This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File:                     woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier:          9ytwfdEd7xxOOF3Bd3wIHYyCd2dystShc3gW9c5ckHk=
Subject key identifier:   70:2E:C0:63:9D:77:26:E4:BC:DF:1E:FC:DD:7E:3C:96:1F:05:8C:F3
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer:       /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial:       02F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number:          02EF
Signing time:             Thu 04 Dec 2025 23:38:05 +0000
Manifest this update:     Thu 04 Dec 2025 23:38:05 +0000
Manifest next update:     Thu 11 Dec 2025 23:38:05 +0000
Files and hashes:         1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: aDwFMF6iOF/ViqkiK9esnil4GoaLWyItDzVtzZV/EMg=)
                          2: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (hash: ifFLN+8twN04B6jY6cx/b65AiJj/Z2yB7h3ev34IjTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
        Validity
            Not Before: Dec  4 23:38:05 2025 GMT
            Not After : Dec 11 23:38:05 2025 GMT
        Subject: CN=69321b5d-4051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e0:70:3a:c5:0c:f4:ff:03:fc:b1:20:73:dc:
                    28:48:49:e5:c4:44:56:25:90:ca:55:d5:88:54:4b:
                    87:ca:ea:d1:d8:77:c8:37:d6:d7:a7:45:6d:2d:09:
                    6d:5b:db:b8:24:8a:6b:7c:7c:ff:b3:80:cb:ba:e3:
                    45:8d:81:27:98:84:62:97:93:d5:cc:86:5a:4b:b8:
                    a1:6a:50:83:d8:f0:84:27:1b:e4:e0:3e:7c:ee:68:
                    b5:17:2f:34:48:da:f1:7e:d0:37:22:4d:43:8d:77:
                    ec:e9:49:60:b9:01:54:63:da:c4:71:6e:be:ab:8f:
                    60:58:13:7e:c9:55:27:59:b0:31:91:b0:e0:d5:fc:
                    c7:1d:d0:d6:38:ff:e7:b5:c6:0e:e9:ce:e5:b1:3a:
                    e4:95:a5:93:50:a0:a4:6f:a3:10:85:73:50:8a:02:
                    a2:40:48:1f:d0:1d:8e:8c:6a:e9:bf:41:b4:89:cc:
                    72:97:58:69:c1:a6:54:d0:e3:aa:57:f1:39:f4:20:
                    26:0c:60:4b:02:4c:93:0e:e4:f7:b5:fe:f2:b0:44:
                    b4:c7:0a:63:28:3d:8a:35:33:1f:ee:82:de:b7:5a:
                    20:b3:5f:6e:12:39:9b:a0:6e:cd:a5:32:df:70:87:
                    7b:69:f0:7b:0c:ec:b4:22:01:37:97:9c:54:77:58:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2E:C0:63:9D:77:26:E4:BC:DF:1E:FC:DD:7E:3C:96:1F:05:8C:F3
            X509v3 Authority Key Identifier:
                keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e7:98:a6:78:28:74:c8:c0:6c:4c:1a:c0:59:f6:2a:b5:d8:
         13:14:21:6a:43:53:63:72:b4:21:c0:de:7a:74:a4:91:a7:e4:
         97:47:08:bc:87:d4:7b:5f:94:19:6b:e7:66:2d:04:f5:d3:95:
         29:94:46:39:6c:a9:90:42:27:16:b6:ca:9c:60:23:2b:5d:9c:
         eb:6e:1e:00:be:1e:a7:67:91:45:db:f1:3b:5b:0c:d1:35:8f:
         85:f0:e8:84:66:ad:79:74:1c:8b:88:32:87:17:10:cd:df:cc:
         71:3c:10:3c:b3:83:ab:5d:28:bb:2d:8e:ac:81:49:00:81:51:
         2a:ea:f8:da:80:9e:73:61:f7:ae:0b:18:ee:4f:63:89:5c:91:
         06:3b:28:b1:8e:71:ba:23:b6:66:df:71:ef:dd:43:4c:31:89:
         72:be:0f:03:cc:17:8d:b7:10:0b:c3:1e:c4:97:8f:84:de:c2:
         a5:d6:9d:bb:3d:97:9f:73:a8:3c:08:7c:fb:01:58:27:5b:cb:
         61:83:4c:10:72:44:da:f5:e1:22:c4:ed:72:52:4d:a6:a3:00:
         e7:d4:5d:f6:c1:f9:fb:07:b0:7a:ff:24:95:4d:8f:0e:5d:62:
         31:ef:19:b7:1a:a9:de:98:26:b8:9c:85:73:0b:d9:04:2c:ef:
         19:dc:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:44 2025 by rpki-client