This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
File:                     wvw-GxtUPr1I39pZHcJRgiT5W38.mft (raw, json)
Hash identifier:          kpSgrH77JaV0nYIxi70A/N11TpKBPEcMayE+eWduxIo=
Subject key identifier:   5F:C1:6B:19:EF:A4:22:DC:64:1D:1F:06:71:C1:E2:56:F4:2F:78:56
Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F
Certificate issuer:       /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
Manifest number:          028A
Signing time:             Thu 04 Dec 2025 23:54:58 +0000
Manifest this update:     Thu 04 Dec 2025 23:54:57 +0000
Manifest next update:     Thu 11 Dec 2025 23:54:57 +0000
Files and hashes:         1: wvw-GxtUPr1I39pZHcJRgiT5W38.crl (hash: DumSPhZNhh7A39vKhTBSmzJhweBbZXwjlW9WdbYVrO0=)
                          2: 6B0DCABA80D111EFA7138B77C4F9AE02.roa (hash: XrzD9gHCwm8eB2YxyR3P7eTPrT9KRU3rPXHkNDhO2w8=)
                          3: B0EBD14E80D111EFABEC5878C4F9AE02.roa (hash: KwzZR+D6Yo3n0RMq2SPd2PCh/+pc1niACNwCgSeZryU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl
                          rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171524, serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
        Validity
            Not Before: Dec  4 23:54:57 2025 GMT
            Not After : Dec 11 23:54:57 2025 GMT
        Subject: CN=69321f52-012a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:85:d0:ec:2e:89:ed:7e:ef:ae:4e:67:b6:
                    fd:f3:c7:16:66:a9:1e:79:87:46:48:9f:56:bb:7d:
                    d8:94:f6:ae:76:bd:9d:54:eb:a9:e4:a3:5c:3d:80:
                    79:50:af:09:a3:90:31:7c:c8:dd:07:f2:e7:c5:ca:
                    e2:1b:dd:fe:a4:6d:69:80:1e:d7:8e:5e:f4:47:53:
                    69:a2:fb:51:e0:c5:a4:41:ab:2f:fc:b4:13:61:9e:
                    e2:2b:0d:4f:ae:30:9b:6b:ce:e5:a2:4d:c8:0c:66:
                    c2:aa:ec:4c:72:bf:82:80:19:52:33:91:1a:25:a4:
                    09:6e:83:70:a2:c8:55:bd:dd:6f:07:79:f0:96:ab:
                    6b:70:81:80:7a:8b:90:eb:64:a3:0c:f6:e3:ff:67:
                    07:eb:14:be:93:21:57:1f:23:e8:48:65:70:0b:a5:
                    ff:8c:6e:9b:69:52:fd:6a:f4:83:f5:99:bb:85:c0:
                    30:6c:3c:69:e8:2c:aa:c5:4c:1c:50:43:bd:e6:32:
                    8b:60:0d:f5:1a:49:2d:a0:79:a2:54:08:cc:d7:67:
                    c3:7c:74:7f:92:e2:d0:84:52:85:b0:ea:c6:95:8e:
                    5c:c6:5a:7d:95:e6:08:0c:36:76:3c:70:eb:0f:ec:
                    24:2d:9e:be:8e:c6:72:6e:01:62:c2:86:66:21:7f:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:6B:19:EF:A4:22:DC:64:1D:1F:06:71:C1:E2:56:F4:2F:78:56
            X509v3 Authority Key Identifier:
                keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:98:88:35:08:12:65:9e:cd:1d:41:76:57:e6:1a:20:bd:95:
         9e:87:b8:06:19:c3:1a:fd:0d:5d:9d:8a:4b:c4:dd:35:a2:17:
         b8:97:e3:a9:16:0f:b0:82:36:89:80:41:cb:34:32:f7:c5:9b:
         99:fe:35:91:4f:42:64:cc:85:fa:ff:ed:14:f4:3d:3d:da:cb:
         8b:b2:27:74:9d:35:b9:b3:c8:81:c8:6f:52:b4:07:3c:75:42:
         ea:ea:a4:e7:18:81:2b:ec:36:51:fc:ce:c2:f5:74:88:14:4f:
         02:aa:9c:c7:42:2b:9d:6f:95:40:c9:32:83:27:d9:c5:be:6c:
         84:90:1f:f1:e8:6a:70:83:a7:6f:14:f9:85:a3:4b:25:ff:00:
         4e:f7:86:0d:04:59:16:c7:9f:97:90:1d:7d:c5:57:7c:3e:bb:
         01:22:75:a8:49:8a:c2:bf:33:6f:08:a4:8b:f1:79:ff:54:b3:
         1e:d2:8d:b8:4c:41:ce:b1:f2:84:b1:58:02:35:90:05:9e:04:
         89:c9:ba:24:85:1c:1c:4a:73:45:32:08:1f:a9:10:23:df:e9:
         a2:79:54:41:22:8b:46:a3:25:e5:38:f3:20:81:75:20:ea:64:
         29:56:a9:26:d2:5f:c2:f4:19:53:6a:4e:f8:b3:b9:42:1e:62:
         99:7e:3f:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE1MjQxMTAvBgNVBAUTKEMyRkMzRTFCMUI1NDNFQkQ0OERGREE1OTFEQzI1MTgy
MjRGOTVCN0YwHhcNMjUxMjA0MjM1NDU3WhcNMjUxMjExMjM1NDU3WjAYMRYwFAYD
VQQDEw02OTMyMWY1Mi0wMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1bCF0Owuie1+765OZ7b988cWZqkeeYdGSJ9Wu33YlPaudr2dVOup5KNcPYB5
UK8Jo5AxfMjdB/LnxcriG93+pG1pgB7Xjl70R1NpovtR4MWkQasv/LQTYZ7iKw1P
rjCba87lok3IDGbCquxMcr+CgBlSM5EaJaQJboNwoshVvd1vB3nwlqtrcIGAeouQ
62SjDPbj/2cH6xS+kyFXHyPoSGVwC6X/jG6baVL9avSD9Zm7hcAwbDxp6CyqxUwc
UEO95jKLYA31GkktoHmiVAjM12fDfHR/kuLQhFKFsOrGlY5cxlp9leYIDDZ2PHDr
D+wkLZ6+jsZybgFiwoZmIX9LIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/Baxnv
pCLcZB0fBnHB4lb0L3hWMB8GA1UdIwQYMBaAFML8PhsbVD69SN/aWR3CUYIk+Vt/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTUyNC80OTFGMDJERTJD
NzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVByMUkzOXBaSGNKUmdpVDVX
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2dy1HeHRVUHIxSTM5cFpIY0pSZ2lUNVczOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTUyNC80OTFGMDJERTJDNzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVBy
MUkzOXBaSGNKUmdpVDVXMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmmIg1CBJlns0dQXZX5hogvZWeh7gGGcMa/Q1dnYpLxN01ohe4l+Op
Fg+wgjaJgEHLNDL3xZuZ/jWRT0JkzIX6/+0U9D092suLsid0nTW5s8iByG9StAc8
dULq6qTnGIEr7DZR/M7C9XSIFE8CqpzHQiudb5VAyTKDJ9nFvmyEkB/x6Gpwg6dv
FPmFo0sl/wBO94YNBFkWx5+XkB19xVd8PrsBInWoSYrCvzNvCKSL8Xn/VLMe0o24
TEHOsfKEsVgCNZAFngSJybokhRwcSnNFMggfqRAj3+mieVRBIotGoyXlOPMggXUg
6mQpVqkm0l/C9BlTak74s7lCHmKZfj9R
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:32 2025 by rpki-client