This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          9M2yQg7VG76hSZQ1pva0kXL5TcwSh8k+pFV5czgqhCE=
Subject key identifier:   47:2C:5F:46:06:DB:AD:B4:57:CA:A7:50:E3:10:88:F6:4F:5C:4A:FF
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          0151
Signing time:             Fri 05 Dec 2025 02:23:35 +0000
Manifest this update:     Fri 05 Dec 2025 02:23:34 +0000
Manifest next update:     Fri 12 Dec 2025 02:23:34 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: AmapNZNhnBs7ZMA2+Z+w/Yg9QALmTPj9PGSYFAA8Jco=)
                          2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: UNEOMs5fqV8hRkNMf6LQuM3qbd10KwZHOmN1Q6Mt1Y8=)
                          3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: Bq4ocVFZ0iosWtq4rhIKfW0siZZeuAW1JI1o4Hun97U=)
                          4: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: iFM1hRRsTitvTXymeae3/v3L/18Q6Ng8NLFYYC8Eutc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: Dec  5 02:23:34 2025 GMT
            Not After : Dec 12 02:23:34 2025 GMT
        Subject: CN=69324226-ccba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:b5:4e:8b:62:b7:dc:73:8d:eb:7c:a6:cd:
                    e8:9c:69:cf:49:ea:8a:4d:2b:ce:8a:8e:03:48:d7:
                    68:0f:d6:cb:61:b3:36:1e:d7:3d:80:2b:e7:24:be:
                    19:77:e5:f3:50:4e:b3:38:27:39:6d:e6:b8:10:af:
                    d7:5a:fa:e9:07:2f:26:79:76:43:09:45:61:a8:e4:
                    2a:f7:64:be:a5:e4:68:c6:c6:f8:09:2c:3f:4c:e7:
                    2c:49:e0:44:75:07:f8:a3:f3:e3:14:bf:06:31:7c:
                    d7:78:df:02:fb:3e:39:f4:a2:01:7b:e3:9c:ff:83:
                    8c:1d:e6:16:31:41:49:0a:aa:e6:79:d0:0b:bd:2f:
                    ea:39:c6:7d:26:1d:53:b5:f4:a9:ff:1a:94:bf:9f:
                    11:94:ff:44:d2:8d:6e:ed:89:3e:81:9e:7d:a9:30:
                    2f:ae:fd:b9:4c:a2:7d:7a:b4:2a:37:2d:d2:b9:46:
                    99:6a:a2:f1:95:ad:ae:c7:f0:7f:7b:27:56:9e:8a:
                    28:22:ce:a6:95:c2:b1:84:6e:29:c4:81:1d:ba:0e:
                    3e:e4:3a:12:20:68:69:62:3f:5e:02:c1:33:22:82:
                    9d:ff:83:57:6b:a5:4d:9b:8c:1d:60:29:73:fd:29:
                    d7:e1:38:38:59:d8:79:98:e2:11:f7:cf:7f:45:88:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:5F:46:06:DB:AD:B4:57:CA:A7:50:E3:10:88:F6:4F:5C:4A:FF
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:5b:16:9e:8c:3f:00:28:76:ba:18:5e:27:a8:bb:d3:93:
         f9:a3:90:e5:af:3a:58:fe:72:b3:8b:a6:65:bb:c4:fb:05:97:
         06:86:ac:ed:e5:1f:f1:7b:75:90:50:c3:07:73:31:fd:75:99:
         33:63:ec:c3:be:3d:9e:aa:60:0a:d5:35:82:c4:9a:6c:52:8e:
         9a:2b:b0:f7:c7:25:60:a3:18:58:5a:81:24:69:61:a9:89:e8:
         9f:8f:34:be:69:3f:67:be:df:8e:89:1f:f6:0b:79:8d:29:3a:
         e6:97:1a:1e:67:6f:5e:f9:29:4b:28:f1:f7:8a:81:ba:b5:1c:
         68:48:22:be:16:4c:cf:27:ff:f4:a9:bb:81:d8:a1:dd:3d:86:
         03:ea:93:8a:cb:42:ae:1f:d3:2a:a6:20:71:8c:e7:c9:61:35:
         8e:43:7c:8b:d3:49:20:78:a8:eb:ce:8b:59:82:40:b5:cc:77:
         c4:32:a8:bc:d6:37:e0:62:f2:ce:5a:4d:a6:46:01:c8:7a:d6:
         0a:84:81:23:18:c0:26:97:f6:b8:9d:d3:fd:01:57:e1:56:4e:
         d9:43:31:34:fd:69:c1:28:52:a0:42:d0:84:dc:70:63:c9:be:
         d2:32:46:bc:83:16:6d:29:43:5d:88:cf:6e:d3:be:d4:09:64:
         6f:ff:97:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjcyOTIxMTAvBgNVBAUTKEMyRkM2NDQ4NTY0RUM2NTI2QjkxQjJGRTIzQjRGRDU4
MzQyRDIwRjQwHhcNMjUxMjA1MDIyMzM0WhcNMjUxMjEyMDIyMzM0WjAYMRYwFAYD
VQQDEw02OTMyNDIyNi1jY2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKG1Totit9xzjet8ps3onGnPSeqKTSvOio4DSNdoD9bLYbM2Htc9gCvnJL4Z
d+XzUE6zOCc5bea4EK/XWvrpBy8meXZDCUVhqOQq92S+peRoxsb4CSw/TOcsSeBE
dQf4o/PjFL8GMXzXeN8C+z459KIBe+Oc/4OMHeYWMUFJCqrmedALvS/qOcZ9Jh1T
tfSp/xqUv58RlP9E0o1u7Yk+gZ59qTAvrv25TKJ9erQqNy3SuUaZaqLxla2ux/B/
eydWnoooIs6mlcKxhG4pxIEdug4+5DoSIGhpYj9eAsEzIoKd/4NXa6VNm4wdYClz
/SnX4Tg4Wdh5mOIR989/RYiXNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcsX0YG
2620V8qnUOMQiPZPXEr/MB8GA1UdIwQYMBaAFML8ZEhWTsZSa5Gy/iO0/Vg0LSD0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI5Mi8wM0I4OEFEQUQx
NEExMUVFOTlERTJCNTJDNEY5QUUwMi93dnhrU0ZaT3hsSnJrYkwtSTdUOVdEUXRJ
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2eGtTRlpPeGxKcmtiTC1JN1Q5V0RRdElQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzI5Mi8wM0I4OEFEQUQxNEExMUVFOTlERTJCNTJDNEY5QUUwMi93dnhrU0ZaT3hs
SnJrYkwtSTdUOVdEUXRJUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+fVsWnow/ACh2uhheJ6i705P5o5DlrzpY/nKzi6Zlu8T7BZcGhqzt
5R/xe3WQUMMHczH9dZkzY+zDvj2eqmAK1TWCxJpsUo6aK7D3xyVgoxhYWoEkaWGp
ieifjzS+aT9nvt+OiR/2C3mNKTrmlxoeZ29e+SlLKPH3ioG6tRxoSCK+FkzPJ//0
qbuB2KHdPYYD6pOKy0KuH9MqpiBxjOfJYTWOQ3yL00kgeKjrzotZgkC1zHfEMqi8
1jfgYvLOWk2mRgHIetYKhIEjGMAml/a4ndP9AVfhVk7ZQzE0/WnBKFKgQtCE3HBj
yb7SMka8gxZtKUNdiM9u077UCWRv/5eB
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:06:49 2025 by rpki-client