This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
File:                     Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json)
Hash identifier:          +UCArjBGQfIgH9GsXU5W6+CYefeltNO0cIbFiAnWbyc=
Subject key identifier:   6A:93:30:2D:ED:7E:0C:72:9E:98:C7:FA:50:E3:91:D1:A0:D1:89:4F
Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37
Certificate issuer:       /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
Certificate serial:       0C0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
Manifest number:          0C01
Signing time:             Sat 06 Dec 2025 18:08:57 +0000
Manifest this update:     Sat 06 Dec 2025 18:08:56 +0000
Manifest next update:     Sat 13 Dec 2025 18:08:56 +0000
Files and hashes:         1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: 7cZfU69bEYXsNM9P0eXZ6Uy5UUh3zCVq6VVcExwTseo=)
                          2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: btAEE/pkl4wmPNldzruMY4vHJi6hWI5mqNY02pzTWwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl
                          rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3083 (0xc0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
        Validity
            Not Before: Dec  6 18:08:56 2025 GMT
            Not After : Dec 13 18:08:56 2025 GMT
        Subject: CN=69347139-dd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:82:7c:19:8b:c4:be:9c:2f:47:b1:ce:03:
                    a1:b6:52:50:ba:d3:fd:14:1b:d0:fc:28:1f:ab:9e:
                    20:c1:97:b2:09:c2:43:0a:b8:cc:d6:af:05:e9:a9:
                    47:d2:e0:d0:e0:4e:e8:dd:cc:c8:c9:52:5f:9d:4c:
                    39:3e:88:a1:a6:c3:ae:ef:c2:00:59:51:54:3c:7b:
                    30:f3:f6:78:f2:94:be:0f:4c:ab:05:53:0a:ca:6f:
                    89:07:ea:fd:9a:a3:f0:6f:d7:0f:34:55:ff:0a:38:
                    af:c5:4b:43:29:a7:f6:72:5a:4e:78:0c:55:1e:9d:
                    b3:6f:ad:d8:dd:e8:fb:01:ef:0f:15:65:e3:ae:4e:
                    a4:8c:94:21:59:b5:75:d0:7d:59:a8:4f:9b:64:5c:
                    23:b5:5c:a7:b2:77:73:6e:18:1b:7f:46:0d:e1:57:
                    25:ef:98:b1:f1:85:4a:da:45:8d:69:3d:f5:8e:7a:
                    f3:ff:b2:22:b4:ed:bb:4b:c0:d4:c1:48:aa:a1:e5:
                    e0:84:70:5a:c6:67:5a:21:57:a7:26:70:04:c8:cb:
                    41:fc:07:ff:25:49:ba:42:cd:a6:f1:7c:ee:8d:da:
                    fc:a0:47:30:75:1a:c2:da:ac:88:12:fe:e7:bb:a1:
                    34:6a:07:a9:fd:5e:91:1e:12:2c:49:ee:f1:8b:8b:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:93:30:2D:ED:7E:0C:72:9E:98:C7:FA:50:E3:91:D1:A0:D1:89:4F
            X509v3 Authority Key Identifier:
                keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:37:ab:ef:fb:1e:8d:b0:fe:7b:39:fc:68:9f:cc:a2:80:
         b1:d1:0e:ce:83:6d:7f:0e:99:77:63:5f:8c:f1:67:99:89:9e:
         1a:b2:d4:8f:74:dd:50:4a:55:aa:28:c6:99:70:3a:56:da:f9:
         15:c6:85:fc:9e:22:1e:16:f3:91:9b:f6:6c:08:5d:33:e5:57:
         d9:b5:fa:f1:69:62:86:6e:8e:74:6a:1e:69:83:6d:90:49:f9:
         cf:b3:75:45:5c:e2:8e:1f:52:a6:59:5f:40:bd:14:64:97:37:
         b3:59:63:2b:64:b7:3d:df:83:bb:ad:70:98:d1:50:5e:24:b4:
         71:df:b9:06:33:c5:30:67:d9:6d:71:12:43:94:2c:92:eb:37:
         b2:02:ef:c9:db:df:02:11:b8:51:c4:c4:7d:38:2f:a1:1b:4f:
         43:30:51:dd:82:36:88:9c:d5:4d:03:f5:0e:08:9b:85:f8:52:
         a6:34:e8:71:01:05:36:25:11:60:2b:6f:b2:be:5b:ab:2e:6c:
         8e:62:b2:ab:05:2a:6f:cd:86:df:aa:b8:54:30:05:6f:d6:2f:
         b5:08:fc:20:f1:fc:29:3c:4c:02:8c:d4:93:14:2e:8f:eb:b9:
         e2:2c:67:f9:3a:c0:3a:57:ad:7b:88:fb:02:29:46:8d:68:bb:
         47:3e:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:12 2025 by rpki-client