This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
File:                     Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft (raw, json)
Hash identifier:          n9vkSxgm2EcL4EgcVLw76uNqs+q10CMuQu3l/R/Yn6Q=
Subject key identifier:   5B:4C:55:71:31:AE:B9:45:F6:C4:32:42:6F:35:60:A2:70:E9:0A:43
Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73
Certificate issuer:       /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
Manifest number:          06F1
Signing time:             Tue 30 Dec 2025 21:15:31 +0000
Manifest this update:     Tue 30 Dec 2025 21:15:30 +0000
Manifest next update:     Tue 06 Jan 2026 21:15:30 +0000
Files and hashes:         1: Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl (hash: 67PHBc0q/sAX9hxlA+33ClZZH/1SHvSZgL5Scqzd1Sc=)
                          2: E2B81154741B11EB83EC7A62C4F9AE02.roa (hash: SfDbv1ydo+vznwdchu/VzafMX/NegNN92VChKBq/R3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 21:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
        Validity
            Not Before: Dec 30 21:15:30 2025 GMT
            Not After : Jan  6 21:15:30 2026 GMT
        Subject: CN=695440f3-3a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:9a:08:39:7e:6a:3b:28:e2:38:2a:d7:11:
                    12:80:da:de:e7:48:35:c7:97:88:35:32:68:f2:8d:
                    b8:ba:ef:95:e0:5f:0b:06:cd:22:b1:1d:9b:cb:ff:
                    c1:b5:dd:84:8b:b0:5d:1e:a9:3a:44:b2:78:ec:89:
                    d6:3f:b4:5d:9d:81:d8:f3:e7:e1:cf:16:46:1b:f2:
                    74:74:e8:d0:a5:7f:a5:25:83:81:e5:0d:54:46:c8:
                    32:67:f6:1d:94:70:87:a0:c1:e7:f6:58:d9:b7:e6:
                    96:5f:48:29:2b:3a:c1:1c:4c:1e:fe:8a:aa:e4:d9:
                    d6:38:f9:7a:86:86:b7:aa:d5:1c:4c:f4:6d:7a:4c:
                    d2:e4:c7:ad:54:43:fd:41:93:ae:19:99:0b:97:64:
                    29:e4:5f:de:86:79:73:f2:22:2b:4c:a3:c7:27:75:
                    4a:08:ad:ac:23:05:3e:6e:0d:3c:b2:28:7b:71:c8:
                    34:b1:f0:5d:5d:b4:29:72:34:24:dd:45:4e:9f:aa:
                    33:08:e5:29:86:af:1a:c7:1e:cf:f7:ce:e0:4e:e6:
                    87:75:03:f1:01:1b:67:ca:38:f3:ae:14:3a:6c:5e:
                    64:21:99:73:aa:98:e7:38:d3:45:d0:3b:32:8a:b6:
                    ca:3b:86:5c:6a:c4:56:f1:b8:da:8a:40:d5:d2:7b:
                    d4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4C:55:71:31:AE:B9:45:F6:C4:32:42:6F:35:60:A2:70:E9:0A:43
            X509v3 Authority Key Identifier:
                keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:06:3a:aa:7e:d3:35:d4:e2:24:1a:49:1b:c6:a3:db:6a:4d:
         84:1f:2b:d2:0a:19:7f:44:55:80:67:45:c6:07:ac:58:59:7b:
         c4:69:b3:d1:13:f4:68:b7:64:89:53:b0:64:91:fa:33:89:e6:
         b2:e0:53:79:0d:0c:fd:d7:72:72:36:36:46:ff:7d:fd:78:04:
         18:78:0b:7d:32:71:50:d2:c7:53:7f:97:07:03:4b:f1:28:e4:
         4e:7f:14:38:0e:26:c7:44:ff:78:1e:d4:5a:53:56:91:30:9a:
         9e:57:28:30:52:ea:b7:0e:53:ca:5c:c2:be:09:30:f4:e9:f0:
         33:64:61:b4:f7:d0:70:e9:f4:df:09:91:2a:bf:d6:19:a4:69:
         ea:fd:7d:c5:94:1f:f0:3e:93:6e:90:b5:46:98:96:9b:8d:e9:
         98:09:14:a5:f7:fc:6e:e7:80:a4:76:e6:fa:62:93:5b:e7:36:
         83:7b:9f:ea:a1:29:c9:14:ac:6e:ac:95:37:f6:6f:94:e1:07:
         72:da:f1:49:5c:72:2d:96:c5:b4:bb:06:61:3d:0d:80:82:30:
         24:e0:ce:43:54:cf:ed:22:5b:cc:52:be:8f:a7:cf:d0:25:e5:
         5f:8b:c2:65:2f:31:5c:08:5b:c2:9b:73:08:5b:18:61:ab:62:
         65:c7:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 02:02:01 2025 by rpki-client