This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
File:                     wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json)
Hash identifier:          jVUlMVSAjd1VD9fjYPw1kAKMtfrQGfaGU6hw7sKoFWg=
Subject key identifier:   BE:8F:CD:DC:0E:A4:79:33:86:22:10:9A:8D:26:CF:1A:E5:6E:53:2B
Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62
Certificate issuer:       /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
Manifest number:          01E1
Signing time:             Fri 19 Dec 2025 01:54:42 +0000
Manifest this update:     Fri 19 Dec 2025 01:54:42 +0000
Manifest next update:     Fri 26 Dec 2025 01:54:42 +0000
Files and hashes:         1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: faZTmAI0RkoIskyFeNoX5S8n6V5PbtWS1eV1YI9Dz9w=)
                          2: 5490308C994111F0B9129240C4F9AE02.roa (hash: 7VZTIxZSQj/Rmne9/hQcwng+7WARdPxgfJp0d/1fXL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
        Validity
            Not Before: Dec 19 01:54:42 2025 GMT
            Not After : Dec 26 01:54:42 2025 GMT
        Subject: CN=6944b062-b6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:9e:51:7b:49:b1:b9:a9:b0:70:ed:f0:8b:
                    82:83:ce:b9:2d:cd:fe:2f:08:ec:ac:3f:81:b1:20:
                    23:ce:cd:7c:89:d4:4e:52:e3:62:2e:b5:4c:d5:c0:
                    0e:f5:d6:6a:d6:e0:6a:80:a2:bd:3f:22:b6:d0:60:
                    e1:25:77:d4:e1:1b:f6:e7:95:6b:89:00:8b:36:74:
                    23:8e:c8:6a:b7:9e:65:8b:df:7f:ca:8d:55:e9:09:
                    aa:c3:70:11:a3:4f:e9:f0:2f:ce:74:85:c2:ad:34:
                    8f:37:01:a0:39:66:0a:2f:04:dd:46:fe:12:df:e5:
                    ea:15:26:fa:4b:2f:d9:5e:a8:1b:2b:fa:6f:6e:58:
                    b3:1f:08:c7:1c:90:c0:ce:98:8b:50:eb:da:17:da:
                    79:32:34:9a:43:28:d7:e8:35:94:10:94:7d:83:0d:
                    7e:72:1f:ea:c9:e8:94:5c:95:a6:e4:b2:1e:68:f4:
                    fa:92:48:c6:9c:d6:7e:08:2e:4b:a0:fd:10:49:5e:
                    81:a3:f2:e8:4f:5e:55:a0:94:aa:60:54:ad:88:0d:
                    51:75:33:f8:b2:13:fc:7e:0a:b1:3a:62:2d:ce:62:
                    ee:96:14:af:93:85:db:80:f3:d5:5a:d0:cf:07:54:
                    e1:82:9d:3a:e0:3d:62:0c:db:14:71:1c:4d:9b:06:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8F:CD:DC:0E:A4:79:33:86:22:10:9A:8D:26:CF:1A:E5:6E:53:2B
            X509v3 Authority Key Identifier:
                keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c5:17:7e:1e:9a:1e:99:7d:cb:60:36:72:52:b5:4c:be:55:
         13:6e:f5:de:59:29:6a:45:e3:b3:a9:80:b8:54:c9:66:0b:8f:
         a2:46:61:2d:39:f9:8e:27:1e:ce:e9:e3:88:86:b9:64:6b:d2:
         d2:7b:b4:b6:87:f0:8a:a1:ce:4d:be:20:6a:ab:bb:b6:e2:3f:
         15:cd:db:91:1b:ab:c1:89:8a:80:a9:f3:b6:65:09:c0:48:0a:
         3c:01:c3:34:f2:2b:73:59:3c:fa:71:26:82:cb:aa:6a:fc:85:
         c2:2f:49:9e:5e:d5:b9:10:1d:45:ac:07:3d:65:a3:73:9f:2c:
         b7:a7:c9:4c:f8:16:8b:dd:e6:e7:c9:0b:c3:c0:54:8a:5f:7e:
         1a:26:da:57:f4:3f:e4:69:68:40:ef:1c:9f:e9:f0:cb:b8:c4:
         d2:29:07:33:06:ef:48:1a:da:d8:ce:38:ce:63:63:34:07:e1:
         b7:d6:2e:60:f9:e7:06:19:d3:56:a5:2d:87:2f:8c:15:8a:bc:
         0a:58:49:a6:f4:3f:81:f3:48:cd:1a:32:74:00:5f:bd:01:bf:
         9d:ad:67:0d:15:e3:41:e8:9b:e7:11:b5:47:cc:3e:65:06:86:
         60:cf:07:9b:39:9e:b2:b1:1a:1a:03:ee:4c:50:5c:5a:22:6a:
         57:72:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:44:27 2025 by rpki-client