This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
File:                     WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json)
Hash identifier:          KXLkL1Eb3QkjLJsuHz5l9BdMez5fgTHyuaAa0D8uz/s=
Subject key identifier:   07:35:59:79:D0:0B:A0:55:36:A8:1C:A0:D5:FA:80:B0:AC:CE:C8:F3
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Certificate issuer:       /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
Manifest number:          C5
Signing time:             Fri 05 Dec 2025 03:51:57 +0000
Manifest this update:     Fri 05 Dec 2025 03:51:56 +0000
Manifest next update:     Fri 12 Dec 2025 03:51:56 +0000
Files and hashes:         1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: d/aBv0BYDPLZCkiGfH9dGlIyy1o0n9YBoWPvq4TIVLs=)
                          2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
                          rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
        Validity
            Not Before: Dec  5 03:51:56 2025 GMT
            Not After : Dec 12 03:51:56 2025 GMT
        Subject: CN=693256dc-2504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:d3:89:c8:2a:27:1b:46:e6:48:83:d7:93:
                    84:87:24:59:3e:af:67:0e:33:79:4f:f9:de:f1:16:
                    e8:5a:f2:67:50:f6:bf:d3:67:9e:68:fb:8f:e8:4f:
                    e5:29:e3:06:25:70:4a:55:dc:b1:a5:76:f1:07:14:
                    75:8d:9d:81:d7:ee:fb:4c:0b:dc:fd:4f:59:f5:b4:
                    89:1d:93:0c:51:6e:6c:b3:1a:47:49:72:27:50:8e:
                    0e:1d:e9:e0:e2:65:4d:8b:09:8f:b8:1c:15:3c:e9:
                    c0:c6:88:13:15:68:59:9d:3e:40:67:15:ab:bf:8a:
                    25:13:ec:13:f9:65:07:b1:92:e0:d6:0e:24:9a:30:
                    9c:ff:69:e7:71:54:6f:b1:fc:8f:14:e7:3d:c6:2c:
                    b8:61:b8:59:33:5b:c9:8a:c2:1f:bb:41:05:78:92:
                    47:e2:38:1e:e4:97:fa:e3:86:4e:2b:67:50:bc:c7:
                    50:ec:a0:5c:4e:73:df:1e:9a:9f:92:41:da:52:fe:
                    4d:50:7f:2e:7e:a4:63:39:ad:0a:7e:39:9c:38:0f:
                    b6:61:18:ca:bb:62:f6:4c:3b:2f:88:86:ca:e2:dd:
                    90:e0:aa:d6:53:d1:5a:19:35:0f:11:b1:16:e1:bb:
                    4a:d4:7e:0a:d7:1b:4e:17:e7:9d:ac:11:e2:d8:00:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:35:59:79:D0:0B:A0:55:36:A8:1C:A0:D5:FA:80:B0:AC:CE:C8:F3
            X509v3 Authority Key Identifier:
                keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:49:36:0e:fb:08:88:f4:91:08:33:18:70:e9:35:07:41:
         f9:8d:1f:36:35:25:0f:6a:9a:43:c4:7e:16:e0:07:08:2c:d4:
         de:d6:bf:a2:8e:2b:0a:22:09:ff:89:0e:2c:88:d7:d1:4b:2d:
         4b:9a:1b:e4:cb:90:2b:20:0d:7f:82:60:ff:17:73:93:e6:53:
         15:6b:31:c5:3e:c4:c7:5a:e0:ef:fd:5c:88:4c:30:b9:3e:28:
         7d:23:09:01:f5:fd:19:d5:e8:8f:22:e6:04:91:0d:e4:73:e3:
         51:36:7d:27:a9:94:55:17:1a:74:26:e4:67:35:fe:2a:0c:28:
         89:2e:23:0f:24:f4:c2:77:74:b0:3b:71:8c:59:56:47:9b:2a:
         b1:d6:0b:a4:00:63:b4:02:39:0e:e5:33:3b:03:c9:1b:32:76:
         54:81:99:a2:f8:28:49:4d:93:c2:2e:cb:57:bf:c1:07:74:49:
         f2:fb:70:b5:e2:a5:92:32:fc:33:af:81:2b:9d:a0:62:75:ad:
         4b:e9:ea:5d:f8:d3:91:3e:70:f2:35:04:8a:a6:5e:7a:1c:e5:
         07:7b:bd:66:f2:08:33:4b:25:d1:ad:83:5e:8e:fe:ae:16:83:
         3d:5f:b8:35:a0:fe:6e:95:97:81:26:5e:4b:61:0f:35:18:ab:
         b0:8d:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:14 2025 by rpki-client