This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File:                     WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier:          MtGflEdItqhqnkb4DWvClvkocsx9bEdNngz1vqutJyU=
Subject key identifier:   6F:BF:2D:D3:44:A0:5B:61:DA:5C:65:2B:8F:49:96:B8:EE:0A:F8:5E
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer:       /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial:       0720
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number:          2CFE
Signing time:             Sat 06 Dec 2025 15:27:52 +0000
Manifest this update:     Sat 06 Dec 2025 15:27:52 +0000
Manifest next update:     Sat 13 Dec 2025 15:27:52 +0000
Files and hashes:         1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: 7woY8LAABpzRDykZRiG3BTLJbkLqtPGF0/zN4WjXKc0=)
                          2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: yv4yXxdZSOzS3VJoLoyhG//bnrtF6VAnh10WOZtqxtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
        Validity
            Not Before: Dec  6 15:27:52 2025 GMT
            Not After : Dec 13 15:27:52 2025 GMT
        Subject: CN=69344b78-8dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:50:1c:6b:35:35:ef:bc:f6:c8:6d:8d:f4:
                    50:d7:2a:3b:fc:56:45:42:06:82:09:e6:62:cf:9f:
                    2c:e1:41:6a:5e:6c:dd:58:a1:21:2c:78:ff:bd:97:
                    72:f3:5c:22:12:43:af:01:4f:81:97:bc:0b:79:e1:
                    4e:d6:3f:f9:23:9c:1b:fb:83:80:26:b2:75:1b:23:
                    5f:59:61:dd:85:e1:2d:e4:8d:ba:cc:2a:7f:14:f3:
                    29:67:2d:70:a2:11:61:2d:fb:18:08:d1:eb:af:46:
                    76:f6:b2:61:7f:e6:84:fa:27:d6:85:c7:97:30:e4:
                    09:aa:a6:d7:ec:4d:04:9c:3f:38:8b:a7:98:b8:24:
                    29:23:fc:c5:6c:6a:85:51:67:94:d0:b4:35:e0:ae:
                    ef:75:a8:aa:06:98:13:e2:f9:90:ea:7a:3c:69:d7:
                    3e:19:11:59:e4:66:34:31:b5:5a:55:4e:10:d9:ba:
                    37:16:c1:c5:87:bf:83:a3:3a:9f:15:60:e9:e4:53:
                    eb:20:a6:2f:27:66:1d:2c:0c:a4:54:07:3a:a8:12:
                    7b:19:57:a2:4f:10:3c:2b:ee:5e:74:60:7e:f6:e5:
                    3b:ff:86:a7:a4:3b:7d:a7:a2:f3:fc:f7:84:c8:6a:
                    d4:03:c5:2f:1d:39:5d:09:9b:ab:0f:4b:98:c3:17:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BF:2D:D3:44:A0:5B:61:DA:5C:65:2B:8F:49:96:B8:EE:0A:F8:5E
            X509v3 Authority Key Identifier:
                keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:bf:8e:02:ab:2f:22:b8:af:9a:90:d0:1e:4f:54:bf:b3:a4:
         6b:97:16:46:0a:93:95:85:f1:b9:51:88:1a:39:d8:c4:eb:b2:
         63:d4:11:03:b3:24:25:ec:ef:33:c9:e6:8a:21:66:44:9d:4d:
         cb:99:0e:cd:61:5b:7e:a8:6e:91:8d:e2:3e:12:a8:a7:52:e0:
         1e:d5:4e:f6:99:4e:1c:13:91:46:2f:90:c6:c2:37:3b:01:09:
         2b:6d:bd:11:c0:e7:74:f1:48:4f:5a:71:83:bc:d2:8e:a4:1b:
         c5:b4:ac:7a:e5:c2:d2:d8:28:d1:9a:93:ae:03:b5:56:cf:92:
         7a:4a:31:6b:80:43:cf:52:f4:86:9f:85:f9:1d:8a:66:3e:7c:
         4b:56:38:2e:3d:0f:ad:8b:05:48:14:d9:58:3b:29:e7:36:dd:
         ac:c8:1d:4b:16:73:c6:2d:9a:cd:34:7a:11:b1:e3:79:c0:89:
         58:25:cc:b5:9d:36:b0:a2:b4:bb:1f:18:32:a0:50:29:3e:d1:
         11:fe:67:b6:22:7a:69:5e:72:27:16:8a:2d:2c:a4:b4:8f:97:
         43:d9:c3:6a:a7:d5:c3:bf:15:e6:72:92:7f:0a:a3:1e:b1:2f:
         a0:95:74:76:0b:d8:8e:34:f7:7f:9c:e0:2e:2d:dc:c4:b0:fa:
         50:8e:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:32 2025 by rpki-client