This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          9EP0FfDuOSgf+mRuyIKoqBz54+AG8k7PDmkEGOkJnmo=
Subject key identifier:   D4:BA:76:01:24:69:36:13:4B:E7:27:9B:60:2B:10:33:91:24:BE:D6
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          06F3
Signing time:             Thu 04 Dec 2025 20:50:29 +0000
Manifest this update:     Thu 04 Dec 2025 20:50:29 +0000
Manifest next update:     Thu 11 Dec 2025 20:50:29 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: 32Ivv9lcU88GtXKojR/yZW5I5ljTsu/jAGoCwdX94lk=)
                          2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: gkjZFv8+a1pInAhzOPTg4sqJj5qO4+TAvcYmCjz+nlg=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: vTpHqcdtapOqI/Gsr+oA78H11F3thCsrtmSVIOkFq0M=)
                          4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: tEC8bz6FGj0t4tths2MmaU0LJkI5GmyVxPNnRw1U1sM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Dec  4 20:50:29 2025 GMT
            Not After : Dec 11 20:50:29 2025 GMT
        Subject: CN=6931f415-2b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:12:db:69:7e:38:c8:31:85:57:f2:b2:e2:
                    30:76:dd:37:9e:73:46:95:f6:10:08:21:26:0e:35:
                    23:e2:a1:2e:8d:ee:49:d1:07:c6:f8:28:22:02:91:
                    ec:fb:61:53:fb:bc:13:d6:cf:ce:7d:41:07:62:b2:
                    3f:cb:e9:22:5e:d1:df:c1:42:94:18:df:7c:6d:c9:
                    07:f5:b4:4b:24:b4:6a:39:1b:28:d7:e0:0a:4d:5f:
                    35:dc:82:34:78:e7:bb:25:ba:64:cc:12:11:b6:2c:
                    b1:e6:e2:33:10:90:be:c2:d9:2a:3c:09:00:ee:6a:
                    d7:72:d8:e0:70:28:10:1a:a4:52:58:e1:1b:15:07:
                    30:fd:db:6d:59:88:5f:08:58:a0:ae:43:99:a5:d3:
                    c9:43:dd:dd:6b:ee:31:1b:a2:19:82:e1:62:bf:1b:
                    fd:49:e5:b2:24:6f:eb:e5:aa:e8:fd:d7:e4:6b:f5:
                    3f:f2:6f:61:0a:b2:12:57:1f:e8:58:53:33:bd:8a:
                    c0:6f:5c:02:a5:ff:88:80:8a:69:53:07:2b:63:3d:
                    fa:ea:27:57:9d:55:bc:67:74:67:8f:a1:a2:b9:43:
                    ea:81:de:0a:66:7f:90:96:2e:2a:b6:d9:1b:8c:81:
                    cf:ea:81:a3:c5:01:44:0c:10:fb:4d:13:d0:be:6c:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BA:76:01:24:69:36:13:4B:E7:27:9B:60:2B:10:33:91:24:BE:D6
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7d:69:1e:a7:2e:98:ab:b7:7b:39:9a:61:e3:58:28:6b:46:
         af:1d:89:c3:ed:2e:55:f7:c0:92:65:98:8b:ac:ac:53:e6:ae:
         f1:f6:e7:03:c7:d1:64:00:20:c6:0f:00:87:0c:d3:d8:20:40:
         20:b0:c5:0a:17:c3:63:d7:bd:da:b3:46:00:a9:ef:b2:0f:50:
         d7:38:30:f9:71:6c:93:5e:ef:f1:a3:b6:82:c8:da:99:36:98:
         c9:63:ab:52:e2:2a:f5:85:96:dc:29:42:ea:1a:37:79:84:bd:
         5c:f5:c6:7d:15:85:07:25:af:51:da:6a:7c:b9:c5:f8:04:c7:
         71:d7:4d:e9:6f:d2:09:cd:b1:ad:f5:86:53:77:7e:4d:60:9a:
         d7:22:3c:1b:c5:36:1f:14:d4:07:15:5c:79:81:27:d7:b3:f0:
         57:be:af:b9:5d:19:87:77:b6:a4:e7:d5:ef:38:2e:ba:4c:57:
         5b:ca:64:c5:56:0d:28:13:ca:87:cd:d3:c4:70:c6:e0:91:2e:
         93:02:b6:7c:64:b7:14:e5:9a:c5:e9:41:d9:91:8f:03:96:14:
         5a:2b:16:fd:64:7c:d3:4a:90:23:b4:49:ec:c3:3e:d8:7f:9b:
         bb:66:fe:03:07:d8:a3:a8:c2:ff:6e:37:1d:b8:0f:b5:4e:f7:
         e5:63:b8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:16 2025 by rpki-client