This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
File:                     p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json)
Hash identifier:          SYf4ONecNg39lpgylG+e0owgG/nWWHma4GDGMLAabUA=
Subject key identifier:   FF:87:94:CD:26:96:EF:11:E0:28:53:AB:FF:78:6A:DB:99:3D:DF:22
Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF
Certificate issuer:       /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF
Certificate serial:       1A4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
Manifest number:          1A3E
Signing time:             Thu 04 Dec 2025 16:15:14 +0000
Manifest this update:     Thu 04 Dec 2025 16:15:14 +0000
Manifest next update:     Thu 11 Dec 2025 16:15:14 +0000
Files and hashes:         1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: 1dbN0lQHIOfqJ4OxIhPbCoZTO8LXVUa2j2cvpJUpzJM=)
                          2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: chUIzbNJwC8TKgIYKXoVKKtNLNEU3qxTe43tCLXzLSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl
                          rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6735 (0x1a4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF
        Validity
            Not Before: Dec  4 16:15:14 2025 GMT
            Not After : Dec 11 16:15:14 2025 GMT
        Subject: CN=6931b392-9050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:32:85:cf:45:ec:52:f2:3a:33:6b:79:88:
                    aa:cf:35:be:23:bf:f8:45:82:f1:58:f2:43:cc:29:
                    95:15:ac:54:d4:83:7c:26:a5:bd:e7:2e:19:30:05:
                    30:0d:90:49:f4:f8:ff:21:2e:73:c3:30:b6:73:4e:
                    3a:dc:0e:2a:e2:a7:c3:b9:44:a7:e8:76:e2:3a:83:
                    7b:5c:da:48:de:ba:3a:f3:6f:74:94:c5:df:0a:df:
                    cc:b7:dc:e0:b9:cf:e2:5b:be:24:a7:f1:8c:d5:21:
                    76:1e:b0:01:35:4e:22:2a:68:d1:ab:c1:15:3e:c0:
                    7a:f4:0f:d3:c8:57:25:dd:9c:74:c5:71:0d:93:d9:
                    cf:98:68:76:da:51:1c:41:67:c2:52:3a:eb:66:5a:
                    fb:80:a4:18:00:d0:3a:a5:dd:86:e2:fd:31:4e:ab:
                    fb:83:a0:70:de:90:63:6e:3f:0c:8d:d0:39:aa:f9:
                    45:6d:3f:b7:3e:fb:67:c1:88:d4:84:2c:72:73:59:
                    4c:50:bd:4a:f6:3c:8b:fc:49:2c:7a:5f:2c:5f:25:
                    ae:1f:99:69:b4:0d:c1:15:24:25:43:63:c6:f4:f9:
                    44:65:9a:19:13:e2:45:7c:bf:e8:63:fb:dd:a8:42:
                    5e:e4:cb:bb:a3:f5:3a:c8:0a:9f:88:05:d5:6e:4f:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:87:94:CD:26:96:EF:11:E0:28:53:AB:FF:78:6A:DB:99:3D:DF:22
            X509v3 Authority Key Identifier:
                keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a3:24:b3:6b:5a:8c:b1:ae:46:69:c0:13:8a:c4:88:e3:02:
         7e:49:33:e4:8e:f9:77:eb:27:58:67:69:df:8b:7b:67:b4:e4:
         55:dd:7a:5e:4d:54:1b:e6:23:a2:38:49:b0:0e:d3:53:a1:c8:
         52:9d:63:d7:d2:64:c2:9b:be:7b:fe:de:89:4e:65:b8:11:5b:
         52:fd:e2:f5:17:63:11:72:66:54:87:b9:b7:ae:5b:a8:17:a9:
         a4:6d:f2:46:9e:2f:b0:b9:69:38:65:8a:8e:77:99:2a:b1:29:
         62:de:a9:c8:5f:65:7c:2c:67:54:a3:1d:00:d2:3f:1f:9b:da:
         ad:a2:4f:fc:ec:e0:c7:82:a2:65:00:73:4c:15:6a:95:27:c4:
         36:6f:ba:f0:33:0e:bf:fd:ab:f8:9c:54:da:5c:4f:1e:bf:c9:
         07:6c:e5:04:3c:32:c4:6e:fe:f1:2b:2c:80:e8:39:a6:99:30:
         45:f6:c5:d7:6f:c7:81:d1:d3:58:89:83:6a:61:1c:ed:6c:ec:
         3d:d2:35:aa:f6:a3:d9:dd:d1:b9:d9:50:36:f0:7d:30:a5:3b:
         16:cc:8a:6e:ea:21:3d:91:b9:98:17:d3:3a:56:5d:8c:47:6d:
         dd:29:64:8e:3c:f0:c4:07:2a:76:d6:10:3e:7f:65:a9:d8:82:
         ab:d3:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:18:45 2025 by rpki-client