This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File:                     wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier:          8XiaT6ZxAcrkpPgVfdTy+ylQYWHoTx69nhJU8gUgyXA=
Subject key identifier:   FC:EA:37:97:E9:EE:47:55:93:5A:48:02:F1:22:21:DB:33:5B:EE:96
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer:       /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number:          C5
Signing time:             Fri 19 Dec 2025 04:58:25 +0000
Manifest this update:     Fri 19 Dec 2025 04:58:25 +0000
Manifest next update:     Fri 26 Dec 2025 04:58:25 +0000
Files and hashes:         1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: 9bgtKWVLLoWyXzjWXmxvvf2t20uiGwv0giSjMV0f7Zk=)
                          2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
                          rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
        Validity
            Not Before: Dec 19 04:58:25 2025 GMT
            Not After : Dec 26 04:58:25 2025 GMT
        Subject: CN=6944db71-e344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:9a:3f:48:53:f4:9b:81:7b:7c:dc:f9:ba:
                    87:37:ba:ba:6d:58:a8:a2:1f:aa:89:28:23:34:bf:
                    97:36:c6:46:62:43:a0:6f:6d:03:e4:03:ba:7e:17:
                    32:3d:6d:56:e2:b7:0b:cf:42:23:8b:5f:df:b8:e9:
                    a5:d9:fd:a5:ac:1c:bf:d5:85:a5:56:48:36:ff:f0:
                    f7:b0:c8:40:77:d2:a0:61:52:54:51:e5:a5:9e:86:
                    d0:86:aa:8c:30:b7:a0:77:54:9e:1c:55:00:1b:7f:
                    6a:24:f4:a6:7e:1e:b6:a0:b8:cf:19:30:ab:1a:4a:
                    e4:91:45:27:ad:80:80:d5:50:d4:b5:c0:a8:4e:30:
                    18:fe:c9:a3:05:58:17:e7:03:16:9a:64:40:a0:0c:
                    af:e9:fa:e4:d2:d6:1f:b8:1b:6a:ff:0b:5e:84:97:
                    7c:f1:70:43:91:d9:50:a7:8a:50:f5:41:ee:1b:46:
                    65:52:ee:12:08:19:ec:a3:2c:c9:a6:02:40:94:e4:
                    85:7c:f0:99:0e:b5:22:f1:0b:56:cb:82:23:75:32:
                    b9:7d:93:38:76:6b:3b:c5:73:1c:e1:ba:c6:cb:c0:
                    45:ae:fa:65:e1:50:73:fd:21:55:56:ab:0c:81:8d:
                    cd:8b:05:2a:0c:68:05:f4:a6:c8:b6:9d:c7:6c:56:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EA:37:97:E9:EE:47:55:93:5A:48:02:F1:22:21:DB:33:5B:EE:96
            X509v3 Authority Key Identifier:
                keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:54:5a:ef:3f:81:dc:6b:ba:6f:fe:00:6e:44:44:05:ca:a0:
         e2:41:26:51:d9:37:c3:df:89:29:fa:9c:2d:89:70:34:ce:f2:
         32:52:31:02:2e:09:41:9e:26:ff:d6:64:78:8b:77:20:a3:1e:
         05:df:4e:1d:b0:13:f0:cc:88:73:79:2b:d9:af:4f:03:55:a6:
         77:95:a8:ae:e7:07:7e:2d:88:1e:c0:01:99:f2:7b:2f:bf:bf:
         6f:34:9a:d5:a1:be:32:97:20:66:25:94:02:23:97:b8:f2:c3:
         45:59:68:82:a8:81:f1:dc:14:63:2d:91:d9:8d:28:34:42:e3:
         b6:94:ae:62:03:5d:e1:cb:29:25:9a:3c:8f:b8:71:0e:12:83:
         f6:40:3f:ad:35:b7:04:69:94:37:68:1e:0b:cb:e1:83:88:03:
         a6:d5:97:13:c5:96:15:b7:d2:c7:7b:de:59:79:79:88:9d:3e:
         93:69:2b:3b:31:45:cd:5a:8c:b6:57:3a:a1:df:71:4b:58:ff:
         f4:98:79:f9:53:8a:f4:8d:b9:cb:1a:14:20:e4:1e:1a:e2:75:
         77:79:34:75:e8:a4:6e:14:eb:ae:f6:64:6c:34:70:3e:67:43:
         ad:eb:43:b1:64:1c:e6:21:2e:70:a8:5e:ca:23:e7:73:d7:df:
         e8:25:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:23 2025 by rpki-client