This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
File:                     w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json)
Hash identifier:          6fZiTeNWjBMmnRcN6qDcxa2hv1mEGFmPweEJVuW+KfQ=
Subject key identifier:   1C:EF:3A:3A:A8:CD:33:98:94:89:2C:E3:56:7B:BA:FB:60:FC:34:FF
Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A
Certificate issuer:       /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
Manifest number:          0167
Signing time:             Fri 05 Dec 2025 02:09:30 +0000
Manifest this update:     Fri 05 Dec 2025 02:09:30 +0000
Manifest next update:     Fri 12 Dec 2025 02:09:30 +0000
Files and hashes:         1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: Dy+AfIfuZif3c6XqtHhGZzwfha3cnEuru31ZnH9eVdc=)
                          2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl
                          rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
        Validity
            Not Before: Dec  5 02:09:30 2025 GMT
            Not After : Dec 12 02:09:30 2025 GMT
        Subject: CN=69323eda-6b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:97:a3:2f:27:e5:39:da:70:04:c6:c9:dc:
                    61:45:54:fe:11:c6:0c:a8:ce:cf:94:f0:20:4a:25:
                    52:2c:69:d2:f8:ce:b4:28:d1:b5:3b:62:48:f8:ed:
                    69:1c:4e:48:26:a6:66:4d:07:69:70:a7:30:7d:53:
                    31:3d:d7:c2:39:14:2d:dd:a0:42:f1:b2:ee:f6:05:
                    2a:70:bd:85:1c:f0:f6:5a:84:f6:37:0d:67:21:22:
                    d5:6a:16:60:6f:7a:24:2f:19:92:ae:2e:5b:47:ef:
                    fb:a2:5f:25:64:c4:4f:d3:78:2a:a2:88:36:19:f0:
                    42:3d:c9:0d:d2:34:68:f6:ff:f5:ee:72:f2:04:df:
                    1b:3d:63:4e:34:2a:84:14:e4:31:01:25:9e:ea:96:
                    a0:3d:6d:36:96:36:02:5f:ce:28:bf:1a:12:99:e8:
                    e6:d9:e0:aa:0d:e8:df:85:01:7e:ce:6f:84:9f:a1:
                    ee:f0:65:1a:3b:31:9c:67:91:af:ab:00:21:c0:bd:
                    ec:ee:79:91:a9:d0:ec:d3:ec:9a:18:f6:6a:67:da:
                    b7:c5:19:f2:da:30:df:4f:7d:96:d5:72:8a:5f:62:
                    19:f7:67:1f:61:4f:57:68:9c:10:c0:69:e3:7a:7d:
                    1c:71:90:30:41:5f:a0:55:b6:85:10:3b:a7:b2:58:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EF:3A:3A:A8:CD:33:98:94:89:2C:E3:56:7B:BA:FB:60:FC:34:FF
            X509v3 Authority Key Identifier:
                keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4d:ea:31:b3:d2:51:57:c9:f2:63:a5:cf:a3:4e:ab:a1:27:
         5a:e6:05:f2:00:88:7f:f3:9a:26:99:c9:40:1a:df:55:6f:74:
         24:0b:f5:bd:d3:93:47:4c:eb:d3:99:27:42:27:c9:e1:98:90:
         e8:95:0f:2f:d0:0f:eb:1b:77:8b:42:2d:3a:a2:ff:e2:19:e6:
         91:8d:9f:45:b8:d4:1f:53:84:53:5b:b0:ee:b2:36:f0:c7:c4:
         df:72:68:3d:ac:91:bd:ce:41:e4:54:9d:29:80:d8:17:65:e1:
         ae:f7:99:e6:8a:47:34:ac:b5:25:be:94:12:45:52:0f:57:99:
         16:0d:a3:a0:20:e4:a8:49:d5:ca:a4:1c:f4:59:84:97:a3:c5:
         24:9c:bd:b6:e5:54:50:6c:41:de:2a:07:fd:1f:19:7e:3b:c3:
         6a:5b:ed:83:cc:e9:84:87:e1:e6:a9:52:99:4c:6a:a0:b6:54:
         82:c6:65:b2:21:13:8c:5a:c5:0c:b2:59:8b:d2:e2:98:27:7a:
         70:03:1f:46:20:c9:d3:f9:ea:ff:53:a3:6d:41:2b:7b:54:28:
         db:45:ac:67:88:2d:86:3e:d1:0b:c3:3a:34:9b:15:00:20:68:
         31:95:cf:11:2e:40:39:22:5f:42:15:f6:1b:03:00:e0:92:6c:
         77:d9:c5:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx
NjQwREQzM0EwHhcNMjUxMjA1MDIwOTMwWhcNMjUxMjEyMDIwOTMwWjAYMRYwFAYD
VQQDEw02OTMyM2VkYS02YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbiXoy8n5TnacATGydxhRVT+EcYMqM7PlPAgSiVSLGnS+M60KNG1O2JI+O1p
HE5IJqZmTQdpcKcwfVMxPdfCORQt3aBC8bLu9gUqcL2FHPD2WoT2Nw1nISLVahZg
b3okLxmSri5bR+/7ol8lZMRP03gqoog2GfBCPckN0jRo9v/17nLyBN8bPWNONCqE
FOQxASWe6pagPW02ljYCX84ovxoSmejm2eCqDejfhQF+zm+En6Hu8GUaOzGcZ5Gv
qwAhwL3s7nmRqdDs0+yaGPZqZ9q3xRny2jDfT32W1XKKX2IZ92cfYU9XaJwQwGnj
en0ccZAwQV+gVbaFEDunslh5iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzvOjqo
zTOYlIks41Z7uvtg/DT/MB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy
ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1
Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaTeoxs9JRV8nyY6XPo06roSda5gXyAIh/85ommclAGt9Vb3QkC/W9
05NHTOvTmSdCJ8nhmJDolQ8v0A/rG3eLQi06ov/iGeaRjZ9FuNQfU4RTW7Dusjbw
x8Tfcmg9rJG9zkHkVJ0pgNgXZeGu95nmikc0rLUlvpQSRVIPV5kWDaOgIOSoSdXK
pBz0WYSXo8UknL225VRQbEHeKgf9Hxl+O8NqW+2DzOmEh+HmqVKZTGqgtlSCxmWy
IROMWsUMslmL0uKYJ3pwAx9GIMnT+er/U6NtQSt7VCjbRaxniC2GPtELwzo0mxUA
IGgxlc8RLkA5Il9CFfYbAwDgkmx32cWq
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:29:38 2025 by rpki-client