This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
File:                     We3oFpsKLDIUaf8RsWKL3gwfLEE.mft (raw, json)
Hash identifier:          6WwHp4tdaUoas/ENairYOGvZhsxJXzq9rvRn9zHi4M8=
Subject key identifier:   34:A0:08:7C:A3:69:D1:F2:89:B8:07:56:53:F1:B3:EA:8F:B3:66:59
Authority key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41
Certificate issuer:       /CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
Certificate serial:       076D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
Manifest number:          0761
Signing time:             Sat 06 Dec 2025 20:41:10 +0000
Manifest this update:     Sat 06 Dec 2025 20:41:09 +0000
Manifest next update:     Sat 13 Dec 2025 20:41:09 +0000
Files and hashes:         1: We3oFpsKLDIUaf8RsWKL3gwfLEE.crl (hash: fbcxxwYo+Fj+07qkgOKV32OyLj+vXG5Gdr2At1piqks=)
                          2: FD9457225B1011F0A31EF763C4F9AE02.roa (hash: Ve9Qh4M1YqONq/JG/DFrsaMyJzHBLRsnzhhtznWeJio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl
                          rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEFAF, serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
        Validity
            Not Before: Dec  6 20:41:09 2025 GMT
            Not After : Dec 13 20:41:09 2025 GMT
        Subject: CN=693494e5-c3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:58:9f:85:4f:a8:ae:f9:0f:09:0e:e2:21:
                    99:3e:ef:6d:4d:08:5d:81:dc:c3:a1:6e:f8:95:80:
                    0f:98:31:5f:02:9b:9d:df:7d:ff:9e:72:23:3c:3f:
                    1d:cb:d1:cc:7d:f7:c2:7b:d3:42:0f:4d:93:1d:19:
                    7f:41:8f:61:2e:41:b4:f5:be:80:26:ca:36:be:20:
                    a6:a1:04:34:5e:35:89:85:28:83:8a:5e:fa:f5:52:
                    18:fe:f2:26:57:ff:f3:ac:08:b8:61:3d:30:fd:16:
                    ff:ed:db:52:1c:73:8f:56:da:52:f9:87:d5:98:dd:
                    4d:50:35:ac:fc:70:36:66:dc:77:56:fa:7f:e9:77:
                    22:3b:32:4a:6b:5a:62:1a:40:d6:98:dc:13:7e:ec:
                    50:fe:51:89:45:4e:32:b7:75:71:e7:8c:50:c0:cf:
                    e9:55:c2:ce:a3:4e:4b:28:9f:cc:04:f4:7b:45:47:
                    bb:ce:68:c4:64:38:9b:cd:87:95:60:d9:d0:f9:79:
                    de:c4:42:35:f8:8f:fe:6d:38:9f:a7:70:a2:0a:ad:
                    ae:55:97:b2:1a:e8:fe:eb:7c:b1:ca:6f:84:9a:81:
                    7e:95:37:46:f6:2d:fe:25:84:90:6d:04:10:17:e6:
                    fe:f1:f6:78:89:f0:cb:45:eb:54:92:8c:f8:1d:79:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A0:08:7C:A3:69:D1:F2:89:B8:07:56:53:F1:B3:EA:8F:B3:66:59
            X509v3 Authority Key Identifier:
                keyid:59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ac:e1:d7:8a:af:c9:f8:40:e3:f5:3e:d9:7f:d3:11:fd:1c:
         f8:e3:a0:ba:cb:34:a8:6f:30:3b:bd:60:e3:79:b2:a4:23:95:
         8a:40:f9:df:04:73:83:95:f4:8e:55:b7:19:05:49:67:ea:2f:
         8a:65:05:00:f9:b6:4b:3e:11:09:d3:4e:1e:82:ae:31:76:19:
         4f:13:87:f1:28:41:33:ff:30:30:1b:0d:03:83:b1:20:d5:69:
         b1:aa:d5:ee:6e:60:73:f5:f2:41:f1:0d:4d:c3:19:bc:d5:21:
         b4:b3:57:af:09:c4:79:64:06:57:f1:c0:46:6f:bf:b3:95:e4:
         b8:29:38:2b:4c:18:3d:4e:49:34:3b:37:8e:59:66:e3:e5:a7:
         9f:7b:75:fe:89:0f:8d:6a:58:14:24:50:1c:7b:f3:ee:4f:9e:
         d3:25:a9:5b:af:6d:cc:34:da:dc:89:6f:ba:2d:42:5e:fa:e2:
         41:b6:bc:46:30:ad:69:0f:42:4e:1f:14:05:d5:90:8e:df:e9:
         43:3b:c3:cb:3b:29:9e:04:50:29:61:3b:db:97:d8:cb:3e:4b:
         87:cd:75:a4:38:fd:ca:b6:43:4e:b6:de:de:81:0e:2c:f0:ba:
         ff:ec:84:b5:33:9c:3a:ae:35:c9:a0:a6:2c:44:39:e2:03:35:
         ba:00:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:33 2025 by rpki-client