This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
File:                     W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json)
Hash identifier:          UqKXbbyxTGxB1VAtzDTkjAvhbnG9HzOp0Dbskd7KFuQ=
Subject key identifier:   AE:7B:23:41:EA:64:95:79:AA:08:58:DC:D3:E8:CA:62:5E:9C:63:F5
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Certificate issuer:       /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial:       0946
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
Manifest number:          0939
Signing time:             Mon 22 Dec 2025 19:35:49 +0000
Manifest this update:     Mon 22 Dec 2025 19:35:49 +0000
Manifest next update:     Mon 29 Dec 2025 19:35:49 +0000
Files and hashes:         1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: kkC2QFnBjBCbR+neglZWw2bLloQ4ANTWzBeIUyryk60=)
                          2: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=)
                          3: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
                          rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
        Validity
            Not Before: Dec 22 19:35:49 2025 GMT
            Not After : Dec 29 19:35:49 2025 GMT
        Subject: CN=69499d95-b6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:f8:d3:46:5d:2b:b8:a0:d3:4f:98:09:12:
                    8e:fd:04:95:f0:2d:f5:d0:bb:88:99:9b:49:36:fd:
                    a7:6a:05:af:da:f5:bd:aa:bb:0f:d0:c8:a9:6f:ee:
                    8c:6e:ea:67:55:d4:17:c5:5b:bb:3d:4a:fb:9a:b3:
                    a0:51:d9:1d:fc:c5:53:00:2f:b3:ae:27:84:23:58:
                    1f:94:26:50:4a:7b:40:a3:8b:4c:50:d2:e0:f1:23:
                    78:37:c8:3b:ac:bc:2f:a1:a4:10:99:5d:9e:9e:b7:
                    26:c0:df:46:4c:b4:b7:84:4a:ee:d9:f4:a3:1e:a1:
                    51:08:18:5c:15:80:0d:2a:ab:70:69:39:0b:e7:1b:
                    63:c3:69:d7:c6:79:2b:c1:37:12:4a:ee:6b:99:1d:
                    9f:04:2b:ed:87:4b:ee:5b:2f:d6:00:c6:3f:2c:87:
                    34:f3:52:25:58:51:c9:ba:3b:02:de:bb:7b:d9:98:
                    ed:0f:b3:14:8e:5f:68:b4:d8:46:e7:cd:90:42:be:
                    58:cf:c3:0e:0d:53:6e:cb:fb:e2:44:9e:45:e3:cd:
                    83:a2:d5:87:a8:cb:75:b7:30:5f:ab:af:bf:e2:2a:
                    13:99:67:dd:61:ec:18:72:50:f6:77:74:00:d2:83:
                    c5:bd:4a:dc:e6:10:f1:20:52:50:b3:49:73:73:8f:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:23:41:EA:64:95:79:AA:08:58:DC:D3:E8:CA:62:5E:9C:63:F5
            X509v3 Authority Key Identifier:
                keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:a1:f9:7d:c4:9f:33:ec:95:29:17:87:93:73:f4:94:37:
         b2:7a:d2:45:0e:3c:64:79:7e:88:84:d1:1e:ab:2f:26:ce:0c:
         d8:7b:3a:26:06:75:64:7f:b5:14:a3:24:87:62:65:4a:cf:9e:
         02:b7:62:8c:7e:58:40:6c:9d:dc:31:3a:f3:fe:a6:8a:8e:ae:
         b1:7c:df:2e:ab:4a:60:6c:41:f7:0b:62:44:f2:39:c1:a0:e3:
         1a:92:ea:60:1f:46:c8:95:92:59:42:60:a3:08:45:21:c6:65:
         f0:36:e8:80:93:c9:c4:ff:89:5e:d0:2a:c8:df:6d:8e:6d:60:
         79:91:b3:b9:1b:6b:fc:7a:31:d2:31:31:00:14:a9:39:44:20:
         12:51:c5:10:5f:a1:63:bc:9a:21:44:9e:9a:a2:f6:55:51:d3:
         1a:bf:e8:84:82:cc:87:8a:c2:b2:90:9c:7e:2a:8f:3c:59:cb:
         68:91:88:0e:8e:47:25:7d:d4:cf:48:36:1b:4d:e3:3a:29:50:
         5b:87:4b:1c:82:8c:80:4a:be:df:ba:72:87:57:b0:b4:5c:57:
         00:9b:bd:34:96:6e:06:c9:c3:62:50:a0:56:09:41:a7:49:62:
         61:81:28:da:f4:c6:91:41:2b:ba:a9:74:ca:0e:a6:c0:d7:c1:
         66:c5:01:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE
MDIwRkNBOEEwHhcNMjUxMjIyMTkzNTQ5WhcNMjUxMjI5MTkzNTQ5WjAYMRYwFAYD
VQQDDA02OTQ5OWQ5NS1iNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4D7400ZdK7ig00+YCRKO/QSV8C310LuImZtJNv2nagWv2vW9qrsP0Mipb+6M
bupnVdQXxVu7PUr7mrOgUdkd/MVTAC+zrieEI1gflCZQSntAo4tMUNLg8SN4N8g7
rLwvoaQQmV2enrcmwN9GTLS3hEru2fSjHqFRCBhcFYANKqtwaTkL5xtjw2nXxnkr
wTcSSu5rmR2fBCvth0vuWy/WAMY/LIc081IlWFHJujsC3rt72ZjtD7MUjl9otNhG
582QQr5Yz8MODVNuy/viRJ5F482DotWHqMt1tzBfq6+/4ioTmWfdYewYclD2d3QA
0oPFvUrc5hDxIFJQs0lzc4/c5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK57I0Hq
ZJV5qghY3NPoymJenGP1MB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx
Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTgwRS8wMEU5MjUwNEIxQ0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZa
Z1g0c2JWdk90OXJRSVB5b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3/6H5fcSfM+yVKReHk3P0lDeyetJFDjxkeX6IhNEeqy8mzgzYezom
BnVkf7UUoySHYmVKz54Ct2KMflhAbJ3cMTrz/qaKjq6xfN8uq0pgbEH3C2JE8jnB
oOMakupgH0bIlZJZQmCjCEUhxmXwNuiAk8nE/4le0CrI322ObWB5kbO5G2v8ejHS
MTEAFKk5RCASUcUQX6FjvJohRJ6aovZVUdMav+iEgsyHisKykJx+Ko88WctokYgO
jkclfdTPSDYbTeM6KVBbh0scgoyASr7funKHV7C0XFcAm700lm4GycNiUKBWCUGn
SWJhgSja9MaRQSu6qXTKDqbA18FmxQFj
-----END CERTIFICATE-----
Generated at Wed Dec 24 13:40:06 2025 by rpki-client