This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
File:                     wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json)
Hash identifier:          QsaDlZVd6ukZTHs7+s7eyvMlmgSaxZ0rG5ADTc27j8s=
Subject key identifier:   CD:FB:D7:40:BF:A4:9C:3D:36:A4:16:5E:D1:E7:D9:32:67:E7:95:26
Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
Certificate issuer:       /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
Manifest number:          BB
Signing time:             Fri 05 Dec 2025 03:02:50 +0000
Manifest this update:     Fri 05 Dec 2025 03:02:49 +0000
Manifest next update:     Fri 12 Dec 2025 03:02:49 +0000
Files and hashes:         1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: q+GvBRHJq46RywIbO1edHd4nQf9oQ1VPXZJ/7w/q9tE=)
                          2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: aY02E3irzGto2CDBM82Hws7+3Xp8gIBSyGbYsCwSjsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
        Validity
            Not Before: Dec  5 03:02:49 2025 GMT
            Not After : Dec 12 03:02:49 2025 GMT
        Subject: CN=69324b59-759a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:da:99:d4:00:22:0a:a0:f9:b2:4e:77:e6:98:
                    b1:0e:5b:dc:2b:f9:c0:81:64:97:4d:5d:57:d7:22:
                    64:a2:f0:64:19:54:8b:38:7e:09:7a:f2:42:4c:00:
                    3f:69:c7:bb:e1:b7:13:83:90:6b:15:f4:86:56:7b:
                    cd:d7:92:16:48:7a:e3:0a:51:67:ce:28:73:0d:74:
                    ff:df:85:00:00:6f:5a:b4:be:6f:67:e2:4b:31:48:
                    6e:d5:61:6f:cd:a9:2f:11:09:69:9c:d2:5a:51:ec:
                    4f:f4:c6:3e:93:62:6c:7f:12:86:9a:b5:bf:72:1a:
                    27:42:5f:1a:4a:99:ea:33:7a:f0:7c:31:ff:2a:71:
                    b4:be:e1:3b:57:c4:f6:0e:20:d9:ff:48:af:3a:e6:
                    a6:58:40:a3:44:f3:6d:aa:99:1a:fd:bb:f7:90:d7:
                    32:40:3f:0d:0f:92:c1:de:a9:65:dc:7d:f0:49:13:
                    48:a9:71:5e:c5:9e:a6:d5:d0:ea:74:99:8d:0a:91:
                    56:33:22:c4:7e:a5:e7:5f:88:a8:2f:63:94:21:c2:
                    98:f4:97:18:e7:db:75:ab:da:2c:94:f2:44:f1:ba:
                    c0:c2:77:85:9c:d5:8c:ac:bf:86:1c:ce:9b:e4:63:
                    ba:82:9d:b4:62:ae:2b:4a:9e:d1:82:de:7d:54:bd:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FB:D7:40:BF:A4:9C:3D:36:A4:16:5E:D1:E7:D9:32:67:E7:95:26
            X509v3 Authority Key Identifier:
                keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:4f:ad:d8:08:86:82:67:5a:f3:4d:8f:0e:07:11:ff:15:89:
         83:3b:a9:08:58:ed:74:30:fb:a7:a3:d3:cd:20:86:f0:9a:54:
         c0:14:9a:27:34:fe:11:73:33:f1:de:bd:62:4c:f4:ca:18:5c:
         50:e3:90:74:e5:71:c5:6a:5d:15:13:1c:54:78:cc:ea:24:22:
         32:79:5d:ac:ed:83:32:dd:8d:9c:48:b0:ce:e3:50:2b:85:90:
         3a:43:e7:97:25:97:31:d8:8c:13:25:f6:e2:26:ad:ab:79:7f:
         8e:df:2b:e5:60:b1:21:2b:1f:aa:8d:86:a9:1a:12:fd:6f:8a:
         fb:df:66:28:57:29:c9:6b:a6:21:9f:df:21:f7:f9:aa:85:61:
         17:5e:77:e8:c6:e7:17:da:ee:ad:2a:37:e9:76:87:b6:f0:89:
         e8:be:9b:63:d5:69:68:7b:cd:c1:0e:5e:a9:30:a5:06:64:b1:
         0d:78:8d:8e:0a:fb:51:6b:f6:3a:15:79:e6:63:cd:9a:29:41:
         ee:d6:be:a2:ad:00:f3:2f:9c:1e:01:52:2b:c2:92:13:35:79:
         6f:72:9b:1a:e2:26:2f:4a:5e:41:74:41:5e:bd:f2:49:42:0e:
         12:bd:eb:d4:b2:fb:33:74:67:8e:81:2e:49:54:67:37:b9:fd:
         88:80:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:26:19 2025 by rpki-client