This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
File:                     wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json)
Hash identifier:          P1Q/Pe8lFpuquDhkrM1T+XQi2U1WPjHIhFx/RDxEdiU=
Subject key identifier:   83:1E:BF:98:12:65:5D:15:AD:54:3E:19:A7:8D:70:D4:E4:94:2C:8B
Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
Certificate issuer:       /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Certificate serial:       07FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
Manifest number:          07F4
Signing time:             Thu 18 Dec 2025 20:34:10 +0000
Manifest this update:     Thu 18 Dec 2025 20:34:09 +0000
Manifest next update:     Thu 25 Dec 2025 20:34:09 +0000
Files and hashes:         1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: vTYV1gu5qkx4EXHagIkkJQu2aWx/9eRQVfPtkgAFDM4=)
                          2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: FR2j5cdA1il7bWue4siZvyTa/nS4sn/xHWVg4a7OgZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl
                          rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
        Validity
            Not Before: Dec 18 20:34:09 2025 GMT
            Not After : Dec 25 20:34:09 2025 GMT
        Subject: CN=69446542-9da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:d4:5d:19:54:9a:db:5c:12:3d:a1:38:8b:
                    80:43:ee:39:b7:4a:64:86:83:97:97:71:ed:98:bd:
                    c0:42:e1:4f:80:20:7c:cd:2f:2b:ea:3d:2a:c3:ff:
                    31:68:de:63:d0:a8:3b:1a:6d:7a:cd:a5:a0:fd:46:
                    1e:be:a9:e2:05:f6:18:4c:2c:d4:f1:b4:6b:af:eb:
                    88:ff:f8:77:e8:04:42:64:ed:d4:4b:03:c4:a2:cf:
                    e4:c7:0a:ce:b8:0c:69:e6:72:e3:91:a5:38:81:25:
                    ab:bc:38:8a:66:60:5a:44:22:46:86:4d:fc:1f:25:
                    98:06:54:86:33:4f:7c:4a:0a:52:d6:71:f3:85:da:
                    40:26:13:e7:78:1f:af:1b:8a:74:25:02:01:1d:f7:
                    f5:36:3b:33:73:5a:b7:f6:47:21:ca:0d:7f:b2:c9:
                    d0:dc:a5:ff:b9:de:b6:3f:6b:5b:3f:4f:a2:6f:70:
                    8c:a9:90:6a:ab:72:eb:9f:91:07:8e:c0:46:3a:cd:
                    10:47:86:0a:cd:f4:58:88:da:4b:e8:dd:fb:38:ee:
                    64:21:40:14:2d:17:16:bd:aa:ac:da:74:66:9c:cd:
                    e5:3f:7d:3a:86:f0:52:72:1c:49:ef:06:a4:30:b1:
                    63:90:04:59:fa:99:a8:62:72:ec:59:7d:46:dc:16:
                    85:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1E:BF:98:12:65:5D:15:AD:54:3E:19:A7:8D:70:D4:E4:94:2C:8B
            X509v3 Authority Key Identifier:
                keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f4:2e:29:6d:84:39:c2:62:ab:ce:e9:fa:c7:79:c5:f6:7d:
         2f:42:92:62:a4:69:90:68:5d:a0:74:87:4c:ed:a3:bc:0c:1c:
         ce:c5:8e:aa:b1:09:c6:5c:f6:6d:18:6e:41:bb:fb:f8:04:a2:
         ff:70:5b:cb:3b:4f:ae:4d:65:69:02:0b:4b:01:2d:44:b8:c0:
         1a:2c:4b:f2:8a:31:43:67:95:8d:0c:e4:a4:39:20:63:5e:af:
         34:7b:12:fe:c1:9e:bf:78:26:07:60:34:d8:b9:3c:44:80:15:
         52:3b:c4:e8:99:69:26:d5:e1:89:a1:4d:cc:a5:63:2b:0f:b5:
         18:73:09:20:40:4d:59:cc:e3:3a:4f:5f:88:ba:24:0d:c5:49:
         8e:22:fb:f4:da:21:1a:10:84:66:00:8d:93:a6:62:6c:57:c7:
         e4:ca:db:fc:ba:88:48:16:db:ae:17:20:de:fc:da:f4:3b:61:
         5d:40:a9:f5:77:cb:1b:ab:c2:f0:16:05:5f:74:b3:0a:10:61:
         f3:72:7d:3f:71:7b:bc:12:b6:13:bf:19:cf:a5:82:38:8c:22:
         ab:0d:a5:e4:39:48:f3:e2:00:aa:f3:ba:0f:be:c3:38:d1:81:
         8f:9c:4c:72:09:95:4d:34:44:92:94:65:10:94:db:72:95:94:
         bf:cb:84:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy
OUYxQzYyQUMwHhcNMjUxMjE4MjAzNDA5WhcNMjUxMjI1MjAzNDA5WjAYMRYwFAYD
VQQDDA02OTQ0NjU0Mi05ZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcrUXRlUmttcEj2hOIuAQ+45t0pkhoOXl3HtmL3AQuFPgCB8zS8r6j0qw/8x
aN5j0Kg7Gm16zaWg/UYevqniBfYYTCzU8bRrr+uI//h36ARCZO3USwPEos/kxwrO
uAxp5nLjkaU4gSWrvDiKZmBaRCJGhk38HyWYBlSGM098SgpS1nHzhdpAJhPneB+v
G4p0JQIBHff1Njszc1q39kchyg1/ssnQ3KX/ud62P2tbP0+ib3CMqZBqq3Lrn5EH
jsBGOs0QR4YKzfRYiNpL6N37OO5kIUAULRcWvaqs2nRmnM3lP306hvBSchxJ7wak
MLFjkARZ+pmoYnLsWX1G3BaFFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMev5gS
ZV0VrVQ+GaeNcNTklCyLMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD
NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ
cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi
RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBR9C4pbYQ5wmKrzun6x3nF9n0vQpJipGmQaF2gdIdM7aO8DBzOxY6q
sQnGXPZtGG5Bu/v4BKL/cFvLO0+uTWVpAgtLAS1EuMAaLEvyijFDZ5WNDOSkOSBj
Xq80exL+wZ6/eCYHYDTYuTxEgBVSO8TomWkm1eGJoU3MpWMrD7UYcwkgQE1ZzOM6
T1+IuiQNxUmOIvv02iEaEIRmAI2TpmJsV8fkytv8uohIFtuuFyDe/Nr0O2FdQKn1
d8sbq8LwFgVfdLMKEGHzcn0/cXu8ErYTvxnPpYI4jCKrDaXkOUjz4gCq87oPvsM4
0YGPnExyCZVNNESSlGUQlNtylZS/y4Qh
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:20 2025 by rpki-client