This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
File:                     WWynM84d0W-O7zIxnqXTqLIvkMk.mft (raw, json)
Hash identifier:          ZcgMmqW1gP4pe833UWRbuf+C7vf7YXQdp4SatHl5wDc=
Subject key identifier:   22:14:87:5D:FB:B6:D1:12:0E:6A:AB:E5:54:B6:B6:53:E1:DD:FB:3F
Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
Certificate issuer:       /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
Certificate serial:       0872
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
Manifest number:          086C
Signing time:             Thu 04 Dec 2025 19:43:49 +0000
Manifest this update:     Thu 04 Dec 2025 19:43:48 +0000
Manifest next update:     Thu 11 Dec 2025 19:43:48 +0000
Files and hashes:         1: WWynM84d0W-O7zIxnqXTqLIvkMk.crl (hash: jnfIUuEuWOmN7ZNNLFatg95IEFfJ5EEDhbPkDA3gQAk=)
                          2: CF4D7C70DADE11EABE8DD41DC4F9AE02.roa (hash: XNkfgG5MOFGcvkcR8H3rhOunTGwkWC3c+4uy9gU7fxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl
                          rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917126B, serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
        Validity
            Not Before: Dec  4 19:43:48 2025 GMT
            Not After : Dec 11 19:43:48 2025 GMT
        Subject: CN=6931e475-0415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:f2:80:2f:03:88:7e:f5:21:ed:ca:28:13:
                    69:b9:54:5a:fb:cb:3a:19:5d:15:fd:ae:53:6e:f7:
                    26:cb:1b:83:48:6d:d3:88:a6:75:0a:1a:82:fc:f8:
                    78:41:d5:1f:c3:e2:0f:43:15:4a:ed:80:21:67:ba:
                    ab:c5:f9:98:8e:f2:60:e5:bb:ed:94:59:70:1a:42:
                    2f:0e:e3:b9:2f:11:f6:58:8e:ef:b3:54:d1:75:6c:
                    49:b8:2d:62:d9:37:9d:55:60:14:15:bb:af:1d:be:
                    55:54:b8:64:1d:2d:25:2b:50:14:ee:fa:7a:62:a8:
                    bc:2f:d6:79:75:c5:4d:68:5b:a0:8f:d2:6d:3a:ea:
                    69:22:eb:69:ad:7f:ba:cb:4b:96:ae:8c:2a:97:41:
                    5b:dd:fd:c0:eb:0b:dd:df:2b:98:31:fb:ad:71:7e:
                    f5:e5:ab:c8:35:30:80:58:22:67:36:33:19:20:f4:
                    b7:6e:26:b0:02:56:cc:23:2f:dc:a4:78:54:ab:1f:
                    cd:c2:1a:ff:ef:df:6c:3b:93:e0:b3:b3:2e:05:7d:
                    3e:41:5a:89:34:85:73:f8:ef:19:0c:21:23:a7:29:
                    96:b7:af:e8:da:3d:5d:bd:21:fb:dd:8f:51:3d:fe:
                    c1:c6:60:e3:90:8e:88:a2:2b:2c:c6:bf:f0:ab:10:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:14:87:5D:FB:B6:D1:12:0E:6A:AB:E5:54:B6:B6:53:E1:DD:FB:3F
            X509v3 Authority Key Identifier:
                keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9f:dd:4c:9d:e7:2e:8a:a1:67:c2:94:19:6d:54:bb:16:d2:
         57:6e:71:78:66:bb:3c:17:18:56:82:45:de:92:2c:52:e0:2e:
         1f:d6:97:65:5a:f6:1c:af:d4:1c:1d:a6:6f:c5:db:5d:00:b7:
         60:9a:32:9e:13:7f:25:e4:3a:62:d4:cd:17:1b:eb:dc:57:14:
         4d:17:f5:98:96:45:15:55:7d:37:96:32:90:79:ae:a1:fd:ec:
         3f:a7:76:95:d6:36:80:f7:e6:f9:aa:26:0a:b6:9d:83:3e:4c:
         40:48:93:04:5b:66:c0:1b:06:eb:6a:39:89:c1:21:e5:85:be:
         d2:39:5b:21:4f:13:35:d2:fe:8e:cc:bb:e5:67:64:d4:a8:ee:
         92:de:39:b7:50:96:36:1c:ce:8a:a3:1e:07:20:e1:98:3b:62:
         c8:af:ed:f3:55:1f:91:c6:9a:5a:fb:37:dd:9e:c9:dd:04:2c:
         82:87:dc:17:b0:ba:09:1c:72:aa:9a:82:e3:56:af:b5:38:a3:
         aa:c1:d9:cc:3a:7d:91:56:c4:35:fa:93:4d:06:32:f1:40:f5:
         87:38:cf:47:e8:92:09:7c:aa:e9:06:b2:07:bb:44:59:57:a7:
         f4:69:0c:7d:d6:9e:b0:96:5f:7c:12:8c:1e:72:3a:58:d5:0b:
         51:97:82:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzEyNkIxMTAvBgNVBAUTKDU5NkNBNzMzQ0UxREQxNkY4RUVGMzIzMTlFQTVEM0E4
QjIyRjkwQzkwHhcNMjUxMjA0MTk0MzQ4WhcNMjUxMjExMTk0MzQ4WjAYMRYwFAYD
VQQDEw02OTMxZTQ3NS0wNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptnygC8DiH71Ie3KKBNpuVRa+8s6GV0V/a5TbvcmyxuDSG3TiKZ1ChqC/Ph4
QdUfw+IPQxVK7YAhZ7qrxfmYjvJg5bvtlFlwGkIvDuO5LxH2WI7vs1TRdWxJuC1i
2TedVWAUFbuvHb5VVLhkHS0lK1AU7vp6Yqi8L9Z5dcVNaFugj9JtOuppIutprX+6
y0uWrowql0Fb3f3A6wvd3yuYMfutcX715avINTCAWCJnNjMZIPS3biawAlbMIy/c
pHhUqx/Nwhr/799sO5Pgs7MuBX0+QVqJNIVz+O8ZDCEjpymWt6/o2j1dvSH73Y9R
Pf7BxmDjkI6Ioissxr/wqxDi4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIUh137
ttESDmqr5VS2tlPh3fs/MB8GA1UdIwQYMBaAFFlspzPOHdFvju8yMZ6l06iyL5DJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTI2Qi83Rjk2NUQ3NERB
REQxMUVBQUYwRjRCMUNDNEY5QUUwMi9XV3luTTg0ZDBXLU83ekl4bnFYVHFMSXZr
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dXeW5NODRkMFctTzd6SXhucVhUcUxJdmtNay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTI2Qi83Rjk2NUQ3NERBREQxMUVBQUYwRjRCMUNDNEY5QUUwMi9XV3luTTg0ZDBX
LU83ekl4bnFYVHFMSXZrTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFn91MnecuiqFnwpQZbVS7FtJXbnF4Zrs8FxhWgkXekixS4C4f1pdl
WvYcr9QcHaZvxdtdALdgmjKeE38l5Dpi1M0XG+vcVxRNF/WYlkUVVX03ljKQea6h
/ew/p3aV1jaA9+b5qiYKtp2DPkxASJMEW2bAGwbrajmJwSHlhb7SOVshTxM10v6O
zLvlZ2TUqO6S3jm3UJY2HM6Kox4HIOGYO2LIr+3zVR+Rxppa+zfdnsndBCyCh9wX
sLoJHHKqmoLjVq+1OKOqwdnMOn2RVsQ1+pNNBjLxQPWHOM9H6JIJfKrpBrIHu0RZ
V6f0aQx91p6wll98EowecjpY1QtRl4KD
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:03:21 2025 by rpki-client