This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
File:                     wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json)
Hash identifier:          vANEZ6UTInYeAo7r7ZXpRfNDSVm+1D85mKvZFlpoXgQ=
Subject key identifier:   BB:50:C2:EF:97:BA:13:F9:4A:DD:DD:AD:A6:4B:C0:51:A7:29:A0:50
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
Manifest number:          0198
Signing time:             Mon 29 Dec 2025 02:36:47 +0000
Manifest this update:     Mon 29 Dec 2025 02:36:46 +0000
Manifest next update:     Mon 05 Jan 2026 02:36:46 +0000
Files and hashes:         1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: fc66gSS0Y+00dt834s8hZhEs3npihQZAbQ0GwPpICsI=)
                          2: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: 4PWxSJvGPsYEjGtgHYM8obqb8f7X6eyOT+IKt9t0/2Q=)
                          3: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: c3SWUfV7Pzswi2wVxw1lSd2ayx+ZUQtxdR0BtT91QSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 02:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Dec 29 02:36:46 2025 GMT
            Not After : Jan  5 02:36:46 2026 GMT
        Subject: CN=6951e93f-b22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:95:2e:8c:3c:15:58:a2:4a:65:ed:d2:3e:
                    fd:2c:87:19:e7:36:41:61:4d:0e:bb:4d:b2:e5:0d:
                    19:79:ad:bb:52:9c:59:6d:be:5f:68:12:fc:15:e9:
                    29:a9:ee:ab:3d:d7:91:9d:34:ad:79:31:f1:75:1b:
                    6f:07:52:b5:e2:32:32:a7:13:6c:43:ae:30:92:25:
                    c9:87:fb:11:dd:4c:2c:1a:ab:26:62:07:62:07:18:
                    20:7c:60:dd:a1:94:aa:89:81:25:70:ed:5b:f1:a7:
                    7d:a6:d2:ec:88:0a:4d:ae:f2:58:40:e1:a0:58:b2:
                    61:7a:95:45:7e:6f:42:d3:36:89:e4:a0:f3:65:12:
                    db:c1:0c:0b:1b:ff:c9:ca:92:d1:8e:f7:0f:11:62:
                    dc:04:fa:f0:97:db:d1:0e:3e:80:4b:96:e8:6a:9b:
                    0d:68:6f:7b:6a:18:d9:fb:5d:9a:c6:d2:8c:58:5f:
                    5e:d0:9e:e9:90:c2:c1:c4:da:df:92:5f:4c:27:bd:
                    5c:6b:af:d6:5f:83:e3:50:3c:46:20:9e:a3:ba:92:
                    a4:da:0f:21:87:c0:99:f4:9a:36:67:52:c1:04:3e:
                    33:48:62:e5:b4:8d:4d:19:1b:bf:ef:b2:bf:4c:d8:
                    dc:6b:09:55:66:a5:f0:32:9b:6a:34:e0:9b:1f:35:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:50:C2:EF:97:BA:13:F9:4A:DD:DD:AD:A6:4B:C0:51:A7:29:A0:50
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:25:13:ff:18:d1:15:d6:6a:2c:62:7f:bf:d1:31:b6:01:
         c1:b8:a5:2e:3f:96:1d:71:34:43:5d:ab:6a:bb:f8:87:05:d4:
         64:6d:92:2f:21:af:a3:20:6c:9a:66:f4:e9:ae:50:e8:54:4d:
         9b:0d:81:89:f4:dc:35:b9:9d:14:6d:87:ac:3d:e8:e7:75:56:
         57:c5:8d:e3:1b:28:39:53:5e:28:31:39:5a:7e:66:e8:48:50:
         72:6e:86:56:b7:e7:09:d8:df:e3:f1:86:4d:0e:21:6e:25:07:
         30:0a:2a:63:71:32:d1:18:a4:d5:94:8b:6a:5e:71:40:2a:c4:
         4c:ea:82:dd:cb:fd:7c:f9:e8:3f:62:91:1b:11:a6:ae:70:52:
         f2:b8:03:76:8a:0e:1e:cc:45:e3:4e:81:66:9d:6a:42:cb:33:
         aa:60:01:68:f2:a0:45:8c:e9:ca:69:14:04:99:bb:6a:f9:68:
         1b:16:3e:4d:78:3d:87:24:69:82:36:28:65:26:01:dd:4f:d7:
         c2:f2:90:3a:fa:6e:ec:ba:01:72:56:64:15:b4:31:bf:8b:8f:
         30:19:3f:ba:2d:43:13:c9:65:40:8e:22:75:a6:ba:12:d3:0b:
         8d:f6:b2:95:18:7e:af:75:4e:f5:87:a0:f8:4e:ed:f9:c3:67:
         56:29:3f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 09:05:15 2025 by rpki-client