This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
File:                     -W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft (raw, json)
Hash identifier:          QmGvals+P0AEHyG8aRjo/xgvBatuFXQuOgI1ave/58c=
Subject key identifier:   AD:C3:72:5D:55:11:06:69:AD:18:90:4D:71:E4:74:B4:56:93:88:72
Authority key identifier: F9:6F:AE:28:8A:64:30:AD:CC:F9:5E:0E:A8:9F:08:5B:B6:E8:29:D4
Certificate issuer:       /CN=A91E5490/serialNumber=F96FAE288A6430ADCCF95E0EA89F085BB6E829D4
Certificate serial:       0563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
Manifest number:          0558
Signing time:             Thu 04 Dec 2025 22:01:47 +0000
Manifest this update:     Thu 04 Dec 2025 22:01:46 +0000
Manifest next update:     Thu 11 Dec 2025 22:01:46 +0000
Files and hashes:         1: -W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl (hash: WXc3+EJpxi+1g8bXrd4JzS82NcH7mFbweRlSPEnk+cQ=)
                          2: 8608449A356511EC9715F015C4F9AE02.roa (hash: 4gKis+++tXEeHG38EwpejzSM+kE6A6gIMsrjZpkNJeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379 (0x563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5490, serialNumber=F96FAE288A6430ADCCF95E0EA89F085BB6E829D4
        Validity
            Not Before: Dec  4 22:01:46 2025 GMT
            Not After : Dec 11 22:01:46 2025 GMT
        Subject: CN=693204ca-ef2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:34:5d:24:d5:55:33:36:32:fd:71:ea:0e:
                    38:de:9d:0d:d3:9b:e5:ca:80:92:00:cb:b1:ab:61:
                    9e:44:ad:d3:f4:97:3e:0d:66:81:66:0f:1a:10:73:
                    03:af:fc:7c:5f:2d:0a:f1:dd:8a:a8:7a:11:54:23:
                    1c:2b:79:43:9e:e0:cf:c5:c0:5c:c2:9f:73:37:d2:
                    7a:38:17:a3:33:b2:07:9b:91:fa:0e:05:9e:11:8e:
                    ea:d6:b2:01:d1:e3:51:66:59:7f:f7:73:7a:23:75:
                    94:6e:2c:84:6d:fc:ad:d0:5f:d6:08:e2:00:2f:a8:
                    e6:ee:a4:38:b9:ef:9c:c4:9e:2b:1c:fa:a2:4d:06:
                    b8:d9:db:4f:9f:bc:02:4f:76:78:74:05:88:d6:aa:
                    c0:e8:9c:d7:79:0e:db:a4:97:b4:8b:12:42:c5:f2:
                    1e:4f:df:91:c2:64:56:37:cf:3b:4b:c0:3e:ba:e8:
                    66:90:ab:66:8b:b0:96:ff:71:21:f9:91:fc:c4:bf:
                    ab:96:11:94:b7:e2:c6:47:65:e7:b5:11:d4:73:a8:
                    98:0a:a3:76:b9:24:29:ad:c0:a7:e9:35:27:82:93:
                    08:53:9d:71:46:e4:56:e7:60:64:ff:85:56:43:bd:
                    32:93:be:96:9e:5f:3b:8f:e9:05:cc:29:e2:39:8f:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:72:5D:55:11:06:69:AD:18:90:4D:71:E4:74:B4:56:93:88:72
