This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
File:                     wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json)
Hash identifier:          ALmMA7sRHueaaknxu0NlVrhIWgBqAN/F1IDyfbVxSKw=
Subject key identifier:   78:60:5F:7A:F5:94:41:5A:7C:49:02:7A:73:0E:BA:8F:CF:77:25:94
Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
Certificate issuer:       /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Certificate serial:       08C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
Manifest number:          08C3
Signing time:             Sat 06 Dec 2025 19:36:43 +0000
Manifest this update:     Sat 06 Dec 2025 19:36:42 +0000
Manifest next update:     Sat 13 Dec 2025 19:36:42 +0000
Files and hashes:         1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: tnudszaXgB3HwK5bGDEwnOaDjpOiWoSUN0O0Os/+enw=)
                          2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 5xxVenqDrTtB+LAX8MyCpAEyaZJVl5DXQjRG3qyTajU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
                          rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
        Validity
            Not Before: Dec  6 19:36:42 2025 GMT
            Not After : Dec 13 19:36:42 2025 GMT
        Subject: CN=693485cb-701c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:a2:79:64:d6:2a:9e:20:ba:31:43:4c:9f:
                    70:68:0b:79:3b:ad:1e:70:cb:63:ef:08:d6:d2:33:
                    f0:f6:a6:03:e8:90:7f:b5:e3:e2:f8:aa:64:9a:91:
                    77:79:2a:59:0c:e8:66:f3:e7:a1:a9:6f:45:84:95:
                    a7:4e:d2:aa:f3:68:39:d0:c5:bb:63:2f:75:ce:53:
                    86:30:0f:62:b2:5a:02:3f:fb:e7:8d:8a:a7:bb:53:
                    5f:97:dc:a0:05:9f:8d:8b:ad:41:c0:48:ed:fb:5f:
                    42:b7:7a:5d:75:60:4c:22:80:d1:f2:09:d9:39:87:
                    a1:57:7b:8b:dd:22:75:f4:cd:79:45:5e:fe:23:7a:
                    ff:b2:f7:0c:7d:ab:81:9a:63:ab:e7:a7:d9:57:ba:
                    55:08:ef:50:40:dd:13:d1:ed:1a:71:b6:75:2f:de:
                    7f:c1:1e:71:d1:fb:14:8e:1a:90:af:90:ef:ee:a7:
                    80:03:c8:48:b1:ce:8c:7d:b4:ed:d4:c6:f8:51:ac:
                    d7:07:c6:8c:7b:29:22:d4:a2:07:fd:43:b3:eb:bc:
                    f4:85:ef:02:bf:b1:f3:3a:36:4b:6c:2f:17:9d:c5:
                    1e:ad:e0:98:69:72:62:6a:b3:55:d1:61:18:7f:5c:
                    b3:e5:12:26:e4:4b:29:94:3f:97:46:74:37:1a:ad:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:5F:7A:F5:94:41:5A:7C:49:02:7A:73:0E:BA:8F:CF:77:25:94
            X509v3 Authority Key Identifier:
                keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:21:14:12:85:3a:ec:17:04:da:67:3d:f9:fc:82:79:5a:
         d3:2e:49:ad:91:1b:fb:69:b3:3f:41:5d:88:5f:fc:e3:48:16:
         2b:df:60:b0:6c:ef:46:ce:1c:34:fb:15:7b:ee:f2:93:74:60:
         c3:73:85:60:e6:52:61:33:d4:e7:6d:f2:19:81:72:2f:1b:ca:
         01:7f:f1:8a:9c:f9:6a:4d:b0:ab:b0:3a:18:4a:3e:d5:e1:c7:
         9d:fd:7b:c1:78:62:df:b7:b6:42:66:dd:2c:c6:7f:f3:cc:c7:
         3f:e1:33:f9:c5:dc:61:86:ea:11:99:2f:e6:f8:bf:30:c6:ea:
         34:e9:89:ab:3e:6c:a0:50:26:bf:54:da:97:9d:bf:e6:b0:8b:
         e3:17:48:dc:14:0d:f2:42:3b:0b:5f:b7:f3:7c:41:a9:3c:2e:
         d4:9c:02:45:f6:82:0a:c0:3e:f0:65:76:c4:7b:b4:d8:94:91:
         e2:fc:33:26:d2:91:3e:1b:20:df:c7:a9:8e:09:64:16:51:80:
         3d:50:2b:05:13:93:36:a7:90:03:af:1b:f5:4c:d0:80:7f:b8:
         9e:3a:fc:d3:e3:60:bf:85:15:df:63:ab:04:7f:2b:b5:85:85:
         b3:55:22:2f:a1:08:64:15:3c:ce:c8:b9:12:07:d0:13:c0:87:
         e7:83:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:49:49 2025 by rpki-client