This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File:                     wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier:          lC7Y5x45Qp8PEoRw0B1O81MQ6xiH+g3yWFrqhoLTXbc=
Subject key identifier:   38:F1:37:0D:A8:B4:F5:2F:C1:85:46:2E:D1:B6:B3:7A:4F:5C:E0:E8
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number:          0804
Signing time:             Sat 06 Dec 2025 20:04:54 +0000
Manifest this update:     Sat 06 Dec 2025 20:04:53 +0000
Manifest next update:     Sat 13 Dec 2025 20:04:53 +0000
Files and hashes:         1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: fDlFr2NHGYi9AsGyciKpccvsIHa2bAYuHlLFSobMU2U=)
                          2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: hCxFygIxGBaZzO8/d0Vcf9NqUsTf/UZgA3mXuGpyT3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: Dec  6 20:04:53 2025 GMT
            Not After : Dec 13 20:04:53 2025 GMT
        Subject: CN=69348c65-6387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:04:71:56:be:e6:d8:0f:03:ef:37:6e:da:
                    73:a1:81:73:4e:01:fd:a3:46:8f:e1:4c:dc:91:1a:
                    c9:26:1c:6f:8c:7a:81:b7:3d:62:d2:ad:88:f8:83:
                    31:58:8f:d2:82:4e:22:da:48:e2:b3:fa:ce:7f:cc:
                    2d:df:15:56:3f:1d:5b:7e:28:58:89:e7:0c:70:e5:
                    09:84:df:15:c6:45:0a:e9:93:76:4b:3d:b5:12:77:
                    c8:a1:96:d3:d6:61:de:6b:a7:43:ec:30:32:b0:a1:
                    94:ed:25:f8:e3:dd:52:7d:dc:c1:af:e2:0a:71:a8:
                    c3:ba:7e:50:d9:d4:17:77:4a:b9:3a:e0:3e:5a:61:
                    e8:9f:ee:20:3e:8e:8d:93:20:0a:27:1f:7d:17:e5:
                    67:ed:8d:ef:8f:1d:bf:e3:67:c4:21:e6:b5:4d:f9:
                    ed:8d:62:7d:28:ab:a6:99:7d:ec:e1:07:c0:e9:ae:
                    86:b4:5f:f1:b1:7b:e2:30:76:6c:8d:fd:c5:a6:1d:
                    12:9b:bf:0a:a8:5e:f5:c2:6a:3d:a6:af:37:7f:d1:
                    cf:84:53:9a:ca:a4:01:21:09:42:12:66:4c:b6:82:
                    1a:bd:ee:20:d4:ae:45:9e:d3:8b:48:57:37:a5:17:
                    74:07:8e:16:ed:d5:48:3d:fd:0a:2c:11:34:e2:ea:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F1:37:0D:A8:B4:F5:2F:C1:85:46:2E:D1:B6:B3:7A:4F:5C:E0:E8
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3a:87:a2:6d:87:8f:d0:3a:d2:42:e2:23:55:bc:2d:f4:f3:
         52:2d:65:eb:24:75:7d:f7:98:a1:77:e7:ec:b1:f0:4e:79:0f:
         97:dd:6e:16:64:70:8b:32:5a:2b:e1:83:cb:62:93:0e:50:ca:
         0b:58:da:86:52:af:89:73:bf:c8:f5:bb:da:5b:e8:76:53:92:
         68:8c:75:dd:42:4f:79:8a:86:c5:51:af:3a:fe:59:1d:50:69:
         94:12:79:d5:0a:89:00:9f:3a:28:1a:8b:60:27:f7:8f:a6:98:
         9d:4c:93:71:c4:40:27:a8:a8:3f:de:e9:70:62:aa:92:16:e3:
         39:85:21:c0:a1:86:8e:89:24:02:30:df:25:2f:03:e0:97:ba:
         17:31:96:2e:21:2f:8e:54:a3:5c:0a:75:3a:fa:2d:16:36:d8:
         3b:46:51:15:35:72:e7:3c:c5:b6:23:f0:5d:f6:bf:a2:d4:19:
         db:cb:82:1c:fb:17:fb:b7:0f:a1:da:ed:13:00:d3:fe:d6:c9:
         d6:76:00:3b:7d:23:9c:c3:9a:e8:fa:77:cf:9a:e5:8b:8d:c7:
         a0:bc:20:fe:b7:4c:03:ce:65:73:6a:ec:b5:1f:da:e4:1c:70:
         25:d0:01:0c:fa:32:38:a5:1e:f9:d2:f9:76:fd:9f:57:b9:69:
         37:b0:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:03:31 2025 by rpki-client