            X509v3 Authority Key Identifier:
                keyid:F9:6F:AE:28:8A:64:30:AD:CC:F9:5E:0E:A8:9F:08:5B:B6:E8:29:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:64:8d:a4:17:bd:f2:b0:6b:ed:69:37:9b:8e:9f:ce:61:17:
         1b:ef:1e:76:8e:42:93:e3:bf:e5:84:48:d5:e8:53:88:6c:e7:
         bc:49:6d:07:21:2d:68:b5:d0:2b:ff:e3:e7:99:06:87:b5:5d:
         c5:97:10:26:60:e8:60:c7:10:7f:b1:a0:bf:0f:0d:76:90:16:
         c7:b0:78:3d:b7:06:cc:09:6d:a9:6e:ae:c5:c8:6f:28:e4:17:
         9c:32:8e:6e:bb:70:85:05:6b:cc:82:f0:04:0b:64:01:14:6e:
         3b:dd:3a:4f:42:68:0f:a6:21:97:83:cb:8c:75:bb:ff:f6:9b:
         84:a1:b0:63:de:32:b1:6d:7e:25:a2:c9:ff:af:df:a2:16:fb:
         87:89:99:6b:74:2f:0b:f0:3f:1d:24:19:25:22:43:b1:bb:67:
         c1:56:62:b6:89:22:3b:4a:91:75:b0:d0:30:43:54:9d:7d:72:
         dc:f5:7d:05:df:1d:41:e6:fe:2c:87:3d:e1:f1:09:02:0d:fd:
         c1:c4:55:ef:6a:91:6c:72:2d:eb:c6:5e:0f:54:77:fa:1e:67:
         f9:53:7a:a3:98:34:f6:da:3b:f9:3b:ba:41:bc:67:db:7c:46:
         b0:6d:af:3f:cd:ab:03:8e:8c:65:9d:4c:1b:a2:66:e3:71:8d:
         4c:b6:c1:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU0OTAxMTAvBgNVBAUTKEY5NkZBRTI4OEE2NDMwQURDQ0Y5NUUwRUE4OUYwODVC
QjZFODI5RDQwHhcNMjUxMjA0MjIwMTQ2WhcNMjUxMjExMjIwMTQ2WjAYMRYwFAYD
VQQDEw02OTMyMDRjYS1lZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5eg0XSTVVTM2Mv1x6g443p0N05vlyoCSAMuxq2GeRK3T9Jc+DWaBZg8aEHMD
r/x8Xy0K8d2KqHoRVCMcK3lDnuDPxcBcwp9zN9J6OBejM7IHm5H6DgWeEY7q1rIB
0eNRZll/93N6I3WUbiyEbfyt0F/WCOIAL6jm7qQ4ue+cxJ4rHPqiTQa42dtPn7wC
T3Z4dAWI1qrA6JzXeQ7bpJe0ixJCxfIeT9+RwmRWN887S8A+uuhmkKtmi7CW/3Eh
+ZH8xL+rlhGUt+LGR2XntRHUc6iYCqN2uSQprcCn6TUngpMIU51xRuRW52Bk/4VW
Q70yk76Wnl87j+kFzCniOY9nUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3Dcl1V
EQZprRiQTXHkdLRWk4hyMB8GA1UdIwQYMBaAFPlvriiKZDCtzPleDqifCFu26CnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTQ5MC8zMjFGNTkxRTE0
NjIxMUVDOTg2OEMyNDZDNEY5QUUwMi8tVy11S0lwa01LM00tVjRPcUo4SVc3Ym9L
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1XLXVLSXBrTUszTS1WNE9xSjhJVzdib0tkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTQ5MC8zMjFGNTkxRTE0NjIxMUVDOTg2OEMyNDZDNEY5QUUwMi8tVy11S0lwa01L
M00tVjRPcUo4SVc3Ym9LZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+ZI2kF73ysGvtaTebjp/OYRcb7x52jkKT47/lhEjV6FOIbOe8SW0H
IS1otdAr/+PnmQaHtV3FlxAmYOhgxxB/saC/Dw12kBbHsHg9twbMCW2pbq7FyG8o
5BecMo5uu3CFBWvMgvAEC2QBFG473TpPQmgPpiGXg8uMdbv/9puEobBj3jKxbX4l
osn/r9+iFvuHiZlrdC8L8D8dJBklIkOxu2fBVmK2iSI7SpF1sNAwQ1SdfXLc9X0F
3x1B5v4shz3h8QkCDf3BxFXvapFsci3rxl4PVHf6Hmf5U3qjmDT22jv5O7pBvGfb
fEawba8/zasDjoxlnUwbombjcY1MtsG6
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:48 2025 by rpki-client