This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
File:                     wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft (raw, json)
Hash identifier:          J0EOimazU+rZokBCf0GsDXmYjuxWwpLF9Qa8+gFVPcc=
Subject key identifier:   F6:96:E2:3C:81:EF:0F:41:D7:96:EE:46:D5:36:BB:07:FB:4C:74:40
Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83
Certificate issuer:       /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
Certificate serial:       06BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
Manifest number:          06B7
Signing time:             Thu 04 Dec 2025 21:01:53 +0000
Manifest this update:     Thu 04 Dec 2025 21:01:52 +0000
Manifest next update:     Thu 11 Dec 2025 21:01:52 +0000
Files and hashes:         1: wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl (hash: aJJdnfmae//Jw38GNjHCZSpLX/UUww9d5K/w7/bhIZk=)
                          2: 8A9A4734854211EB9DAFD045C4F9AE02.roa (hash: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
        Validity
            Not Before: Dec  4 21:01:52 2025 GMT
            Not After : Dec 11 21:01:52 2025 GMT
        Subject: CN=6931f6c1-fd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:01:ae:2a:c9:32:da:49:67:3e:16:7b:67:
                    cf:60:82:bc:86:40:29:05:51:0c:16:8a:c4:55:be:
                    b8:41:8c:f8:74:89:df:09:73:4f:8c:64:32:91:cc:
                    1a:70:21:e0:fe:44:eb:71:3e:57:1b:98:a0:14:c5:
                    53:0c:88:79:64:01:63:67:d4:32:be:a0:82:7c:86:
                    f1:1e:fd:6c:7b:e1:47:6f:69:ea:b2:d2:e6:66:9d:
                    7d:ea:39:43:ac:d3:74:6a:b7:7f:7a:41:35:a0:21:
                    75:20:97:e2:75:ce:f6:55:d1:55:36:92:d2:e6:e5:
                    c1:73:78:3d:5f:d0:6c:4d:49:07:66:9c:3e:da:4b:
                    36:6d:fe:21:eb:57:d4:98:a5:d0:ca:e4:44:ef:c5:
                    b4:f4:b7:be:59:bc:6f:f9:13:31:9b:c6:c6:db:69:
                    f9:55:b6:03:df:08:c6:b4:49:25:21:53:34:74:a2:
                    c4:09:c6:ef:91:1f:90:91:98:ca:88:cd:3f:fb:de:
                    53:a0:ac:a3:26:fa:47:e9:72:3b:d2:d9:39:86:63:
                    60:02:b3:3e:33:f6:d9:e5:b0:15:90:24:51:99:9c:
                    bf:e5:54:41:3a:d6:33:67:08:a4:b5:5e:a5:5c:37:
                    35:c3:ec:59:58:f0:bb:01:81:10:67:d5:2e:c3:7f:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:96:E2:3C:81:EF:0F:41:D7:96:EE:46:D5:36:BB:07:FB:4C:74:40
            X509v3 Authority Key Identifier:
                keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:5d:a2:6b:d5:19:71:92:0f:a1:28:8c:4c:68:dc:fb:4f:
         b7:44:8d:cf:a4:8a:48:41:13:e1:a7:3b:5c:06:42:30:6b:cc:
         7e:91:6e:1e:e6:e0:50:c9:de:1d:09:3b:a3:77:27:fd:e6:6e:
         7e:b0:49:96:c4:33:64:52:2c:4f:fb:76:f8:8b:b2:41:5a:d2:
         4a:0a:c7:78:bf:a6:ad:31:f2:7c:26:75:0a:ea:0e:b2:7c:81:
         ae:49:5d:3b:3a:33:e5:f1:e3:4b:bb:be:f6:78:bf:a5:16:60:
         c5:01:e8:aa:7f:dd:3d:5f:de:8e:8b:72:6f:8e:15:7b:1f:5c:
         d1:84:c1:62:42:56:8c:8f:a3:cb:a0:f4:e4:cb:58:b3:e4:67:
         4c:b3:82:49:23:ee:ff:4f:ac:b6:bd:37:42:fe:fc:68:79:e5:
         be:2d:a8:0a:4e:d6:1e:fe:cc:11:9e:a1:20:70:1a:75:60:7e:
         94:83:54:a8:24:ec:5d:76:35:78:de:e6:18:07:65:05:29:c2:
         c7:50:db:16:a2:7b:4a:2e:ad:7b:57:44:61:52:d4:86:8b:d4:
         db:4c:72:b8:3d:67:7b:33:d9:4c:cc:b3:19:46:d9:d6:45:a2:
         23:26:1f:87:df:12:9b:15:6d:ff:99:bb:9a:9b:33:4f:03:99:
         50:0f:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:04:55 2025 by rpki-client