This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File:                     wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier:          MCJSfRDMpCq7SSZ8e7hJace4oF0xLBJKS9WT0GUvc2s=
Subject key identifier:   E3:4E:B6:41:67:77:85:1D:E7:EB:F8:09:69:63:EC:30:5D:E7:3A:2C
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer:       /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial:       3542
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number:          351B
Signing time:             Thu 04 Dec 2025 14:33:51 +0000
Manifest this update:     Thu 04 Dec 2025 14:33:51 +0000
Manifest next update:     Thu 11 Dec 2025 14:33:51 +0000
Files and hashes:         1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: Y6JVndpZrTbKyVYEIHFHw6+hS9GGprUOYONwALmpsbw=)
                          2: 93215346C57811EA8440684AC4F9AE02.roa (hash: Neo4y3dgUaZAb3jweRA+243JDhV+YXScU7c0GteH4uM=)
                          3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: LAm5srYmYBa9WShMZPaiIeFdpoZdlrFsrxnvM6yFi7M=)
                          4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: W9xZ05fzRaVk7lWJKjvq0VcXRDKzdp+VZJErV4rbXxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13634 (0x3542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
        Validity
            Not Before: Dec  4 14:33:51 2025 GMT
            Not After : Dec 11 14:33:51 2025 GMT
        Subject: CN=69319bcf-e416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:be:10:fc:0c:fe:1b:47:7d:aa:a6:04:0a:
                    57:68:45:06:67:82:b1:30:7f:3f:9e:c5:28:7f:9c:
                    05:18:5c:c1:3b:21:a6:ff:56:ba:97:ae:ad:52:99:
                    a7:ae:51:db:47:69:99:88:68:09:71:f1:45:90:55:
                    a5:7f:ea:f6:f6:3a:6b:b2:ac:3b:fc:c9:ab:42:80:
                    46:80:e9:41:1b:b5:9f:39:34:a5:12:81:9d:76:b7:
                    bf:61:2b:ee:c2:ff:ab:b9:f1:8c:a2:85:40:0c:b5:
                    87:2e:2e:51:08:95:d7:ee:96:f0:54:c3:37:37:41:
                    9d:da:2f:68:0b:4b:f9:f1:e9:22:8c:56:13:1d:32:
                    02:cc:bc:13:2e:0b:8e:90:c7:24:39:e9:1e:12:68:
                    ad:1d:02:80:4c:45:a2:bc:2b:33:56:4a:ad:2d:8e:
                    a7:a3:26:83:43:b3:46:11:bc:9c:3a:9f:0a:20:f2:
                    d1:10:32:40:22:20:6e:b3:d5:45:95:dc:e8:09:56:
                    70:74:54:a2:8e:72:bd:db:79:42:1a:a2:c2:4e:f3:
                    ea:b7:98:0f:0c:dc:b4:7b:36:db:76:00:bd:ae:0f:
                    38:95:21:8c:49:42:2d:98:3a:47:3e:e7:9b:c7:5a:
                    47:da:d2:bc:ef:62:c1:23:45:a2:30:97:0a:88:c3:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4E:B6:41:67:77:85:1D:E7:EB:F8:09:69:63:EC:30:5D:E7:3A:2C
            X509v3 Authority Key Identifier:
                keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:72:b0:25:e2:03:a6:82:26:23:18:13:d6:40:fc:1d:21:55:
         01:3c:44:41:95:79:55:65:89:37:94:fc:29:91:3e:7b:1e:1a:
         a1:61:f4:d7:38:d5:7f:00:b2:8d:d2:ac:f0:0f:a2:18:83:b2:
         85:e4:e0:7f:9f:0b:ed:0a:f0:18:12:29:94:be:1b:b1:71:7d:
         50:c9:d2:b2:50:72:43:21:ba:e2:00:23:fa:45:4d:9a:5b:0d:
         d4:1d:fe:fd:f9:a3:c5:83:b4:8c:cd:75:1b:61:b5:4b:5e:47:
         30:b7:f7:90:9e:87:7f:e0:ec:2b:d6:e2:b4:6a:cd:4a:23:aa:
         50:bd:d7:64:46:7f:5b:ed:e6:1d:91:d7:c1:16:db:c1:3b:bf:
         7f:0e:fe:77:4b:70:2e:4e:16:7a:ef:68:77:9a:73:f5:69:83:
         5d:1a:6e:64:58:46:4e:9f:46:92:ed:75:24:bc:99:9f:a9:ca:
         fe:34:d5:36:a8:c1:fb:52:8f:ed:e7:b3:b6:a4:b2:e1:f5:f2:
         46:fc:5d:1f:ba:ea:b9:bc:86:1f:0d:d9:31:1d:dd:ab:8a:67:
         17:fb:53:a1:c6:04:25:8f:30:9c:69:d8:16:45:88:1e:49:56:
         19:b5:74:3e:65:c3:b1:65:ba:1f:96:3c:d2:57:9f:e4:e9:58:
         ee:ae:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:32:22 2025 by rpki-client