This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
File:                     wEyBplFeUCbiG-aMudUdQTmoWpI.mft (raw, json)
Hash identifier:          eP/h6+QE+Ytt0zet83tx1e7PiioO485fktZXrhhurL4=
Subject key identifier:   39:2D:59:DA:46:57:F5:3E:B5:B7:77:94:18:6D:5E:17:95:89:94:7E
Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92
Certificate issuer:       /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
Certificate serial:       0527
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
Manifest number:          051D
Signing time:             Thu 04 Dec 2025 22:10:08 +0000
Manifest this update:     Thu 04 Dec 2025 22:10:08 +0000
Manifest next update:     Thu 11 Dec 2025 22:10:08 +0000
Files and hashes:         1: wEyBplFeUCbiG-aMudUdQTmoWpI.crl (hash: 0ykemb6saTB/POS0wgqNav29U9zag9QS83VlAgwNq0E=)
                          2: 20B772FA7F4411F0B804E363C4F9AE02.roa (hash: GHU46pwFdHH/MxA4DwdKP3Yka/se9HwPFbcdAQRWGBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl
                          rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
        Validity
            Not Before: Dec  4 22:10:08 2025 GMT
            Not After : Dec 11 22:10:08 2025 GMT
        Subject: CN=693206c0-8549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:d6:11:d3:3d:22:75:85:90:e9:32:18:4a:
                    d7:5b:6e:60:6a:93:ec:31:9d:eb:a7:c7:9e:2d:2e:
                    6f:22:26:8a:14:81:74:9d:c5:22:66:6a:c5:72:b5:
                    96:90:57:0b:36:2d:58:c8:36:17:b5:14:12:66:14:
                    5b:98:04:fa:5e:5e:3e:b0:b7:f0:7a:ee:51:a1:9f:
                    3c:25:a4:6d:ee:a3:71:46:80:a2:10:eb:ff:0a:c5:
                    9d:69:cb:2d:58:40:26:e3:9b:c6:f5:01:23:7e:34:
                    71:ce:e9:4c:40:b3:fd:ba:dd:e0:ad:85:4b:a5:aa:
                    ad:3a:77:32:dd:06:31:e2:12:b5:e1:72:7f:37:8d:
                    fc:c9:46:8b:42:58:43:e5:ce:13:64:d8:fc:37:5c:
                    72:3c:a6:ea:2a:1e:73:82:8d:88:ea:37:66:f1:9d:
                    8a:4a:99:cf:1f:84:02:dd:ba:71:24:eb:cc:14:3b:
                    72:b4:3e:b8:e2:6e:f5:d5:23:c1:74:57:a9:62:c0:
                    08:66:fa:46:91:8b:3d:b7:d5:c4:a9:db:08:ec:b2:
                    df:af:8a:bd:ab:7e:ec:0e:43:42:b3:df:2b:fd:4e:
                    19:d5:2d:12:97:d5:59:4e:b5:3e:fb:4e:36:ed:67:
                    23:6a:25:4a:57:5e:dc:5d:0f:cd:14:26:ba:9e:d6:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2D:59:DA:46:57:F5:3E:B5:B7:77:94:18:6D:5E:17:95:89:94:7E
            X509v3 Authority Key Identifier:
                keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4c:99:dd:4e:8c:b3:9c:8a:28:ff:48:13:65:36:e3:ae:76:
         34:89:45:b9:b3:b8:d7:93:0e:df:a3:d4:be:23:35:de:ba:f6:
         30:7e:32:55:79:2f:1e:fd:f8:87:63:fe:ab:10:0b:a4:7c:ae:
         60:e8:25:18:e3:fe:9d:e0:92:8d:72:84:8e:e4:78:fe:ee:f5:
         42:be:bc:f3:7c:da:54:18:7e:98:53:85:4b:9a:17:62:29:b6:
         20:3f:8b:84:f6:5c:f3:71:7d:33:05:6b:cf:a8:33:ee:3c:da:
         9c:dd:ce:1f:e6:cf:97:8b:05:09:31:2c:88:5a:f2:d4:8c:ad:
         eb:03:ec:b6:f7:6b:5b:d1:f3:47:ac:86:88:30:e9:db:83:42:
         42:55:2b:d9:6f:a7:1b:cc:3e:71:f3:d8:72:f0:1e:df:1b:c3:
         3b:e7:69:77:50:82:01:d3:92:41:9a:94:e0:31:7e:15:ff:3e:
         89:4a:9e:d8:28:80:78:66:23:9e:fc:f2:6d:62:5f:17:1a:fd:
         8b:d8:cc:4d:b0:6f:14:e6:dd:e6:7d:04:c8:cc:5e:c7:ed:f9:
         34:70:60:96:1d:81:40:77:d8:4a:ff:b4:55:3b:64:4d:44:45:
         da:62:1b:3f:cc:fe:b7:e2:d4:46:9b:2b:ea:e3:7c:a1:21:4a:
         30:6f:b9:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA5ODQxMTAvBgNVBAUTKEMwNEM4MUE2NTE1RTUwMjZFMjFCRTY4Q0I5RDUxRDQx
MzlBODVBOTIwHhcNMjUxMjA0MjIxMDA4WhcNMjUxMjExMjIxMDA4WjAYMRYwFAYD
VQQDEw02OTMyMDZjMC04NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1AXWEdM9InWFkOkyGErXW25gapPsMZ3rp8eeLS5vIiaKFIF0ncUiZmrFcrWW
kFcLNi1YyDYXtRQSZhRbmAT6Xl4+sLfweu5RoZ88JaRt7qNxRoCiEOv/CsWdacst
WEAm45vG9QEjfjRxzulMQLP9ut3grYVLpaqtOncy3QYx4hK14XJ/N438yUaLQlhD
5c4TZNj8N1xyPKbqKh5zgo2I6jdm8Z2KSpnPH4QC3bpxJOvMFDtytD644m711SPB
dFepYsAIZvpGkYs9t9XEqdsI7LLfr4q9q37sDkNCs98r/U4Z1S0Sl9VZTrU++042
7WcjaiVKV17cXQ/NFCa6ntZr8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDktWdpG
V/U+tbd3lBhtXheViZR+MB8GA1UdIwQYMBaAFMBMgaZRXlAm4hvmjLnVHUE5qFqS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDk4NC80MEU4MjY2QTJD
M0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVDYmlHLWFNdWRVZFFUbW9X
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dFeUJwbEZlVUNiaUctYU11ZFVkUVRtb1dwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDk4NC80MEU4MjY2QTJDM0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVD
YmlHLWFNdWRVZFFUbW9XcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUTJndToyznIoo/0gTZTbjrnY0iUW5s7jXkw7fo9S+IzXeuvYwfjJV
eS8e/fiHY/6rEAukfK5g6CUY4/6d4JKNcoSO5Hj+7vVCvrzzfNpUGH6YU4VLmhdi
KbYgP4uE9lzzcX0zBWvPqDPuPNqc3c4f5s+XiwUJMSyIWvLUjK3rA+y292tb0fNH
rIaIMOnbg0JCVSvZb6cbzD5x89hy8B7fG8M752l3UIIB05JBmpTgMX4V/z6JSp7Y
KIB4ZiOe/PJtYl8XGv2L2MxNsG8U5t3mfQTIzF7H7fk0cGCWHYFAd9hK/7RVO2RN
REXaYhs/zP634tRGmyvq43yhIUowb7mN
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:05:20 2025 by rpki-client