk3RkE0RDM0QjNFRDMxREJENjQ4NjBFMTgwMDkz
RkVBMTExREYwHhcNMjUxMjA0MjE1MDQyWhcNMjUxMjExMjE1MDQyWjAYMRYwFAYD
VQQDEw02OTMyMDIzMi1hOGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjsXS7P5JJCXjooGEKN9REQlXvCKoC2Y5xFvu65YtThjxP7wTZRLP/HlLJKq
40KneO1OiuHc80N6hTyEIAAEThKXM49smeOlOtccd3FnHWeNXqW/+bWrC0And1wc
5p6AgDwIl8ECtfHj9ut7xnxnnDmRqEBYoVLd6YE8eBYaV9+GJI8Jjew6egcWPHlo
xfGQKW+Or58Sk7kskknvYf5tAw4Sk6YNHIcRcvYyttLf/aCrmLTwLS3ELDlseeS/
ZLcV/czeGUawwyHp9Sh4LVoJWB48k8SXT/2UYO0qTQ4oph/hoeT9YU1c6YYk4OGT
O83EwZnST5o5R1AYqQuEKjMd4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyDpZqF
os0zcUDPK4Ej3oE2ngnIMB8GA1UdIwQYMBaAFFvpf6TTSz7THb1khg4YAJP+oRHf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjcxNC82NDA0QzAxOEY2
NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0TWR2V1NHRGhnQWtfNmhF
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ctbF9wTk5MUHRNZHZXU0dEaGdBa182aEVkOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjcxNC82NDA0QzAxOEY2NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0
TWR2V1NHRGhnQWtfNmhFZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwOYnDshw7pnRVNm6IDGrpnUVRq/hBsg76Jq0x1eVIgQpd+NRn/1G2
GdsVZFWtvAGJ6QD5rWa/X/iEDzU+keptbhRyuyae2hhBe3wO4GyyL/6LmiZnzZXk
7CiHMRKYtZUd9Vm/CDZ6Rh1t/9SWPtGVJQdg7mMqU6f9y5nnWR5/tOFbr4Vt4WjJ
fw5eNv9jkva23/2qAMZ9iQlqx1f8PN4/86xhJKvK7St32jtmWd5rpMzvJp8jBelN
SnqzxD2gdZdbBSFvKAzfWAKfA9uHCVmym0/MNPr5Zo9NljNLI6ObZH6zcUu9DPN6
y2NpAUwturH4lgAj9A9T6PzckGVnMjc3
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:25:29 2025 by rpki-client