This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          L0PfG+g68Q5EtmnQHYtrQsR1W7lf/K5eA9bD096h17Q=
Subject key identifier:   5F:3D:79:AB:6F:7F:9E:D4:6A:12:28:09:B2:41:1B:E6:D6:E6:D8:6B
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          96
Signing time:             Fri 19 Dec 2025 05:28:25 +0000
Manifest this update:     Fri 19 Dec 2025 05:28:25 +0000
Manifest next update:     Fri 26 Dec 2025 05:28:25 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: fj4/ZoReBrcTY/wX0VZaTKzEF7Mp/ol9rpJAdXMXwPw=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: IcKmF13UvgbjR5e+pq74azw6DFKPoTGhWhM8VYVh+JY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Dec 19 05:28:25 2025 GMT
            Not After : Dec 26 05:28:25 2025 GMT
        Subject: CN=6944e279-b1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:40:e4:ed:61:14:d4:ff:c3:a3:20:49:7c:
                    a6:9c:47:50:5f:9d:9f:19:36:32:04:0c:30:0b:55:
                    62:b5:b3:af:2a:fb:21:68:34:50:a9:96:a2:54:a6:
                    13:7b:7f:49:0e:1b:a1:ba:73:44:48:e2:0b:78:62:
                    51:47:bb:f1:b8:30:5b:eb:fb:94:60:21:38:72:1c:
                    24:99:a9:68:1f:39:98:f2:bb:7f:6d:79:4a:20:48:
                    9a:03:1b:96:35:c2:03:fa:4e:54:ff:a8:9f:a1:7e:
                    bc:37:a5:d0:7b:3b:d5:d6:93:97:9e:eb:af:bd:d7:
                    0f:d0:c0:35:81:78:02:2e:7c:c3:ba:b2:17:eb:3b:
                    1e:7d:a7:a4:53:32:7e:86:98:73:9e:80:f9:40:e7:
                    d6:03:41:ed:fd:bb:d9:12:5e:ee:2b:e0:aa:24:27:
                    fb:71:0c:68:21:06:f3:d4:8a:93:e2:90:6c:4e:da:
                    c1:e9:1d:1f:96:e3:14:03:d1:82:60:eb:11:90:f0:
                    36:6b:f2:a1:42:fb:89:83:9d:61:ef:b9:05:d4:ae:
                    b2:f1:f4:8a:89:be:21:9e:59:1f:61:d1:d3:61:ba:
                    88:03:2d:7e:d2:23:10:55:d8:61:88:72:05:59:49:
                    03:bc:ef:2f:ec:77:2b:b1:7e:85:d2:05:b7:20:33:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:79:AB:6F:7F:9E:D4:6A:12:28:09:B2:41:1B:E6:D6:E6:D8:6B
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:44:94:bf:de:47:a4:63:25:3d:b5:b0:9b:9d:f5:14:66:06:
         ab:38:5b:12:07:6f:1b:4a:75:91:75:68:6d:93:a1:bc:ff:1e:
         e5:82:f7:78:cf:f4:98:ae:d2:9f:91:d4:b5:98:37:49:fe:83:
         ec:80:ce:14:54:53:4c:0d:ea:38:d0:c4:26:27:35:84:de:4a:
         2f:da:43:8c:83:68:bb:fe:9c:50:7c:f2:e6:be:c7:19:03:bf:
         75:d1:83:91:34:52:92:47:fa:65:5a:66:81:6d:87:6a:d1:0a:
         42:02:1e:10:f4:1b:57:62:33:50:a3:00:98:7f:12:15:ae:b5:
         da:42:b9:0f:50:0c:f6:04:23:7f:d1:a2:ad:a7:e0:c0:20:1b:
         01:fa:2b:56:f4:05:02:1c:9c:c1:90:99:d4:70:d7:11:b7:78:
         ed:04:54:cc:11:d8:77:93:75:4f:07:59:90:1d:c8:89:ab:ad:
         40:47:9e:d5:2f:55:a2:e2:82:da:26:c6:51:a8:67:4a:b4:aa:
         65:f3:09:13:c2:2a:46:09:14:35:0d:6d:e5:e3:e4:db:07:e9:
         cd:5b:ca:cc:6f:34:92:7f:cf:68:75:1a:2d:c8:60:23:2b:04:
         2f:52:0e:a3:9b:8e:30:67:b3:5f:c8:36:10:f6:ad:35:6b:26:
         4f:5d:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:05:45 2025 by rpki-client