This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File:                     Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier:          7OtgF5vh70enfXq5xxYJz+KTmLSPb/cx/8JQqjVNjAs=
Subject key identifier:   7D:17:83:1C:3E:76:F8:43:D3:A5:78:52:90:FF:DB:BD:82:09:AB:56
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       10CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number:          106F
Signing time:             Sat 20 Dec 2025 17:08:06 +0000
Manifest this update:     Sat 20 Dec 2025 17:08:05 +0000
Manifest next update:     Sat 27 Dec 2025 17:08:05 +0000
Files and hashes:         1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: 8dZn08VLu69TxpPsnA9cc9UFnhF/jTxsPI9s3jBGbz4=)
                          2: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: MolD5bumMcf6jScQ4RC9hIXMaBQfB4E5sD8Ir6nVXrw=)
                          3: CC320712ACE011EAB535D034C4F9AE02.roa (hash: zMOHMtYvfaZCDF6LwsEB8Dwbb4ZwRXv/YDIZ3yaOB+U=)
                          4: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: q9NbetQ6RooEPqs7Z6/euz24xz0gLtevk3mcKB1IVZM=)
                          5: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: 0pajmOLzTfRxXN+jwLdgr/HPuMFyL3nbTNRtA04jmts=)
                          6: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: DMn88YNhtANf7oJNpEm/YcL69wX9rnoBHpOTc6fAMAs=)
                          7: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: zMozM34kF4fkjssWZFKOWwbNxC8ctpO0n/S6xmrGp2U=)
                          8: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: FCS4+GL7rUUdkFrPp6f659LL++EemtPAULuJfkO/esc=)
                          9: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: hOh5ZVZ+qFHQ5JWAOKeMOjW8ikSLX180HH4vgbhOg/c=)
                          10: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: 9E3TgDbI6+GnKMrsNMcyKe+QTJ6ByggMBzDm7xSwD4c=)
                          11: 9D164714168511EAB282BB44C4F9AE02.roa (hash: UC9oT442f5r3Ad6bt4fyBW43wCVQtsSkEeag4T2t06g=)
                          12: 884A03F4447111EC83674068C4F9AE02.roa (hash: s7v3d/BTSW73Xtn7csGrhdpLigXtwYTrO1GpRuSnwkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4298 (0x10ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Dec 20 17:08:05 2025 GMT
            Not After : Dec 27 17:08:05 2025 GMT
        Subject: CN=6946d7f6-5bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:7f:06:3a:ac:ff:a9:96:09:e8:d3:d7:f7:
                    b0:66:a0:06:b6:2e:48:de:ae:e5:f4:b1:e8:2c:04:
                    d5:7d:89:2e:99:fa:78:26:f6:cf:72:3f:6a:92:b5:
                    89:66:a7:7e:66:92:27:99:1a:64:da:7a:db:05:05:
                    f8:4b:82:6d:2f:8f:ea:c7:f8:83:24:19:1e:fc:64:
                    a7:20:e2:e9:cc:ee:bc:84:5e:88:1f:32:bf:7b:a1:
                    42:87:02:cf:28:eb:b3:56:cb:a7:cf:ce:8c:19:b4:
                    1a:b5:06:eb:15:b6:07:c9:4f:53:cf:c9:cc:c0:e5:
                    e9:e7:bd:31:64:1b:1f:ba:fc:7b:73:a9:91:0b:70:
                    db:d7:0d:73:80:13:b4:5a:dc:f4:fc:f5:ff:66:c3:
                    e8:f7:06:72:8d:42:d6:0c:5c:74:fb:d0:95:e3:a3:
                    ae:4f:1e:be:06:f6:c0:f8:84:b3:fa:a4:11:ac:66:
                    1b:e4:d6:13:3c:8b:64:4b:50:62:9c:cb:dd:0b:d2:
                    22:9e:55:0b:b1:6b:b6:cd:78:5d:91:59:2a:86:12:
                    1f:ed:8b:3e:ad:b9:14:fd:7c:d7:ed:c2:9b:7b:71:
                    26:92:29:21:5a:15:ca:1f:2b:cf:4d:c3:1d:8c:35:
                    ec:a7:46:ad:43:b4:0b:9c:9a:d2:fc:c0:17:ea:ac:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:17:83:1C:3E:76:F8:43:D3:A5:78:52:90:FF:DB:BD:82:09:AB:56
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7c:58:18:f8:3a:f8:30:56:06:46:52:69:3c:a3:f9:3a:5d:
         50:5a:e7:5d:72:44:dd:e1:21:46:73:e1:5b:e2:46:23:bc:6f:
         4e:be:68:74:76:a7:0d:7d:5b:59:08:eb:f8:21:71:1c:00:2e:
         d6:91:f9:a3:16:73:5b:9d:e9:ce:53:6e:63:b5:cb:c5:98:68:
         fe:08:e0:89:78:b3:70:4f:12:49:5b:5e:0f:25:3d:b9:bf:ba:
         28:78:90:37:2d:84:7a:54:2c:34:8f:6b:b6:0f:42:87:9e:c0:
         f7:f8:fb:67:2c:07:c8:b8:1d:72:2d:a0:c8:47:13:da:b4:e1:
         41:b5:3c:b2:89:1c:80:38:8d:b8:0f:b5:d0:df:44:38:34:60:
         a7:55:1f:79:9a:1b:96:db:4c:d8:e8:01:5e:48:dd:be:5e:e6:
         ad:3c:1d:26:7c:ae:8a:57:c1:11:ee:1b:6f:68:a8:23:cc:c2:
         82:6b:84:59:90:a9:59:03:ee:c3:33:2f:f8:2a:42:65:be:4c:
         1c:16:a7:48:4f:ef:d2:81:83:e4:0e:f2:90:d4:08:36:a3:ac:
         f6:69:98:2b:d1:c8:20:a8:bf:07:b6:a7:ec:e8:ab:95:43:45:
         7c:3f:25:f1:3f:48:f9:92:35:06:5c:36:61:6d:de:09:1a:35:
         30:ed:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:57:39 2025 by rpki-client