This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
File:                     w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft (raw, json)
Hash identifier:          mTMULU9myUCfNDsikZ6cMVC+Yp/MHRGUgzjamSs3ugM=
Subject key identifier:   F1:B1:64:F4:82:DE:40:3B:28:0A:BA:78:84:74:5C:E8:B7:E6:9D:0D
Authority key identifier: C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1
Certificate issuer:       /CN=A91B1AE1/serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
Manifest number:          F7
Signing time:             Fri 05 Dec 2025 03:21:59 +0000
Manifest this update:     Fri 05 Dec 2025 03:21:58 +0000
Manifest next update:     Fri 12 Dec 2025 03:21:58 +0000
Files and hashes:         1: w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl (hash: 82HwX6U8SZEwvCaVx8BKr8aqQERjLOVgkhCqphh2NXg=)
                          2: 1A760026E06311EFB6B86F0AC4F9AE02.roa (hash: BcuVtmOHXLPxkjx7hblzpyOxk5cBOskxSlEb1CxWfWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1AE1, serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
        Validity
            Not Before: Dec  5 03:21:58 2025 GMT
            Not After : Dec 12 03:21:58 2025 GMT
        Subject: CN=69324fd6-5d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:92:a3:23:b1:90:7c:82:e1:6c:62:c2:b4:
                    91:a8:3c:e7:71:91:f3:93:2a:3c:bd:9a:2b:6a:0a:
                    b9:ce:61:60:28:08:52:b1:b7:3e:3c:1f:ae:5e:b9:
                    f9:01:2b:91:1f:f3:c9:6d:fd:9c:40:cd:57:6b:7b:
                    db:bc:12:d5:0b:1d:71:9d:7a:09:fa:e0:3a:45:cb:
                    d9:67:ca:ab:5f:d1:ea:85:52:08:33:1b:3d:07:4d:
                    45:01:20:b9:92:c8:ca:96:57:0b:0d:0d:00:98:6d:
                    a7:26:5d:77:b0:6f:03:64:48:19:f5:63:20:ce:b2:
                    18:f0:d4:78:78:04:47:0f:07:d2:de:13:31:c6:41:
                    e9:75:4a:a2:52:f2:1d:87:6e:b7:10:6e:4f:bb:98:
                    e4:3c:b4:de:f8:92:3d:d6:fb:48:9a:c8:0b:be:97:
                    d6:30:28:a0:d7:f0:84:1c:0f:5f:f8:00:f7:aa:5d:
                    e7:5d:21:dc:8c:2f:12:24:72:e2:91:f9:77:b2:9d:
                    13:7c:6b:e3:5c:38:e8:cb:06:ab:99:3e:5c:e0:66:
                    4a:75:32:e5:8c:5e:e3:20:62:91:06:f5:00:fc:26:
                    19:b3:96:1b:7e:ff:1d:35:17:95:57:2e:f9:58:ab:
                    3d:b3:df:fb:5e:ca:a7:e9:68:24:d5:23:2f:ea:a1:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:64:F4:82:DE:40:3B:28:0A:BA:78:84:74:5C:E8:B7:E6:9D:0D
            X509v3 Authority Key Identifier:
                keyid:C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:97:3e:0e:5b:ee:a0:35:4d:14:f5:3f:d7:32:d2:df:37:86:
         ee:8f:9d:e7:98:88:fa:df:6a:91:20:2f:7a:16:53:57:51:19:
         39:6d:6b:4f:f2:15:14:14:31:e8:53:a6:da:49:79:2a:a1:3d:
         73:7f:d1:24:b3:6e:22:c4:55:2b:a8:5d:86:d6:b3:f6:80:f1:
         d1:d4:0e:a6:9e:19:71:69:08:2a:29:98:16:fa:77:9d:a1:fa:
         b5:2d:fe:d6:d8:2f:50:b5:02:db:27:6f:49:db:b5:b3:22:91:
         13:ab:3c:66:01:76:be:98:d6:83:bf:2d:66:29:5c:f2:76:5f:
         65:18:8e:e5:ab:74:02:8f:05:ed:a5:63:b3:9e:22:e6:8e:fe:
         e0:cc:d0:3c:11:5a:a9:af:5b:0f:05:2b:82:e6:ef:26:d0:97:
         2a:9c:f7:e9:d1:d6:b3:8a:9e:e6:ad:2e:5f:25:50:0a:89:f4:
         0c:cc:be:95:e1:2b:69:ee:cb:0f:f2:cc:23:64:f5:0c:a5:3a:
         ad:3f:54:1a:26:68:5a:4b:96:27:6c:64:1d:42:4d:b5:f1:f2:
         b5:3d:07:f9:cf:4e:c6:f1:72:cf:e9:93:0d:7c:06:3c:26:1f:
         e1:2c:9f:b0:ef:06:1a:0c:d6:12:01:88:74:91:eb:00:67:94:
         24:f6:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:06 2025 by rpki-client