This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
File:                     W6misTDnBTYhO9nUaJ_nvVTwrSM.mft (raw, json)
Hash identifier:          7uSjD4LMA+dDr6vq5KAC9vp9N5szboLaKxB4CXnMp8c=
Subject key identifier:   30:CD:86:9B:FF:9E:00:B2:26:31:98:89:AA:12:0C:E8:DE:ED:7F:A9
Authority key identifier: 5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23
Certificate issuer:       /CN=A918BF70/serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23
Certificate serial:       0C33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
Manifest number:          0C2C
Signing time:             Thu 18 Dec 2025 18:26:46 +0000
Manifest this update:     Thu 18 Dec 2025 18:26:46 +0000
Manifest next update:     Thu 25 Dec 2025 18:26:46 +0000
Files and hashes:         1: W6misTDnBTYhO9nUaJ_nvVTwrSM.crl (hash: 2GOw2pBpphPBmnZaW2sKXn15Tr/eQCJ4IK17xHqhgUU=)
                          2: 8D720AC81D9211EA88894911C4F9AE02.roa (hash: LKiowhMkXMq5qf1lyBz6FA1D1I55qwfvYCjP01R78bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl
                          rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3123 (0xc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BF70, serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23
        Validity
            Not Before: Dec 18 18:26:46 2025 GMT
            Not After : Dec 25 18:26:46 2025 GMT
        Subject: CN=69444766-3695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:d6:b9:a9:07:9a:2c:72:bb:f5:d5:71:ec:
                    3c:a1:6f:3e:e4:46:bc:01:6e:7f:7b:1e:0a:c9:c5:
                    a4:0b:2a:08:1e:c9:de:9a:f3:96:a3:67:b4:3a:14:
                    06:04:7e:53:c3:8d:ca:f3:09:8b:3b:f4:9d:d9:82:
                    f6:8f:36:ab:c2:fe:f3:99:40:cd:5d:da:df:9d:54:
                    b5:24:99:5e:b0:d5:fb:38:55:9c:1f:b6:8d:5c:df:
                    1f:71:51:fe:1b:4e:b9:a9:52:06:b0:ac:10:67:44:
                    fe:83:66:07:5c:22:df:58:36:a9:e9:bd:53:8a:1a:
                    27:90:75:b6:55:f5:61:16:03:02:c0:b0:69:4b:ee:
                    6e:c8:71:8c:77:26:40:7a:b2:ff:b9:ca:9b:fc:35:
                    c1:a2:97:b6:1e:2a:8e:a1:fc:f9:fa:74:a2:e6:c7:
                    5d:8e:9a:77:4f:9a:d1:ec:b5:1f:e2:4a:94:f2:22:
                    e0:67:11:e2:28:6b:56:29:30:5e:56:91:07:db:87:
                    38:c3:4b:c7:80:55:31:b0:fa:18:dd:ea:eb:28:72:
                    71:22:ff:9e:f6:95:f3:f0:77:83:ad:dc:80:a3:f9:
                    52:5d:5b:20:4e:69:ee:67:c6:44:fa:da:59:67:ba:
                    44:94:df:fb:cb:88:c3:c2:15:8e:3d:18:f3:29:57:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:86:9B:FF:9E:00:B2:26:31:98:89:AA:12:0C:E8:DE:ED:7F:A9
            X509v3 Authority Key Identifier:
                keyid:5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:c3:2c:13:95:75:b6:12:ec:6a:24:a0:4b:b6:35:86:e1:
         cb:8c:03:e9:b0:28:91:0c:d4:02:e4:8c:1b:f6:e1:8e:47:a3:
         00:94:37:06:8a:ea:77:f9:33:a1:67:19:b6:73:7c:bc:99:d5:
         2b:fe:e6:b0:ed:9e:f3:74:10:41:30:e3:19:e2:06:65:af:01:
         4f:74:dc:c7:75:c0:25:2d:0d:74:30:71:4e:0b:d7:62:8e:dc:
         32:e7:fb:df:83:36:40:cb:38:e0:02:da:33:77:5b:8e:e9:02:
         5f:77:a3:db:12:92:fd:f8:e6:f3:59:91:e1:8b:01:1e:f6:9c:
         d1:38:a8:72:40:7b:1d:e0:d6:43:69:d0:22:71:ac:bb:7d:f6:
         0a:1f:59:12:f3:4f:c2:36:12:7e:65:1b:34:a5:cf:c0:4d:97:
         f0:7b:55:8d:41:ad:88:36:48:ea:69:e4:d6:f5:e1:72:53:6c:
         8b:de:1c:62:e4:ba:3d:12:4e:b5:15:c6:06:86:76:db:5f:49:
         e4:1d:65:1f:7a:db:98:d6:d2:68:31:e2:d6:02:30:42:9b:c7:
         b1:96:a0:f4:75:6c:72:25:81:9d:6c:ee:59:18:ca:d0:ca:ee:
         30:2f:41:9c:1d:de:e2:a6:ee:4f:6e:59:9d:e6:f2:2f:8e:d4:
         5c:c6:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:08 2025 by rpki-client