This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
File:                     WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json)
Hash identifier:          N4J5BMJEWl7be0L0kgt+bzSdHn49tn1n9ZI+DuMN13c=
Subject key identifier:   94:8D:F0:EB:8F:63:52:20:33:79:C8:CE:1D:1F:77:3A:23:08:31:F8
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Certificate issuer:       /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
Manifest number:          05
Signing time:             Fri 05 Dec 2025 05:57:08 +0000
Manifest this update:     Fri 05 Dec 2025 05:57:08 +0000
Manifest next update:     Fri 12 Dec 2025 05:57:08 +0000
Files and hashes:         1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: o2wFZbMHhrkt8dS82gBvACIxVVrBfrttMtRCFpc3Pdk=)
                          2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: peAS/ngmPwYZnb97WFQxinsPTC6bCf5NaFTKHcSyPQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
                          rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
        Validity
            Not Before: Dec  5 05:57:08 2025 GMT
            Not After : Dec 12 05:57:08 2025 GMT
        Subject: CN=69327434-e0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:10:da:e3:66:e0:32:52:8d:e8:b9:ac:28:
                    98:cf:aa:07:0d:f3:6a:d8:ff:8e:67:ee:1e:2a:4b:
                    69:44:41:a5:8f:08:c4:be:9c:fd:16:35:64:c2:9a:
                    a0:54:b4:1f:77:ef:fa:1e:0c:f9:0b:44:bc:87:a5:
                    7c:a7:82:31:99:b7:a8:ec:7f:2d:20:75:37:1d:c1:
                    d0:9e:58:00:a3:4a:df:de:87:80:fd:3a:93:ac:b1:
                    3a:f1:61:b8:a9:e3:96:a4:de:7f:5e:4f:64:ae:ad:
                    d6:82:30:c9:68:d8:53:2a:8c:a3:88:88:20:73:3a:
                    26:14:32:80:d9:52:4f:d8:03:c0:13:a5:39:5f:e7:
                    89:58:7c:ed:d1:c3:14:e9:6b:65:1c:27:f5:f5:40:
                    0a:d3:0f:a6:25:f0:54:86:1f:9c:ff:47:3a:82:41:
                    3a:51:d0:78:ff:6f:4e:ae:19:c8:df:13:2b:16:c2:
                    ad:e0:27:03:88:32:98:b3:e9:68:00:2f:ac:ee:d4:
                    1f:0b:0f:3f:1c:de:d6:23:32:04:00:47:19:99:2a:
                    28:2b:37:83:16:54:24:8f:60:8e:7a:06:81:2d:fd:
                    8c:7e:0e:ce:09:cf:22:29:b0:c3:c7:40:78:d9:65:
                    01:8f:62:52:01:18:3d:5a:6b:42:cd:23:c3:46:b9:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8D:F0:EB:8F:63:52:20:33:79:C8:CE:1D:1F:77:3A:23:08:31:F8
            X509v3 Authority Key Identifier:
                keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:95:b4:bf:4e:87:d2:97:a7:ea:07:eb:d2:9c:06:03:1e:
         b6:95:c0:21:9c:c9:4d:62:c4:e7:03:c2:78:1d:c4:42:50:6b:
         69:a8:f9:fd:f5:1c:7a:45:a0:02:3a:95:55:fb:4c:e9:8f:c9:
         2c:27:95:9b:f4:a5:e7:4d:e0:28:e8:32:5a:50:9b:db:4b:08:
         87:74:ec:ff:ad:df:1d:d2:4f:09:cb:a6:df:31:3d:24:10:ab:
         9f:64:61:24:47:99:66:cd:87:5f:15:91:6b:5a:6c:43:ae:5b:
         40:2a:cb:8e:26:b1:dd:c3:9c:94:54:3d:fc:4c:57:48:08:50:
         d7:42:16:64:a5:cd:3f:eb:4a:c1:d4:dd:3a:77:64:bf:79:db:
         2b:92:19:59:63:3c:16:90:f6:87:5d:cc:37:f2:30:52:cd:12:
         58:8b:91:ec:07:06:89:e3:5b:38:72:88:8c:38:e8:45:50:f5:
         81:a7:b9:8b:06:71:34:44:9d:9f:13:77:f6:e4:b0:b4:5c:35:
         9c:f4:3d:30:16:1b:69:c9:39:95:51:d5:63:45:72:23:08:42:
         b8:b2:b1:2d:2d:0b:d1:5a:4f:58:a8:56:1c:0c:ea:da:1f:8b:
         2d:a2:2f:e5:70:6f:ee:7e:17:fa:e1:d9:4d:aa:b3:a2:6e:90:
         49:2a:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:54 2025 by rpki-client