This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
File:                     wVykEPC8_6LEyIu2QkHBtuBZb-k.mft (raw, json)
Hash identifier:          jVfY1Zlje5sORR91+xeyfEUmDvVPm9+N12PD/9bQEGg=
Subject key identifier:   DA:E2:36:62:1D:20:09:81:AD:A4:56:7C:8E:DF:31:9F:F9:D5:B8:18
Authority key identifier: C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9
Certificate issuer:       /CN=A91906A1/serialNumber=C15CA410F0BCFFA2C4C88BB64241C1B6E0596FE9
Certificate serial:       06A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
Manifest number:          069C
Signing time:             Thu 04 Dec 2025 21:09:56 +0000
Manifest this update:     Thu 04 Dec 2025 21:09:55 +0000
Manifest next update:     Thu 11 Dec 2025 21:09:55 +0000
Files and hashes:         1: wVykEPC8_6LEyIu2QkHBtuBZb-k.crl (hash: O+2D9JMs7zXCxKQ2rXwGQJIHjc1cv6Ul4aRbJlWX3cg=)
                          2: 7217203E913011EBB9AC2466C4F9AE02.roa (hash: 9X8KEG2hSV9r9XPS13ZYPYCE+3lUg9P7WgD5IkX+DUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.crl
                          rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1697 (0x6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91906A1, serialNumber=C15CA410F0BCFFA2C4C88BB64241C1B6E0596FE9
        Validity
            Not Before: Dec  4 21:09:55 2025 GMT
            Not After : Dec 11 21:09:55 2025 GMT
        Subject: CN=6931f8a4-f6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:03:7d:01:94:7b:83:c6:49:31:4b:dd:4c:
                    15:c4:53:db:b9:65:86:82:03:c4:d6:db:d3:ad:20:
                    6b:d4:b7:0f:76:17:18:fc:67:88:35:f1:fb:1c:ac:
                    db:ed:b8:c0:e3:94:3f:03:99:c6:41:f4:c2:de:14:
                    e2:9b:d0:64:f3:6f:88:0b:16:92:9e:43:4d:37:12:
                    dc:1a:c5:39:8f:d8:3b:f0:a5:2d:7d:28:b8:1e:7b:
                    d3:86:c5:e1:ba:7f:8f:79:ec:86:4b:88:0f:5d:3f:
                    d3:a4:1a:5d:91:21:8a:b7:42:a5:43:91:64:ce:1a:
                    67:7c:73:67:b9:d6:8c:62:15:b7:2a:6d:9f:34:42:
                    9c:19:0a:81:a2:99:e9:b5:a0:ab:8d:c5:53:89:d2:
                    0b:d0:4c:f2:6b:aa:bb:c3:ba:cf:18:7d:df:94:9f:
                    85:64:42:8a:c9:89:93:cf:a6:1d:f7:92:38:67:93:
                    8d:cb:be:75:2f:fa:c9:10:3c:14:cf:aa:de:af:7b:
                    48:e5:17:af:ee:f6:b2:55:9b:d3:28:98:81:4b:f4:
                    31:3f:39:31:22:00:67:9c:c9:1d:36:fa:13:bb:91:
                    8a:9d:3a:5f:48:66:7b:de:76:c0:ac:c8:07:3d:7c:
                    23:c2:84:d5:e4:0b:7a:ec:70:76:21:0f:4f:68:43:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:36:62:1D:20:09:81:AD:A4:56:7C:8E:DF:31:9F:F9:D5:B8:18
