This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File:                     WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier:          N4hqo7i+Ah9j1/UtTYq6PRe+EAnA0GhXfxIbX0Hx+M4=
Subject key identifier:   E8:9F:D7:8D:70:B8:87:F0:BF:65:DD:F9:B2:48:57:B0:56:36:A6:79
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer:       /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial:       3577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number:          351A
Signing time:             Sat 20 Dec 2025 14:25:59 +0000
Manifest this update:     Sat 20 Dec 2025 14:25:58 +0000
Manifest next update:     Sat 27 Dec 2025 14:25:58 +0000
Files and hashes:         1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: x6xjPT2jL4/r8GfP6vStew97CXBUOwTn+7z5RTvi1u8=)
                          2: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=)
                          3: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=)
                          4: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: 0G3q5fTwQFZqfpwdr70W2RcZ9RQYxzqD0UwSER0DP5U=)
                          5: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: BAOg63rbaOIys2g97FtFz7H79eFm+GfNyVf99pFuu0Y=)
                          6: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=)
                          7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=)
                          8: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=)
                          9: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=)
                          10: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
                          rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13687 (0x3577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
        Validity
            Not Before: Dec 20 14:25:58 2025 GMT
            Not After : Dec 27 14:25:58 2025 GMT
        Subject: CN=6946b1f7-ec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:83:0b:72:ec:b4:f5:99:a4:e5:67:cb:7d:
                    62:fd:40:51:fe:bc:58:d4:55:8e:e9:ad:2f:82:59:
                    ef:ed:8b:c0:aa:90:0d:41:11:28:ab:09:ec:c1:d4:
                    07:88:8d:84:8c:af:ee:2a:c3:30:3e:2e:e0:bf:b4:
                    23:cf:3d:dc:a3:37:2c:8e:0a:68:c4:6b:68:cb:5a:
                    83:6b:fc:24:51:1d:2e:d6:6f:74:8c:91:1c:00:12:
                    14:86:5f:40:51:7d:aa:dd:ec:19:90:61:7a:a1:ab:
                    f3:ec:8c:4d:b7:26:0e:c0:61:81:7e:c2:33:69:90:
                    29:ca:47:9d:b1:12:06:e0:f4:50:92:e9:fd:54:a5:
                    48:06:2b:af:a3:1a:1c:35:c9:aa:0a:33:26:2e:62:
                    e2:69:40:8e:e7:c5:a0:51:3a:70:cc:f2:09:b7:83:
                    78:10:ec:a0:d6:40:a4:0b:aa:e6:3b:67:b9:b8:92:
                    d4:b0:77:7f:ac:66:0f:fb:7c:49:3c:7e:4a:15:9c:
                    0f:56:df:6d:68:d8:fc:22:ce:cf:ef:8a:fb:ab:20:
                    b6:03:ea:2b:0c:50:a1:f7:d2:52:29:80:41:9e:c9:
                    04:12:37:ae:73:e7:d2:b3:9a:df:60:11:35:85:d6:
                    98:c2:ae:e1:e7:31:87:7f:6a:5f:34:67:50:ca:a4:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:D7:8D:70:B8:87:F0:BF:65:DD:F9:B2:48:57:B0:56:36:A6:79
            X509v3 Authority Key Identifier:
                keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ac:67:82:99:55:c8:d6:56:ef:9c:d1:ec:6c:8c:cd:86:30:
         b0:38:0b:e2:6f:d9:c7:12:05:3c:62:85:41:a3:3f:53:1f:fb:
         d1:bb:0d:6a:60:dd:d1:32:c3:84:ab:a9:fe:ef:0c:48:c9:28:
         be:1f:f7:ac:d1:e3:4e:21:4b:1a:a0:b7:83:cd:93:7f:af:14:
         38:07:dc:fe:53:84:2c:49:65:3d:92:90:a4:d3:00:4b:c6:a7:
         87:20:49:86:6d:df:21:df:a8:44:13:9c:07:9e:6b:15:2d:7a:
         59:29:1c:80:86:b0:4c:93:4d:91:8b:03:95:9c:c8:fa:96:2e:
         bb:7a:6a:f9:7c:7c:3c:44:25:bd:84:b6:db:41:13:92:3e:36:
         98:e6:2e:0f:13:32:d3:cb:a7:23:63:d2:63:bd:31:22:77:0f:
         8b:75:9e:c8:90:71:04:e8:ac:21:9d:fd:99:4c:55:41:ad:94:
         02:19:8d:b7:2c:93:77:52:bc:1a:fe:a6:8a:60:bc:8c:4a:93:
         80:9e:0e:d9:2f:0b:8e:b2:49:35:1a:53:c9:59:6e:e1:c8:a7:
         7b:ce:53:4c:cd:5d:ce:22:89:d2:35:d3:1c:fc:a4:e4:9b:53:
         41:62:b5:3a:12:cd:b4:a7:91:b1:03:dd:c6:ad:bf:bf:d1:b6:
         92:67:b0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:56:34 2025 by rpki-client