This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File:                     WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier:          4iZo/RWDiSwx1Kh4Uw4wGswNtZBXdtsbrDeDUtl2+0M=
Subject key identifier:   F9:5C:96:69:97:EA:04:3B:5D:D1:F6:AC:31:9E:63:23:4B:F9:B2:75
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer:       /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number:          0182
Signing time:             Mon 29 Dec 2025 02:51:48 +0000
Manifest this update:     Mon 29 Dec 2025 02:51:48 +0000
Manifest next update:     Mon 05 Jan 2026 02:51:48 +0000
Files and hashes:         1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: xJ1Xmnp+ncVFJZ52NwYWuyPjuF9X5sMbpdD+SNuGXuk=)
                          2: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: pLOgKyFyMkYkgWZ7IaxS8IlsIuIv5okTjVaTAgIeoac=)
                          3: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: bc2WkbYAbuGAx2Gf2EfnLZLtMVMYcpQMrHnCADXGRJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 02:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
        Validity
            Not Before: Dec 29 02:51:48 2025 GMT
            Not After : Jan  5 02:51:48 2026 GMT
        Subject: CN=6951ecc4-b768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:72:5f:5e:83:17:9b:e2:f2:85:44:c3:be:74:
                    ff:34:57:1f:de:ce:e8:9d:ea:bf:6e:3b:b5:58:86:
                    39:8f:97:67:cc:8a:65:b7:c9:30:f0:52:5f:8c:0e:
                    c7:43:dc:76:90:25:89:98:ac:78:4c:43:c8:5a:d4:
                    06:1e:97:f5:22:76:2a:be:68:31:76:2b:79:65:7e:
                    5a:66:17:83:8c:af:b9:a6:01:33:5f:e6:ec:78:fc:
                    12:cd:50:2b:e3:ae:83:fd:82:82:c3:dc:c6:55:59:
                    09:94:d5:2b:f1:44:63:b0:45:57:d0:bc:f2:2c:91:
                    d4:4a:01:07:6a:71:0d:41:1b:bb:05:10:5e:2f:94:
                    dd:00:2b:ec:6b:ac:fb:09:0d:d4:fc:90:a3:18:c3:
                    13:1b:e6:97:05:45:60:f4:7c:c1:f0:9c:34:e7:c9:
                    f7:3e:78:49:c0:bb:d3:bf:ac:80:e1:a1:a3:27:8f:
                    b4:62:be:1b:22:29:37:e3:41:42:e1:3d:d8:a4:d6:
                    bc:4c:7e:ea:98:42:1d:54:70:55:ce:74:66:a6:81:
                    96:d0:4f:db:cd:43:3b:92:1f:97:f7:26:38:5c:6e:
                    85:8a:25:4a:87:39:10:67:93:2a:f6:0e:1d:75:9f:
                    63:cc:53:e3:bb:1b:2b:33:3e:ad:93:e5:d1:58:5e:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5C:96:69:97:EA:04:3B:5D:D1:F6:AC:31:9E:63:23:4B:F9:B2:75
            X509v3 Authority Key Identifier:
                keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:48:ea:6a:bc:c4:e0:44:8b:a7:c4:98:83:b6:15:22:74:
         94:52:ba:a1:d8:66:b2:1b:35:26:5c:2c:1b:2a:09:dc:f1:ab:
         24:b6:20:73:16:0d:4b:69:2a:05:d3:d4:4a:df:26:d3:2d:63:
         24:64:f0:d7:66:25:1c:1c:13:63:dc:83:a2:d7:ba:65:67:0d:
         01:87:52:db:74:ef:29:03:21:8b:e1:ce:9f:3c:94:2b:c8:58:
         1c:d0:f0:a5:df:37:1c:27:72:6a:41:75:01:19:4f:a8:e5:5e:
         15:63:3c:3b:85:2c:11:70:4d:00:bd:f4:61:34:3b:1c:8d:22:
         ef:40:9b:cb:b5:f8:e8:bb:4a:45:3b:e9:6c:63:45:d4:93:c2:
         1e:d5:7d:00:2d:07:6e:22:28:24:75:06:56:57:b2:53:ef:c5:
         d2:0a:a9:ee:af:c3:64:0e:a6:c3:be:2b:bb:a9:dc:f0:4e:e1:
         67:cb:37:fc:97:b2:8a:df:3e:7a:81:dd:bb:57:9a:bd:5d:95:
         24:81:47:1f:b9:19:dd:1d:6c:01:63:4a:dc:a0:7c:9f:ed:e2:
         bc:98:8d:e8:a3:a9:31:0b:d1:2d:c9:95:d0:3c:3a:52:12:cd:
         ea:d2:4b:8e:9e:19:8a:9c:09:1f:30:54:50:b8:74:56:c9:6e:
         25:3a:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 03:42:19 2025 by rpki-client