This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
File:                     W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json)
Hash identifier:          X5n9dyi9OxeQKD+4cUnpRio5m8EAkkFeG8l//zIsyUU=
Subject key identifier:   F2:AC:8D:1E:D7:1D:F4:53:BA:C9:63:0E:87:2C:13:8F:28:E5:90:B0
Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
Certificate issuer:       /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
Manifest number:          017C
Signing time:             Fri 05 Dec 2025 02:01:46 +0000
Manifest this update:     Fri 05 Dec 2025 02:01:46 +0000
Manifest next update:     Fri 12 Dec 2025 02:01:46 +0000
Files and hashes:         1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: 62rp00AaJlpEtujQ0TDki8T39PqRg5QuaRfC5gCyCAQ=)
                          2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: bPMBzJr4bTR5Bhy4yYB9L04MYvX8u/mjmsw/KhMBj+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
                          rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
        Validity
            Not Before: Dec  5 02:01:46 2025 GMT
            Not After : Dec 12 02:01:46 2025 GMT
        Subject: CN=69323d0a-f9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:2c:92:56:3f:44:b9:ac:f0:d7:b9:fd:87:
                    e3:49:ef:2d:1b:8f:6b:6d:31:71:cd:bd:11:32:bd:
                    e1:eb:e1:ff:9c:af:06:1d:8a:77:14:d4:1f:92:ae:
                    d9:a9:0e:77:a4:7b:56:1c:47:9c:46:7f:60:d3:8a:
                    15:84:6a:fc:1a:06:fa:c6:47:09:bd:8f:eb:b4:b2:
                    9d:df:86:a9:dc:68:b0:d9:a0:1d:e4:ed:bc:c2:4f:
                    ec:70:ea:7a:e5:d0:ce:87:f1:97:ae:d0:7f:21:ff:
                    c3:6f:e7:a1:52:32:13:81:b1:70:3b:cb:dc:f4:66:
                    9f:20:ff:c4:a0:58:97:e1:d3:7b:d5:74:92:f3:34:
                    3a:ea:00:35:96:04:a7:4f:9d:f7:0a:65:ff:10:ac:
                    f3:eb:3d:82:6e:c9:89:29:d2:e2:a6:78:fc:4c:ee:
                    e2:c5:33:e2:39:63:76:20:87:6f:af:db:ab:7c:6b:
                    09:4a:6a:aa:01:c2:2c:73:d8:4f:31:2e:0a:86:8b:
                    6d:69:c8:e6:1b:be:3a:b6:e8:25:d1:a9:d1:41:f7:
                    b2:53:b5:e2:56:a6:4e:dd:be:be:a6:1b:14:ae:92:
                    b6:35:96:ba:a9:0e:bf:2b:55:b3:00:a8:df:24:e3:
                    ad:34:87:db:5e:2b:86:c6:71:54:2e:6a:e7:18:69:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AC:8D:1E:D7:1D:F4:53:BA:C9:63:0E:87:2C:13:8F:28:E5:90:B0
            X509v3 Authority Key Identifier:
                keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:9e:f7:d0:72:36:d3:4c:e1:64:31:8e:cf:02:fa:78:69:
         31:b1:41:70:cd:8d:2e:12:bd:9b:c9:b9:02:91:ed:b7:24:ed:
         b8:46:d1:b4:3d:17:c8:68:00:9a:94:de:63:ab:4b:22:00:8b:
         9d:75:ee:22:aa:bf:50:65:d9:2c:4c:13:d4:d2:60:10:19:53:
         2a:fe:3d:81:d2:1f:b9:f0:0e:93:07:a9:85:f0:af:f3:f9:84:
         f9:cb:80:9c:b7:5a:2a:a5:39:7c:97:16:e0:0a:c7:f7:70:6a:
         17:a5:14:c1:c6:65:7a:d3:14:62:2e:11:0c:f3:8e:0d:1b:de:
         03:c1:72:2e:29:56:97:b8:0a:8d:fe:2e:8f:d7:05:dd:9d:35:
         0d:4d:c4:e6:6c:76:b7:4c:0f:c8:96:8c:9d:06:ca:07:1a:78:
         fa:d6:d7:c1:3d:f0:ff:4a:9c:1d:0d:a0:43:51:2c:23:83:e7:
         47:ab:94:26:45:e8:19:3e:eb:da:24:5a:f7:52:f5:6c:f0:59:
         0d:27:66:ac:2e:6e:05:ed:86:f8:1d:22:c4:23:3c:4a:3a:eb:
         e0:55:14:cc:86:16:f9:dc:57:7f:bf:89:02:e4:23:6c:f0:b9:
         25:07:29:01:9c:5c:c2:29:1b:b8:a1:2d:8d:72:c9:fb:d1:74:
         29:85:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:11:16 2025 by rpki-client