This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
File:                     wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json)
Hash identifier:          apyvpasTNjBmfIPA3jcfilnZEEQmXKcT7Pyp7mXcvJU=
Subject key identifier:   82:96:15:BD:BD:B5:00:EA:E3:11:13:C9:34:CD:5A:87:65:A8:BD:1B
Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8
Certificate issuer:       /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8
Certificate serial:       1001
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
Manifest number:          0FEF
Signing time:             Tue 30 Dec 2025 17:12:55 +0000
Manifest this update:     Tue 30 Dec 2025 17:12:54 +0000
Manifest next update:     Tue 06 Jan 2026 17:12:54 +0000
Files and hashes:         1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: WABsEpxS3vh20WFDhpkLImjOeGHThN5LUyZNmqvZ25w=)
                          2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl
                          rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 17:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4097 (0x1001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8
        Validity
            Not Before: Dec 30 17:12:54 2025 GMT
            Not After : Jan  6 17:12:54 2026 GMT
        Subject: CN=69540816-d8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:fe:27:eb:a6:38:94:77:38:c1:a1:13:8a:
                    1c:99:34:dd:ae:95:e0:69:80:36:a0:bb:e2:ac:0a:
                    11:cc:79:5c:c6:4d:91:34:ee:fa:e9:2a:9e:c0:09:
                    07:97:d9:b9:32:e1:5c:ee:40:4a:4a:0b:29:8d:f1:
                    9c:06:10:c5:4a:84:20:50:e6:e5:87:a3:c1:96:93:
                    e0:0f:50:e4:c6:db:d3:eb:f2:4e:a7:e0:ab:9b:f6:
                    a9:77:33:61:3e:47:d6:4e:84:6c:df:b6:03:a2:30:
                    fc:4a:49:ec:b4:0f:39:c4:cc:62:0d:d2:a1:59:af:
                    77:b5:cb:5d:b9:e7:af:e1:76:8f:72:7f:bf:5d:56:
                    4d:d3:af:79:94:e1:b7:f0:d3:26:7b:2d:db:d3:7c:
                    d9:9c:9b:3a:4c:18:c1:7d:c4:c5:bc:72:6e:f8:f1:
                    ad:2d:36:e5:f7:74:d5:01:b7:fc:f2:21:c5:da:67:
                    f4:97:2f:71:12:df:d3:f4:1d:63:76:2c:69:7a:b4:
                    44:e5:b7:15:e6:46:fc:88:22:6e:7e:97:ab:64:23:
                    49:3b:92:ef:80:44:68:84:74:f8:d5:1e:bc:54:ef:
                    ab:b7:65:c9:80:6e:59:34:64:e5:8f:ef:5b:ef:8e:
                    db:b8:34:5c:f0:a5:ed:9a:22:ba:f7:b0:6e:cc:95:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:96:15:BD:BD:B5:00:EA:E3:11:13:C9:34:CD:5A:87:65:A8:BD:1B
            X509v3 Authority Key Identifier:
                keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:24:8c:d8:11:30:87:0d:85:3b:2a:ef:62:4b:b0:c9:73:
         da:33:54:3f:67:d7:7c:7f:ae:ec:7e:3c:c5:74:b0:12:80:18:
         2f:ed:c9:f4:f8:5a:8d:d7:be:e2:37:00:7a:5b:2d:27:1c:90:
         99:ce:a2:67:1a:a1:95:93:b4:fc:74:09:b6:62:15:7b:3d:94:
         e3:e8:55:f4:cd:83:4b:e8:2d:ca:d0:04:62:f1:18:a4:62:fc:
         ec:70:63:bd:e0:ee:fe:ce:2d:75:77:c2:a3:f2:42:85:34:42:
         5d:84:26:5e:d4:4d:6e:0d:72:8e:1b:3e:12:6f:b2:1f:35:60:
         d5:27:b0:7d:83:17:f4:af:d9:d5:db:0d:06:59:a7:7c:ce:e8:
         13:5e:91:be:10:a7:aa:cd:d5:17:1f:b8:72:cd:e8:eb:f7:e4:
         c0:0b:7f:37:82:fd:97:97:04:72:4a:83:f3:67:85:e0:79:32:
         17:83:ac:24:69:3b:5a:67:79:51:53:23:a4:66:2e:91:a2:e1:
         6c:81:d9:86:b6:98:7d:42:e1:78:44:8e:99:5e:4b:61:c2:ad:
         ab:ca:fd:a0:86:9c:6e:31:48:cb:08:5c:7b:93:ca:c5:8b:09:
         7b:94:69:bc:0a:e7:d8:42:f5:3e:d3:85:5c:5e:bf:47:1f:29:
         5f:de:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 04:18:36 2025 by rpki-client