This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File:                     Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier:          qEA1/1IHRPpOIcKVKm8zGqfS413geEnmO+UavM54RT8=
Subject key identifier:   E2:A2:96:87:5C:62:C5:12:A5:B1:88:1E:41:B1:36:07:7B:3D:27:F1
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer:       /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number:          82
Signing time:             Fri 05 Dec 2025 04:37:04 +0000
Manifest this update:     Fri 05 Dec 2025 04:37:04 +0000
Manifest next update:     Fri 12 Dec 2025 04:37:04 +0000
Files and hashes:         1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: Spntz47oE7olIA8vXGie9FlltscOoAincl1loqlWMxs=)
                          2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: uW1VF7Kvr3qqb0xY8fd0nDeotf3CK4ccwfdt9+YehUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
        Validity
            Not Before: Dec  5 04:37:04 2025 GMT
            Not After : Dec 12 04:37:04 2025 GMT
        Subject: CN=69326170-1a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:e2:ba:2c:b7:33:db:4e:93:6c:b6:21:3c:
                    78:92:cc:97:f9:5b:b4:d2:dd:59:33:21:20:7d:03:
                    10:c8:80:a5:ee:3e:34:40:d0:12:8b:4c:2f:84:3e:
                    8d:8a:16:79:61:f2:ab:ed:1e:fd:d8:ce:86:6c:cd:
                    40:a1:8a:3e:1c:e4:f0:6d:17:b6:98:5e:1b:f4:6d:
                    68:a9:c2:45:6c:37:0b:f5:6a:38:73:5b:21:93:e4:
                    7e:46:94:41:09:4e:42:cd:ad:85:41:24:3c:8c:d7:
                    87:3c:76:82:66:e8:b5:41:88:5c:3e:28:34:e3:c0:
                    06:b4:b5:5d:be:e6:ba:9e:13:d5:07:ce:1a:26:48:
                    6d:90:66:9b:65:ee:1b:0b:fc:66:08:7f:03:18:73:
                    ba:8b:df:17:f1:0b:08:9a:56:38:28:91:91:ec:1f:
                    e6:34:fe:33:b9:06:62:a8:58:94:31:7b:e2:ac:1c:
                    6a:af:90:9e:e5:78:18:62:61:a8:3d:69:a6:d2:b3:
                    18:dc:4f:50:58:c4:11:95:5a:51:cb:9d:ce:40:00:
                    e8:24:97:dd:5e:c5:c4:3d:15:c1:1a:ff:b0:d2:bb:
                    ea:85:73:b3:8e:5d:bb:1b:5b:33:b9:3b:ca:37:da:
                    31:f0:13:14:59:18:3e:45:ae:96:43:4a:20:d0:23:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A2:96:87:5C:62:C5:12:A5:B1:88:1E:41:B1:36:07:7B:3D:27:F1
            X509v3 Authority Key Identifier:
                keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:98:f4:aa:15:4d:01:e2:19:78:e0:36:f7:bf:b1:22:c6:3a:
         c9:d7:27:35:58:9c:3a:17:90:89:19:ab:4d:c2:b5:4f:a7:84:
         0b:72:32:71:24:8f:6b:d2:54:2f:d2:ec:5e:56:83:89:94:f5:
         03:5d:6b:1b:89:c5:50:df:fc:b5:f2:97:4f:78:e4:7a:d9:e2:
         e0:c2:12:0d:f0:23:aa:25:ae:40:81:18:4a:e4:7e:58:eb:6b:
         e4:b9:73:36:72:e9:cd:4f:4e:25:73:18:c2:93:f6:96:02:5e:
         84:41:55:4f:f0:69:2a:54:13:2c:9c:e3:1e:71:9e:13:41:d3:
         b9:d6:93:07:75:e3:13:00:19:5e:d7:66:23:35:16:dc:23:fe:
         42:5b:37:2a:60:a9:40:ce:ed:d9:91:9b:ca:bc:ab:40:23:df:
         32:99:d0:d0:ce:be:c1:61:5d:83:16:1e:50:95:c5:fe:5d:21:
         8e:23:d8:14:6d:89:00:5a:b7:99:dc:b3:4e:b5:18:39:f8:fb:
         28:23:e0:99:ba:92:59:06:db:78:61:56:31:c7:65:96:c1:0e:
         32:18:0b:f4:43:ba:1a:2e:62:e9:d2:5b:cb:fc:62:53:d4:5a:
         d4:6d:1b:8e:dc:10:c5:52:d2:f0:00:bd:fa:48:23:5d:ec:6a:
         7d:5c:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:34 2025 by rpki-client