This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
File:                     WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json)
Hash identifier:          n5S6CN08bWbOgr+MnV4bOFaSOi6949Ub3RbTrfFgjFY=
Subject key identifier:   37:7D:87:CC:BF:E8:EF:0D:CE:2A:60:85:AF:4C:ED:98:22:9C:4B:CD
Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
Certificate issuer:       /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Certificate serial:       0330
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
Manifest number:          0488
Signing time:             Thu 04 Dec 2025 23:27:14 +0000
Manifest this update:     Thu 04 Dec 2025 23:27:14 +0000
Manifest next update:     Thu 11 Dec 2025 23:27:14 +0000
Files and hashes:         1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: bv6Ygs/miApBYtg4hnM1Ol0KRn0+Px3pRXOB9ot6Ge4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl
                          rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
        Validity
            Not Before: Dec  4 23:27:14 2025 GMT
            Not After : Dec 11 23:27:14 2025 GMT
        Subject: CN=693218d2-8610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:01:fd:da:02:bb:f2:c4:08:65:50:50:c7:
                    d9:9b:2d:ee:7b:2d:a5:53:4b:20:af:6c:26:95:8e:
                    08:17:7f:33:e2:23:f7:5e:b6:26:86:cd:4d:e3:24:
                    96:0e:0b:68:15:f3:7b:17:8e:25:d4:d1:d8:0a:02:
                    47:50:ad:53:e5:fe:53:27:b3:49:04:70:b2:7d:9d:
                    b9:8b:a4:d2:41:e4:4a:d2:68:5d:ad:bb:af:c3:da:
                    ff:04:2e:db:90:4a:86:12:8c:9b:d3:e9:45:82:ce:
                    67:e3:48:63:87:ba:ef:53:a8:2a:8d:b7:58:58:7c:
                    46:27:5e:2f:49:a5:2a:7e:e1:c9:ab:f5:31:d0:ea:
                    f8:bd:a5:cd:3d:31:64:4c:02:79:52:52:4d:a6:18:
                    19:43:b7:be:b7:2a:d9:eb:db:ee:c9:0f:f5:8b:7f:
                    f4:58:34:af:69:0c:c2:9b:6f:95:99:2b:8e:e8:dc:
                    75:b3:be:10:d0:9b:e1:0f:6d:b2:90:47:0c:a9:d2:
                    ab:dc:34:a0:26:45:bd:91:40:a1:6b:aa:ee:82:26:
                    1e:ae:0d:98:5f:b8:ab:67:95:76:04:cf:99:e9:a8:
                    cb:dd:ff:3d:ff:24:b2:76:ca:02:9e:69:64:12:c3:
                    c0:7b:6a:e5:ad:ba:21:f7:ba:ef:17:a7:bf:2e:fe:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7D:87:CC:BF:E8:EF:0D:CE:2A:60:85:AF:4C:ED:98:22:9C:4B:CD
            X509v3 Authority Key Identifier:
                keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:96:4e:8c:a0:81:61:82:b1:1a:6d:31:c7:c3:8e:b3:be:32:
         63:1d:39:b0:d5:1b:ae:c4:05:c1:fa:a9:9d:5d:04:78:5c:09:
         bd:88:50:78:27:56:c5:ea:da:8e:fa:9c:a8:b4:1d:c9:42:18:
         c8:c8:04:a4:1a:59:c7:be:c0:ed:ac:7a:77:82:9f:56:cf:c1:
         3b:84:bb:4a:76:0f:de:04:c7:68:3f:35:d4:5d:ed:78:07:d9:
         51:c6:67:a8:37:a7:df:0d:a4:79:ee:77:6d:36:5f:47:74:48:
         ca:a8:46:a6:69:f2:9f:cd:b2:db:6c:fb:cd:df:e4:dc:ea:7f:
         7b:4d:2b:51:5f:ed:fa:c1:b7:a7:ef:d2:ad:42:c8:5e:6a:f9:
         cc:60:c4:1f:96:44:93:4c:7d:e5:50:ad:88:5d:43:b2:28:53:
         9f:45:44:11:ed:1a:4d:10:38:6d:7f:85:4e:ce:c5:13:3d:24:
         17:72:6e:56:29:e9:65:ad:44:7d:51:eb:64:cb:19:8b:70:79:
         24:1f:75:1b:f4:49:5f:0b:a4:ec:f3:04:fb:4b:ca:be:39:7c:
         68:e0:b7:aa:88:bb:c2:cf:b3:70:d0:5e:1a:50:76:f7:0b:b8:
         a4:93:ad:b5:a0:bc:f4:07:e1:3b:09:f4:79:44:14:cc:a7:15:
         76:99:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:57:53 2025 by rpki-client