This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
File:                     Wooi55jo9JLh-FhQOV63mFXso-U.mft (raw, json)
Hash identifier:          nPn15CaqOnj7XBcYGLg4Dvbpslgq1d0KVGbjxl4ZcJs=
Subject key identifier:   57:90:6C:E3:28:D1:26:B0:27:AE:AB:75:BA:1A:62:17:E3:DF:A4:EC
Authority key identifier: 5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
Certificate issuer:       /CN=A9152A4E/serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
Manifest number:          0694
Signing time:             Sat 20 Dec 2025 21:43:13 +0000
Manifest this update:     Sat 20 Dec 2025 21:43:12 +0000
Manifest next update:     Sat 27 Dec 2025 21:43:12 +0000
Files and hashes:         1: Wooi55jo9JLh-FhQOV63mFXso-U.crl (hash: qFiUzzFjLRlGDEvI6piMqZ2TNBTiRwHKj9mK78UOGRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.crl
                          rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E, serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
        Validity
            Not Before: Dec 20 21:43:12 2025 GMT
            Not After : Dec 27 21:43:12 2025 GMT
        Subject: CN=69471871-8d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:23:ce:b6:ff:bf:ff:ed:a0:e0:36:4c:fd:
                    c2:c9:02:22:76:2c:a5:ef:c7:d4:17:b3:8e:89:2c:
                    33:cb:4c:dd:cc:db:dc:88:b6:ca:67:24:e4:87:0f:
                    26:34:3d:b5:73:0a:81:9e:8d:2e:af:e3:93:e2:af:
                    8b:41:d1:cf:a1:4f:27:bc:24:0a:ff:e8:1f:74:ea:
                    45:d8:4b:0d:fd:20:50:31:07:89:70:3f:49:99:22:
                    4d:20:05:ca:a1:0b:cc:38:50:45:8c:0c:6e:f9:b8:
                    06:13:55:33:01:e6:9e:65:bb:72:dc:de:d1:53:09:
                    5b:b4:85:20:59:b9:08:58:12:f0:10:87:3d:6d:5b:
                    f8:bf:a1:a3:6d:86:40:15:3a:ed:4b:e9:75:a8:3c:
                    e0:13:b7:ca:9f:42:fb:0f:35:92:44:ba:ca:e2:af:
                    3c:ce:3d:63:bc:5b:b4:97:f6:5b:59:af:c4:c4:2e:
                    5b:68:2d:dd:af:c1:ed:f6:8f:30:a8:da:1f:b1:4b:
                    0f:67:c1:39:38:69:d0:7a:c9:58:f9:93:f5:f9:ee:
                    c5:92:00:2e:5c:a5:2d:fa:71:86:92:97:7e:61:a3:
                    50:5c:93:e1:8c:82:f6:02:7c:76:aa:80:8e:32:2f:
                    8e:99:d0:58:2a:75:02:e3:62:1c:0a:09:04:11:27:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:90:6C:E3:28:D1:26:B0:27:AE:AB:75:BA:1A:62:17:E3:DF:A4:EC
            X509v3 Authority Key Identifier:
                keyid:5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:06:57:b8:ab:6f:6e:1d:71:5d:7e:47:83:ca:1e:1b:a2:e9:
         12:b7:99:29:87:18:61:0f:ac:86:a3:bc:4f:d3:bf:1e:9f:b6:
         ca:7a:36:fc:e2:a6:3b:27:27:b3:4a:df:87:5b:68:03:ea:25:
         d7:10:91:17:90:69:d4:f9:84:81:f6:d2:50:f8:4b:3b:19:a2:
         03:84:5e:e0:15:9a:b5:c3:8d:e1:63:01:b7:9f:5e:f3:ec:0a:
         ae:c8:8c:3f:7e:69:6d:af:26:15:6d:af:ce:65:3f:05:51:13:
         71:41:4c:b8:fe:c8:bc:bc:78:97:3c:52:ea:3c:bb:65:0e:59:
         4c:1b:d2:d2:36:d2:38:94:0a:2c:a6:19:72:e5:a9:4e:64:b6:
         59:1c:50:8c:70:20:aa:5f:77:60:7e:1b:57:73:ca:25:62:8e:
         b2:98:95:a4:7d:17:b0:1c:cb:e1:88:cb:73:a0:bd:cc:13:99:
         dd:13:0b:4b:55:4e:e5:79:78:a8:da:8b:52:0c:f6:a7:d4:aa:
         f1:f3:a6:72:d6:28:95:31:79:ed:d9:d3:54:d9:69:9e:9a:56:
         31:30:08:d7:19:3c:c4:12:02:53:da:3f:72:8f:9f:8a:fd:10:
         9b:5c:37:c2:80:e2:ce:00:f5:3d:3e:c8:f4:76:f6:c1:d5:c3:
         1e:e8:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:57:06 2025 by rpki-client