This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
File:                     W6misTDnBTYhO9nUaJ_nvVTwrSM.mft (raw, json)
Hash identifier:          CCBMkpjHed7anhH+OoJldxjeohGrHCfdId8QHQRYtJ8=
Subject key identifier:   DA:87:54:E9:22:FB:96:E1:88:E3:E3:54:9D:B5:84:9E:5F:CF:AF:1E
Authority key identifier: 5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23
Certificate issuer:       /CN=A918BF70/serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23
Certificate serial:       0C34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
Manifest number:          0C2D
Signing time:             Sat 20 Dec 2025 18:19:48 +0000
Manifest this update:     Sat 20 Dec 2025 18:19:48 +0000
Manifest next update:     Sat 27 Dec 2025 18:19:48 +0000
Files and hashes:         1: W6misTDnBTYhO9nUaJ_nvVTwrSM.crl (hash: rDxWtaXSudLq6R7HddknAIHgIVTfg0XSSXT2JmlpISI=)
                          2: 8D720AC81D9211EA88894911C4F9AE02.roa (hash: LKiowhMkXMq5qf1lyBz6FA1D1I55qwfvYCjP01R78bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl
                          rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3124 (0xc34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BF70, serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23
        Validity
            Not Before: Dec 20 18:19:48 2025 GMT
            Not After : Dec 27 18:19:48 2025 GMT
        Subject: CN=6946e8c4-58a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8d:15:1d:16:e4:73:3b:1d:76:8b:ef:fb:5d:
                    9f:fc:45:96:0f:32:e9:ed:e5:7b:ff:4b:78:43:16:
                    b6:0a:8d:f7:93:da:e8:b5:d1:64:e4:56:db:3c:fc:
                    5f:03:87:97:ca:83:c3:a2:b3:6c:3f:c3:bd:1d:4e:
                    37:a9:a3:e4:d7:ec:40:f5:2e:c3:b3:9e:20:9a:4a:
                    ce:09:65:a9:26:7a:a8:7a:e2:11:84:ce:cf:c5:02:
                    ea:d3:d3:27:4b:84:da:93:d9:58:03:ae:21:57:9d:
                    ee:31:59:17:46:2f:62:45:6b:7e:ab:e1:35:c2:e7:
                    07:2a:bd:f5:46:a8:93:45:95:6f:f0:3d:f4:67:a4:
                    7b:d7:c5:80:5b:52:c1:28:a1:4b:86:03:28:fb:72:
                    6a:f1:97:ec:64:c1:d1:6d:76:39:f2:49:a3:da:db:
                    1d:82:b5:90:6d:b9:cc:1a:6c:92:f2:c8:fe:43:da:
                    cb:68:b4:d3:77:30:5b:14:b3:3b:4f:3b:0b:c7:d4:
                    7f:da:fc:21:97:b2:29:ae:07:c8:34:8a:47:ee:65:
                    4b:e3:50:22:92:a6:1a:e8:7a:2d:d6:95:c3:25:5a:
                    98:0a:f4:40:2b:57:e8:bc:3a:6e:08:c0:21:5e:6d:
                    fd:e9:ff:14:af:b8:cf:2b:44:7f:c0:1d:1c:e0:24:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:54:E9:22:FB:96:E1:88:E3:E3:54:9D:B5:84:9E:5F:CF:AF:1E
            X509v3 Authority Key Identifier:
                keyid:5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:af:e9:4d:8a:cd:51:c5:15:15:24:cc:9d:83:9c:ec:5d:0e:
         7b:88:d8:50:04:3d:45:73:1d:3b:0e:0a:b5:8b:11:0c:64:f6:
         24:1a:d5:7c:da:66:44:6f:21:6a:ab:98:15:5d:6a:43:ef:2c:
         0e:2b:4a:37:73:dc:ee:3e:95:9a:b1:67:63:da:cd:07:1d:e8:
         04:73:08:0f:f2:d0:a1:8e:8f:7a:55:18:0d:26:cb:b3:d5:1f:
         6c:4c:65:47:93:3f:d8:31:49:3f:63:98:16:0b:14:e0:9d:36:
         8c:2f:61:6b:a5:c8:f1:4f:b1:32:fd:63:6f:37:9e:ac:54:ff:
         8c:e9:df:3f:3c:f8:c2:89:ee:11:77:b0:00:fa:61:a2:9f:51:
         07:e9:c7:28:3c:22:41:36:83:61:76:ce:37:76:51:10:a3:09:
         af:f1:a0:24:ba:4c:3c:64:74:00:57:a8:0c:a3:94:a4:06:7f:
         b5:73:aa:24:08:b1:89:f5:2d:ff:bd:91:86:54:4a:8f:c3:0d:
         64:79:ee:d2:e9:78:1f:e1:38:72:4d:d9:62:e6:fb:72:81:c6:
         d2:b9:56:33:1f:f5:5c:7c:91:59:ff:5a:34:29:aa:26:20:b4:
         50:24:5a:19:48:78:31:9b:be:ed:e1:41:aa:ec:83:99:dc:4b:
         eb:03:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:19:22 2025 by rpki-client