This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File:                     W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier:          G3a7NOLsok/wKJwttdB+hWiMaaDMunKXcKzLdic0oeQ=
Subject key identifier:   4D:20:04:01:C5:4A:B2:0D:FE:EF:39:00:19:A4:42:8B:2F:FB:9E:46
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer:       /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number:          0386
Signing time:             Fri 19 Dec 2025 00:03:48 +0000
Manifest this update:     Fri 19 Dec 2025 00:03:47 +0000
Manifest next update:     Fri 26 Dec 2025 00:03:47 +0000
Files and hashes:         1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: B1bV5P/4YMyM4c3hX4xG1jRLlkHW8tvecyCUgF5qlgk=)
                          2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: gHbb1DedGEVNYDe8gPkrOnV+opTyWHpDa3aEA0RGNJI=)
                          3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: ERhWo0W4P0/i1i0Btr7k8IVeQA2SJMiw/31p7bzmBlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Validity
            Not Before: Dec 19 00:03:47 2025 GMT
            Not After : Dec 26 00:03:47 2025 GMT
        Subject: CN=69449664-f36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:f9:40:10:b0:35:a3:9e:9a:aa:d5:5b:86:
                    63:02:dc:89:f9:b1:9e:c0:2c:4b:3c:2e:da:92:08:
                    8a:f6:4e:16:79:e6:96:bc:71:26:2b:d7:eb:36:83:
                    0e:e6:00:52:d9:2e:41:bc:0d:b6:4f:fe:db:f0:68:
                    6b:b3:4e:f4:d6:02:df:09:db:b1:a5:db:40:f8:d8:
                    42:a1:bb:5e:b4:cd:03:2c:9b:89:2f:57:0c:ac:ac:
                    35:7f:d6:81:44:e9:97:6a:81:dc:3f:28:ac:b3:cd:
                    6e:67:16:c2:26:80:4b:25:d1:59:4a:a2:bb:39:bc:
                    5a:f6:2b:36:74:f7:68:1d:fe:55:7c:5d:c2:e3:15:
                    4d:2d:9e:2d:cf:00:c3:74:bc:b7:aa:d2:b9:7e:f8:
                    7a:bf:42:d0:af:02:c9:6f:3b:3c:29:23:e7:f5:27:
                    7e:ad:db:67:ea:7e:88:12:7b:ba:b2:ad:f2:9f:b3:
                    0e:50:94:2d:bf:9a:77:78:6e:db:11:80:9b:78:83:
                    4a:a3:0d:f9:0f:38:de:76:87:15:3f:95:c3:b3:65:
                    8d:a0:05:cf:0b:17:47:b2:ce:04:0f:33:3f:85:4c:
                    2b:c8:27:23:d0:32:77:21:df:cd:5e:76:e6:42:fa:
                    3e:82:e3:ca:79:0d:58:56:19:39:e6:a8:20:fa:b3:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:20:04:01:C5:4A:B2:0D:FE:EF:39:00:19:A4:42:8B:2F:FB:9E:46
            X509v3 Authority Key Identifier:
                keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:05:b3:40:71:95:69:ad:55:04:3e:80:c1:50:cc:80:63:
         c6:b9:98:0e:90:c7:78:a8:8b:d3:8a:3c:af:8c:4b:5e:cb:ae:
         c4:f9:d4:22:f9:f7:96:cf:28:ec:f4:e5:2a:93:da:e6:69:8d:
         d9:1b:e6:ba:c1:5c:7b:cc:cc:87:d5:20:73:89:29:76:c0:c3:
         1a:83:4d:8a:48:32:58:8b:b2:4d:da:9f:88:4b:ce:75:d2:52:
         57:22:a9:87:c2:a8:0c:18:3c:f7:2c:32:1c:c3:0b:2e:f9:84:
         7c:db:64:bc:35:6d:18:41:5e:01:cb:ff:2a:3b:90:27:a7:80:
         09:61:85:55:6b:e6:0e:f4:a5:88:f1:02:16:16:41:26:ee:d5:
         2a:11:0e:7c:91:4e:36:ef:0c:3e:4a:32:b2:29:3d:be:3b:b8:
         6e:07:13:da:8b:63:3d:4a:73:98:1b:58:71:f9:cb:76:eb:1a:
         c6:72:5a:f6:d8:f8:32:99:b7:af:63:08:05:ce:ef:7c:7a:bf:
         6a:f3:74:3c:24:b6:9c:60:01:2d:c2:49:4f:97:fb:4a:7b:7a:
         af:b5:41:7e:db:87:be:a6:ff:92:e5:a1:eb:1e:fc:03:62:8d:
         58:88:2c:2b:b3:e9:27:e1:81:ef:f1:03:7f:b6:8e:a1:88:91:
         ad:0a:20:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF
ODg1RTQ4OUQwHhcNMjUxMjE5MDAwMzQ3WhcNMjUxMjI2MDAwMzQ3WjAYMRYwFAYD
VQQDDA02OTQ0OTY2NC1mMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0+75QBCwNaOemqrVW4ZjAtyJ+bGewCxLPC7akgiK9k4WeeaWvHEmK9frNoMO
5gBS2S5BvA22T/7b8Ghrs0701gLfCduxpdtA+NhCobtetM0DLJuJL1cMrKw1f9aB
ROmXaoHcPyiss81uZxbCJoBLJdFZSqK7Obxa9is2dPdoHf5VfF3C4xVNLZ4tzwDD
dLy3qtK5fvh6v0LQrwLJbzs8KSPn9Sd+rdtn6n6IEnu6sq3yn7MOUJQtv5p3eG7b
EYCbeINKow35DzjedocVP5XDs2WNoAXPCxdHss4EDzM/hUwryCcj0DJ3Id/NXnbm
Qvo+guPKeQ1YVhk55qgg+rMUzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0gBAHF
SrIN/u85ABmkQosv+55GMB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND
MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4
QkdMR1BGMENhZlhvaGVTSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPZQWzQHGVaa1VBD6AwVDMgGPGuZgOkMd4qIvTijyvjEtey67E+dQi
+feWzyjs9OUqk9rmaY3ZG+a6wVx7zMyH1SBziSl2wMMag02KSDJYi7JN2p+IS851
0lJXIqmHwqgMGDz3LDIcwwsu+YR822S8NW0YQV4By/8qO5Anp4AJYYVVa+YO9KWI
8QIWFkEm7tUqEQ58kU427ww+SjKyKT2+O7huBxPai2M9SnOYG1hx+ct26xrGclr2
2PgymbevYwgFzu98er9q83Q8JLacYAEtwklPl/tKe3qvtUF+24e+pv+S5aHrHvwD
Yo1YiCwrs+kn4YHv8QN/to6hiJGtCiBQ
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:21 2025 by rpki-client