            X509v3 Authority Key Identifier:
                keyid:C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:82:d6:c6:87:fb:78:42:5b:01:92:0b:11:ca:ef:0c:87:
         17:07:eb:b9:4e:19:d3:6b:46:ee:a3:ec:f6:c7:f6:20:33:67:
         75:34:0d:b9:da:10:28:4e:47:cc:65:00:09:63:aa:f3:a2:f1:
         de:9e:5c:0c:98:3b:3b:f5:4d:49:47:17:93:2f:27:ad:82:a8:
         e8:00:5d:d9:6d:61:71:32:56:28:24:fd:65:40:dd:43:dc:95:
         54:66:4e:5f:08:8d:7f:86:e6:10:cb:be:50:20:7b:63:f8:43:
         79:4d:38:02:f6:ba:93:84:84:03:ab:6b:e7:ad:4d:b2:5e:e9:
         f5:a5:01:37:2e:13:f8:c2:32:dd:6f:c5:af:f9:a9:bc:82:d9:
         25:0e:b3:6e:8e:01:d5:91:73:e9:61:9c:a0:64:ad:67:60:9b:
         0a:c0:1f:7d:1a:52:66:66:82:26:39:4f:02:d5:7b:3d:9f:3d:
         35:59:35:22:05:59:31:dc:a1:3e:ce:f5:c6:de:c5:42:37:f4:
         12:80:9a:40:7f:be:ca:88:ed:f9:e2:2d:a3:3e:c3:af:2f:9e:
         71:cc:87:dd:51:1e:0e:53:91:81:15:df:fb:bf:80:27:39:fc:
         8e:fd:7b:56:51:d5:0b:ca:87:77:f6:6f:02:0e:fe:5e:2f:f5:
         6c:e9:fb:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA2QTExMTAvBgNVBAUTKEMxNUNBNDEwRjBCQ0ZGQTJDNEM4OEJCNjQyNDFDMUI2
RTA1OTZGRTkwHhcNMjUxMjA0MjEwOTU1WhcNMjUxMjExMjEwOTU1WjAYMRYwFAYD
VQQDEw02OTMxZjhhNC1mNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1xsDfQGUe4PGSTFL3UwVxFPbuWWGggPE1tvTrSBr1LcPdhcY/GeINfH7HKzb
7bjA45Q/A5nGQfTC3hTim9Bk82+ICxaSnkNNNxLcGsU5j9g78KUtfSi4HnvThsXh
un+PeeyGS4gPXT/TpBpdkSGKt0KlQ5FkzhpnfHNnudaMYhW3Km2fNEKcGQqBopnp
taCrjcVTidIL0Ezya6q7w7rPGH3flJ+FZEKKyYmTz6Yd95I4Z5ONy751L/rJEDwU
z6rer3tI5Rev7vayVZvTKJiBS/QxPzkxIgBnnMkdNvoTu5GKnTpfSGZ73nbArMgH
PXwjwoTV5At67HB2IQ9PaEOwIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNriNmId
IAmBraRWfI7fMZ/51bgYMB8GA1UdIwQYMBaAFMFcpBDwvP+ixMiLtkJBwbbgWW/p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDZBMS9EOTdFMTI2ODkw
NjQxMUVCOTE0RTI5ODJDNEY5QUUwMi93VnlrRVBDOF82TEV5SXUyUWtIQnR1Qlpi
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dWeWtFUEM4XzZMRXlJdTJRa0hCdHVCWmItay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDZBMS9EOTdFMTI2ODkwNjQxMUVCOTE0RTI5ODJDNEY5QUUwMi93VnlrRVBDOF82
TEV5SXUyUWtIQnR1QlpiLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZooLWxof7eEJbAZILEcrvDIcXB+u5ThnTa0buo+z2x/YgM2d1NA25
2hAoTkfMZQAJY6rzovHenlwMmDs79U1JRxeTLyetgqjoAF3ZbWFxMlYoJP1lQN1D
3JVUZk5fCI1/huYQy75QIHtj+EN5TTgC9rqThIQDq2vnrU2yXun1pQE3LhP4wjLd
b8Wv+am8gtklDrNujgHVkXPpYZygZK1nYJsKwB99GlJmZoImOU8C1Xs9nz01WTUi
BVkx3KE+zvXG3sVCN/QSgJpAf77KiO354i2jPsOvL55xzIfdUR4OU5GBFd/7v4An
OfyO/XtWUdULyod39m8CDv5eL/Vs6fvX
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:44 2025 by rpki-client