This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File:                     wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier:          /f1Tuh+ivgO2UloDokmpK0VKyh1Fy3CkfxFEdgCY5Uw=
Subject key identifier:   47:13:E4:C2:98:4D:D3:2B:8C:C3:AD:AB:9B:19:06:14:E8:D2:67:64
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer:       /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial:       34FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number:          34F1
Signing time:             Sat 06 Dec 2025 14:57:06 +0000
Manifest this update:     Sat 06 Dec 2025 14:57:06 +0000
Manifest next update:     Sat 13 Dec 2025 14:57:06 +0000
Files and hashes:         1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: gYLK6raL2RR1ICCbh65JXofiYRwGKfUxqrUgVf5JSkA=)
                          2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: sb92Yiu1DkaA/Jlw4YPyCeHs7T2hutc7NkpwUwObZxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
                          rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13564 (0x34fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
        Validity
            Not Before: Dec  6 14:57:06 2025 GMT
            Not After : Dec 13 14:57:06 2025 GMT
        Subject: CN=69344442-9bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:e4:9f:dc:79:4f:3a:6c:28:4d:d9:5c:64:
                    b2:41:7e:55:d0:1d:df:29:36:da:73:b0:fa:ff:b2:
                    db:c6:65:b3:7d:f4:63:bd:64:8e:90:21:6a:16:a9:
                    4e:ea:ae:6d:de:1f:2b:46:d1:49:0c:20:f5:2e:49:
                    9f:db:ff:32:18:d2:f3:7d:f6:93:60:45:45:d8:8a:
                    65:ff:71:af:9a:de:7d:2b:0c:a2:af:4c:1d:18:2f:
                    46:e9:b9:b0:ef:83:43:0c:be:b9:da:36:08:48:3d:
                    fa:2b:7a:18:12:b0:24:86:b7:ab:d3:41:77:59:53:
                    e4:13:8e:63:2a:00:9e:f3:74:4d:6d:af:aa:1b:ff:
                    e9:c0:a7:52:53:12:b7:71:ac:29:06:03:e5:48:55:
                    6e:81:9a:ab:89:3f:ad:60:cd:a4:3f:a0:27:3d:b6:
                    6a:7d:15:9a:6a:9d:8b:a9:34:b1:82:75:36:7e:e2:
                    ba:ba:b7:3b:37:ae:3b:a0:2a:c5:e6:79:a8:87:50:
                    31:79:64:d2:c7:76:a5:0a:8a:5c:bd:53:8f:13:52:
                    52:fe:79:05:76:79:e9:c0:b9:bb:4a:68:41:84:18:
                    97:af:11:5b:90:ab:27:79:bf:ad:96:c8:27:df:81:
                    90:ac:c2:b2:4c:0e:14:70:f2:e1:1f:b4:dc:0f:51:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:13:E4:C2:98:4D:D3:2B:8C:C3:AD:AB:9B:19:06:14:E8:D2:67:64
            X509v3 Authority Key Identifier:
                keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:04:8f:b2:14:0f:d3:6e:36:0f:c2:3e:66:31:33:35:24:
         a0:bf:ba:86:c4:7b:7f:fd:f7:ec:10:cf:1e:d3:4d:1c:bf:29:
         b3:9c:9f:bb:aa:e5:97:59:ea:af:cc:e7:a4:c4:01:63:e8:94:
         8d:e3:ee:35:bb:4d:c1:f5:2e:2c:b5:6b:df:fc:09:03:dd:9e:
         63:4a:67:82:9b:94:3c:e3:b5:e7:e9:ce:ba:68:34:88:91:6f:
         ea:1c:b6:83:bb:38:1c:c3:02:c0:7c:cd:cd:4d:97:45:97:4a:
         08:33:44:a0:db:21:38:c1:7b:76:2c:3e:8e:18:58:54:54:f5:
         8e:f9:40:5c:f5:cb:5a:2d:71:3c:6d:2f:aa:39:0e:0f:a9:51:
         a2:c4:9e:29:d0:08:16:49:c9:d7:70:24:3f:3c:8d:64:47:26:
         dc:34:c3:36:b5:e6:c8:69:cf:33:96:ad:6b:f2:91:bf:a9:56:
         bc:e2:d7:7f:41:9f:49:3d:ee:5b:3f:38:66:18:22:44:19:08:
         2f:01:63:d5:44:13:fd:23:49:0b:8b:17:a7:ff:bf:ac:85:9d:
         17:26:7a:9e:35:f5:05:74:e4:08:92:ee:81:a7:a7:8c:e3:ea:
         1b:94:71:12:95:89:1f:dc:ef:ee:9a:54:42:6c:d4:55:be:14:
         fe:24:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:42:26 2025 by rpki-client