This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File:                     wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier:          jiVE6O8O/TZRMda80OEPkLsyopJH4BD7uSSHhMmnFnw=
Subject key identifier:   CB:06:33:16:68:AC:EF:66:34:20:17:4D:81:7D:64:B9:61:E2:89:62
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer:       /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial:       05D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number:          05A0
Signing time:             Thu 04 Dec 2025 21:59:06 +0000
Manifest this update:     Thu 04 Dec 2025 21:59:06 +0000
Manifest next update:     Thu 11 Dec 2025 21:59:06 +0000
Files and hashes:         1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: YIo5FQ7Vmhr8LB8/yTafhVq5O6GBTtiDjIkg/D+yjek=)
                          2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: P6wLHpQqCHGL554TbsS5XznXqZdAAm0+usW172StxkE=)
                          3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: 9XIDfJY0Nbkx5W4WrOh9skXlNedfJVNiInoNg42Y+8s=)
                          4: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: GP/xk9klfhzGUqC9zVSgLsFcoj/SNA7QNKZizL06GJY=)
                          5: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: bKJMqVVKRvZ4SvMBFN3lmqToCrhVtOKwpkwkSKOCPAY=)
                          6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: Jx8gJbXn9OtsYSW59bLdCCTB+IjRw64vOzcz4bDoiq4=)
                          7: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: 2I5Ge7KBh0e5lEpfrh8ZbOfF9fHkRChHLpkEq2RW7oE=)
                          8: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: WGM85d42jF0RvgbFfnNoubVrh59/d23ICHptXHKbWpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
                          rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
        Validity
            Not Before: Dec  4 21:59:06 2025 GMT
            Not After : Dec 11 21:59:06 2025 GMT
        Subject: CN=6932042a-201f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:40:f7:8e:eb:7e:86:d1:e7:d1:3d:f9:09:
                    5d:5e:e9:cc:85:8f:7c:d7:9a:00:0a:e0:38:8e:07:
                    3a:02:cc:94:6f:9e:7d:23:6b:2a:84:2d:1a:30:18:
                    fb:9d:51:d7:47:6f:d1:b4:ce:e3:4c:cd:7d:24:3e:
                    aa:a4:15:52:2c:6a:0e:6a:56:57:62:b9:43:32:2b:
                    3d:51:8f:9b:f4:f2:1a:cd:51:e2:06:82:68:ac:fa:
                    77:83:34:df:2a:a2:ca:b2:8c:6d:31:8e:5f:1e:cf:
                    2b:a2:e5:e7:2b:0f:bc:86:25:7b:80:fe:24:4c:38:
                    f7:be:0b:6d:d4:3f:3b:9c:60:8c:7a:41:27:fe:c3:
                    b5:35:92:4d:13:59:1a:cd:65:45:fd:f5:e7:c2:5d:
                    ea:23:be:68:ad:46:24:6b:75:a6:5a:fb:6b:f8:27:
                    36:c5:c5:5f:0b:03:72:f6:5c:13:47:40:b6:3a:1f:
                    82:85:91:cf:65:1d:ca:38:cf:dd:f0:6c:af:ae:26:
                    a2:a0:20:3b:52:2b:1e:0e:b0:10:2a:c8:18:ad:1c:
                    82:4e:98:8d:6a:05:68:fa:af:26:e1:f6:6e:84:5e:
                    d2:13:29:1a:8d:08:55:b6:ae:2f:fc:50:9b:46:2b:
                    cf:7a:bd:02:2d:7a:9d:72:1e:c3:ce:41:9d:3f:42:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:06:33:16:68:AC:EF:66:34:20:17:4D:81:7D:64:B9:61:E2:89:62
            X509v3 Authority Key Identifier:
                keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:0b:b6:37:e2:0b:06:c1:d0:f3:49:5c:cc:15:a5:f0:e8:
         bf:8c:b1:51:69:70:12:7b:4a:ab:63:6d:ab:42:ef:11:b1:24:
         0f:3c:16:06:80:1a:5e:4a:de:c2:88:53:ac:45:10:ef:30:05:
         c9:89:0c:0f:04:ad:00:33:02:53:bb:66:9e:71:b3:aa:2e:d4:
         8d:03:5f:48:86:4e:38:6a:ac:43:09:e6:1c:f3:ed:4f:a6:9f:
         bf:3c:00:a8:b4:80:9f:0e:a7:77:80:40:1e:36:c8:97:46:e7:
         c0:e4:14:23:bd:cc:ce:5b:6a:42:b9:71:e4:ec:2f:59:08:a6:
         48:2d:78:6a:13:94:9b:66:11:6d:3a:7d:5b:ad:43:3f:80:2f:
         ac:bc:4d:16:00:b4:10:ef:8b:fb:72:70:56:d6:d1:34:35:d2:
         7a:c9:40:77:90:aa:76:36:f3:21:35:b4:b5:fb:99:25:60:97:
         5e:af:e3:32:67:cc:1a:2a:5e:27:d2:96:8f:11:15:a2:0a:40:
         64:b7:da:72:58:85:2a:1d:0f:58:37:aa:d9:94:87:d5:90:52:
         c9:21:4e:cc:99:04:90:8c:12:cc:21:5d:19:6f:48:c1:a6:a2:
         84:e8:fe:f7:ef:de:a3:b9:d8:72:28:f3:59:ee:c2:53:40:94:
         ac:8f:b1:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0
MjQ5NjI5MUQwHhcNMjUxMjA0MjE1OTA2WhcNMjUxMjExMjE1OTA2WjAYMRYwFAYD
VQQDEw02OTMyMDQyYS0yMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IBA947rfobR59E9+QldXunMhY9815oACuA4jgc6AsyUb559I2sqhC0aMBj7
nVHXR2/RtM7jTM19JD6qpBVSLGoOalZXYrlDMis9UY+b9PIazVHiBoJorPp3gzTf
KqLKsoxtMY5fHs8rouXnKw+8hiV7gP4kTDj3vgtt1D87nGCMekEn/sO1NZJNE1ka
zWVF/fXnwl3qI75orUYka3WmWvtr+Cc2xcVfCwNy9lwTR0C2Oh+ChZHPZR3KOM/d
8GyvriaioCA7UiseDrAQKsgYrRyCTpiNagVo+q8m4fZuhF7SEykajQhVtq4v/FCb
RivPer0CLXqdch7DzkGdP0JyDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsGMxZo
rO9mNCAXTYF9ZLlh4oliMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC
RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j
VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA69Au2N+ILBsHQ80lczBWl8Oi/jLFRaXASe0qrY22rQu8RsSQPPBYG
gBpeSt7CiFOsRRDvMAXJiQwPBK0AMwJTu2aecbOqLtSNA19Ihk44aqxDCeYc8+1P
pp+/PACotICfDqd3gEAeNsiXRufA5BQjvczOW2pCuXHk7C9ZCKZILXhqE5SbZhFt
On1brUM/gC+svE0WALQQ74v7cnBW1tE0NdJ6yUB3kKp2NvMhNbS1+5klYJder+My
Z8waKl4n0paPERWiCkBkt9pyWIUqHQ9YN6rZlIfVkFLJIU7MmQSQjBLMIV0Zb0jB
pqKE6P73796judhyKPNZ7sJTQJSsj7Es
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:26:12 2025 by rpki-client