This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File:                     WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier:          9fBH9aC0ZmpLi2dRSr1gRzryZg26ZcPxoFhRZbojXqE=
Subject key identifier:   46:CE:2B:12:CD:DD:19:3B:7A:E2:C6:6A:F4:A1:BB:2A:94:22:45:9E
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer:       /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number:          0333
Signing time:             Thu 04 Dec 2025 23:27:06 +0000
Manifest this update:     Thu 04 Dec 2025 23:27:06 +0000
Manifest next update:     Thu 11 Dec 2025 23:27:06 +0000
Files and hashes:         1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: 7GjsS+j7ko0R4JFFZywJrDNvmvhSQ9nnC7GZfpmiGps=)
                          2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: 7fAydexKXPdZvEhVXyfnP9N5MybcBu9GtBprbPNnugw=)
                          3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: dvzhA8SmNiPJaXBGb4hu0iK1TSWFRqrP4dxIxnPOkaQ=)
                          4: 8409527078B011EE8D737723C4F9AE02.roa (hash: Smslgu7rJqUTUi4Mp8vBgW1QUKGuNL2tLBKb/4Rsvdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
                          rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
        Validity
            Not Before: Dec  4 23:27:06 2025 GMT
            Not After : Dec 11 23:27:06 2025 GMT
        Subject: CN=693218ca-e46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:31:aa:67:4c:40:63:bb:83:26:25:1f:b8:
                    a9:cf:2e:71:f5:75:ef:d9:23:a4:bb:43:92:41:90:
                    75:8f:ec:0e:f6:8e:67:95:9f:0a:25:14:34:fc:7c:
                    c3:d5:98:23:34:fb:9c:0f:12:ac:ae:ca:66:db:e1:
                    45:6d:a1:67:30:10:c2:29:76:38:ad:c3:09:61:63:
                    a1:05:f1:4b:4b:3d:6b:45:ca:8b:5d:5f:7e:60:69:
                    01:87:41:6b:59:a4:f2:af:3a:e6:23:dd:f8:70:0e:
                    17:79:09:84:d8:b5:6c:39:3d:19:83:b2:70:be:39:
                    9c:6b:cf:6f:68:9a:85:e4:cc:77:aa:63:17:31:2c:
                    74:b0:5e:ef:32:3e:fe:0d:cb:df:1f:98:d2:80:e6:
                    3f:de:f5:60:42:21:d6:9a:f3:c1:b8:50:60:95:89:
                    12:f2:a8:33:c1:ea:57:9c:e2:2b:1e:07:ee:5a:89:
                    23:75:e6:0e:66:75:69:f2:c7:5c:60:c5:d4:d0:cc:
                    ec:77:91:48:cf:89:f2:dc:00:72:65:8d:bc:aa:da:
                    f0:58:96:0b:3c:32:3f:e1:dc:bf:ba:c7:5e:16:39:
                    e4:a7:fa:fd:59:ba:92:e9:11:45:21:f1:00:6e:72:
                    d9:9c:04:c0:66:4d:ac:ad:d7:1b:1b:22:f6:b9:e3:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CE:2B:12:CD:DD:19:3B:7A:E2:C6:6A:F4:A1:BB:2A:94:22:45:9E
            X509v3 Authority Key Identifier:
                keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:5c:3c:a9:d0:62:ff:cc:64:17:34:40:5d:42:71:8f:fd:
         8a:3a:50:1c:c9:5c:8d:60:98:75:8f:4f:00:51:dd:85:97:87:
         85:9d:6c:9f:49:31:20:15:3d:6e:b3:98:ff:69:0c:c5:e9:d4:
         82:64:03:47:e7:2c:c1:04:c2:0e:cc:9b:fa:a0:d3:a7:61:9d:
         45:6e:8f:0e:f7:52:ae:c8:fd:95:f8:fb:8b:ee:e6:32:19:a0:
         81:73:b3:55:0c:45:24:7c:ea:b8:49:fe:9a:52:e3:ae:6a:5f:
         08:b0:f3:d9:13:5c:7b:ac:7c:98:6c:89:d0:af:ee:2d:0f:eb:
         32:25:55:c8:26:64:2a:4d:f1:cb:a9:61:15:ae:c5:de:68:92:
         bd:14:a0:f1:05:69:5a:89:17:6f:7a:72:27:e2:c5:cb:f5:d9:
         02:cb:ae:9c:ff:ca:20:8a:0a:40:a8:c3:8f:61:3c:64:a8:60:
         ac:cf:bb:dd:89:d6:6e:e4:d9:a8:84:f0:2a:d5:70:ba:8b:ab:
         a7:4f:7d:80:98:73:06:f7:dc:02:27:e4:a7:4b:94:dd:4c:db:
         b5:01:8c:c9:41:c9:4f:f4:f7:3e:64:fe:9b:a7:e2:83:f5:95:
         01:d4:51:04:4f:85:78:7b:21:e9:cb:3d:22:95:19:c3:7f:f1:
         89:73:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:51 2025 by rpki-client