This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
File:                     wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json)
Hash identifier:          jyIEiURuLELZZvvUparJg4zX27hixgDbhzFwwTEGlQM=
Subject key identifier:   9A:D2:F7:E7:F7:1E:99:B1:92:72:A7:33:AC:CB:25:61:54:6C:38:2F
Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
Certificate issuer:       /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
Manifest number:          C2
Signing time:             Fri 19 Dec 2025 04:02:34 +0000
Manifest this update:     Fri 19 Dec 2025 04:02:34 +0000
Manifest next update:     Fri 26 Dec 2025 04:02:34 +0000
Files and hashes:         1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: UBiCs6R+GU93RVyL5Ahd/e340mYxg1WWE4CIhXJZX3s=)
                          2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: aY02E3irzGto2CDBM82Hws7+3Xp8gIBSyGbYsCwSjsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
        Validity
            Not Before: Dec 19 04:02:34 2025 GMT
            Not After : Dec 26 04:02:34 2025 GMT
        Subject: CN=6944ce5a-7fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:f2:ce:c8:46:6e:5b:8b:41:e6:24:58:86:
                    72:e7:69:f6:b2:17:4f:80:76:96:61:83:2c:85:e1:
                    9c:f3:b3:bc:33:b4:2d:e7:e5:14:e5:18:7e:b8:4b:
                    68:de:bd:e8:a4:c0:bc:dd:f9:45:a3:ff:96:1c:8f:
                    f0:e2:57:f2:04:1c:e2:9c:c6:42:47:c3:a9:ed:ad:
                    0f:33:9f:d4:35:1b:df:17:87:d4:30:70:6c:a3:2d:
                    33:f1:cc:30:3c:d3:3f:ba:c3:e5:46:f8:4c:8f:96:
                    05:c4:2d:f0:82:d5:48:4b:b3:8c:a0:46:59:da:9e:
                    fd:54:2e:7d:cb:bd:37:be:46:75:b9:82:e6:06:f4:
                    51:14:ba:01:65:08:0d:99:30:20:f8:4e:d3:ab:54:
                    e3:7f:d1:fc:8a:34:40:e7:c9:54:25:cd:ef:36:e5:
                    26:84:bf:1d:b0:68:ef:09:7b:72:18:a5:54:0a:d7:
                    ce:11:81:90:b6:07:77:5f:42:19:ec:13:81:8e:18:
                    66:1e:6e:9f:07:31:6a:8a:bd:9c:bf:3b:d6:85:0c:
                    42:57:c2:2e:9c:55:82:20:bc:02:2e:13:75:e1:81:
                    0f:11:92:4c:be:e6:3d:83:c8:f6:cf:84:07:50:4e:
                    3a:8c:55:f8:3b:87:68:14:75:9a:c8:3d:c7:c4:f4:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D2:F7:E7:F7:1E:99:B1:92:72:A7:33:AC:CB:25:61:54:6C:38:2F
            X509v3 Authority Key Identifier:
                keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:e9:3a:bf:25:90:2d:be:70:fc:1b:b8:78:f5:73:70:2c:
         9c:7c:f0:f1:c5:8e:dc:51:8d:59:cf:5f:15:90:bb:66:38:a0:
         82:2d:2f:04:dd:a2:4d:6a:41:74:bb:f7:27:59:70:7c:21:4b:
         23:23:16:a1:2b:28:d5:a0:bc:fe:27:98:9f:f8:85:fd:24:58:
         32:0d:36:de:e5:60:df:96:3a:c9:df:35:79:b7:64:3e:90:57:
         6d:24:4e:32:e7:72:03:9c:a2:56:81:73:df:cb:b0:53:52:1f:
         ed:19:6b:a0:85:d3:51:b4:a3:7c:28:6d:d4:00:be:53:2b:af:
         ca:af:7e:2b:1f:c3:a9:62:f9:4a:57:10:ce:81:e7:f0:29:fe:
         57:b6:69:af:17:b8:25:0a:c9:c9:8b:d9:99:82:4e:d5:d7:5c:
         85:66:27:f1:27:ee:29:75:bb:b0:8e:9d:71:f7:c0:ba:b3:96:
         43:59:8e:05:bf:b0:39:3f:22:7a:d2:35:44:1e:b9:02:d8:63:
         12:d7:f3:4e:0c:4d:ed:dd:7b:21:f5:95:b6:cd:a8:3c:3b:aa:
         b0:db:94:82:1a:5f:ed:5e:68:29:e7:cf:de:57:7f:32:1c:d4:
         27:c0:d9:9d:20:88:8a:bf:ca:48:9a:93:f6:62:3b:8f:c3:f1:
         c0:0d:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:06 2025 by rpki-client