This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File:                     WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier:          FvFOgjLF0h/vgqt4xMY/JNB5sQyeznay9wVVGAIwYps=
Subject key identifier:   DE:DE:93:A3:F3:64:9C:F0:0A:F2:45:AA:DD:38:E1:3D:B0:43:1F:0D
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number:          05D7
Signing time:             Sat 06 Dec 2025 21:51:14 +0000
Manifest this update:     Sat 06 Dec 2025 21:51:14 +0000
Manifest next update:     Sat 13 Dec 2025 21:51:14 +0000
Files and hashes:         1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: odG2BxqcHnKVJafSnxfL6m+lrUzssEmaCtV3Ek4B25c=)
                          2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: eAEKnlDfmbmvzyOLqZ04+l0qIxLGX9JSF33CVH6hcIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Dec  6 21:51:14 2025 GMT
            Not After : Dec 13 21:51:14 2025 GMT
        Subject: CN=6934a552-25fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:bd:29:f3:5c:5a:37:98:de:aa:06:3e:6c:
                    7b:ae:ed:4e:7e:54:a4:98:a1:0b:10:14:24:20:f9:
                    16:2f:47:71:e7:7a:b5:90:4b:7c:0f:c7:c0:e0:c2:
                    17:4d:6b:22:9a:b6:d4:77:27:95:6b:bb:e6:1b:2f:
                    b3:4b:e2:45:90:75:f3:6e:92:d1:93:13:f7:c4:a4:
                    2d:8c:38:f2:7f:29:ac:75:76:9f:2c:e5:18:5a:ec:
                    1a:40:c6:bf:ec:fa:50:e8:66:b9:8e:52:c2:8e:45:
                    33:5e:ee:b4:78:68:2e:83:6e:95:08:6f:59:4e:5d:
                    54:ad:3d:cf:d0:42:ca:a2:09:b8:f2:5e:79:45:a7:
                    23:a1:d8:6d:6d:09:8f:39:37:5a:a3:d1:2d:eb:bd:
                    d2:9f:11:3b:62:90:b5:58:c3:3b:d4:63:ea:85:bf:
                    d3:5c:1a:04:2a:44:86:a4:fc:ab:b4:a5:dd:b4:da:
                    5c:f1:e9:b7:d1:10:a4:d9:e2:e9:b2:45:97:23:95:
                    a7:89:65:47:3e:d0:94:fb:e0:84:5c:d1:5c:57:17:
                    0a:55:20:61:48:9c:da:59:93:07:ba:e3:d4:75:97:
                    85:f6:46:9d:95:68:82:7b:9e:72:48:dc:87:60:35:
                    74:33:d2:20:10:de:4d:57:29:20:2b:b1:a4:bb:1f:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DE:93:A3:F3:64:9C:F0:0A:F2:45:AA:DD:38:E1:3D:B0:43:1F:0D
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:c5:d3:4f:5b:b8:93:4d:4b:fb:71:b2:55:e3:d7:c7:d5:
         22:a2:1d:4a:47:3b:64:0b:ee:69:aa:45:8e:5f:20:93:93:52:
         34:67:46:bf:a3:d0:17:21:62:4e:8f:f7:ea:46:2d:26:31:f7:
         19:8b:da:2e:94:49:56:a6:4a:69:02:0e:40:00:fc:46:11:30:
         e5:13:48:2b:0c:3b:ba:b0:a3:19:44:9f:c2:fc:18:59:09:81:
         0a:e9:ff:8e:53:85:27:0d:45:9e:84:93:23:d3:e0:7c:1b:35:
         13:40:7d:64:1b:07:82:43:75:c6:5e:10:59:db:8b:58:4a:c1:
         bc:60:9a:25:b4:4a:70:df:25:f6:98:de:13:7d:dc:35:96:d3:
         7a:5a:77:09:f3:09:13:f3:ff:46:6f:d2:df:18:e0:03:9c:94:
         cf:8c:0e:09:a6:9a:14:20:14:35:26:f8:3a:9e:82:64:33:f0:
         2d:e3:cb:65:8f:5a:12:de:b4:fd:82:d7:de:92:7f:17:7e:58:
         7c:78:f3:1a:02:91:d0:fe:24:0d:59:dd:89:0e:1a:6e:39:21:
         73:25:ad:8b:e5:79:3d:be:9a:e7:53:d2:07:d9:d9:f4:dc:96:
         d3:82:ff:52:e9:c1:04:b0:e3:77:27:0c:56:83:8f:60:84:8f:
         07:ba:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:55:45 2025 by rpki-client