This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
File:                     wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json)
Hash identifier:          UpNCWNf2apKO/YaUbQzRwXPKwSqB3jiywRr33zzWLtI=
Subject key identifier:   60:36:33:BD:A3:54:23:F3:90:8A:C6:68:E5:DD:7B:E8:C0:6F:9D:05
Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
Certificate issuer:       /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
Certificate serial:       1CCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
Manifest number:          1CBC
Signing time:             Thu 18 Dec 2025 16:03:51 +0000
Manifest this update:     Thu 18 Dec 2025 16:03:50 +0000
Manifest next update:     Thu 25 Dec 2025 16:03:50 +0000
Files and hashes:         1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: rygAGAi9GfwqghBTOULoGgiugLgFAzxG60FbypB5JGw=)
                          2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl
                          rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7370 (0x1cca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
        Validity
            Not Before: Dec 18 16:03:50 2025 GMT
            Not After : Dec 25 16:03:50 2025 GMT
        Subject: CN=694425e7-5c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:c0:e9:a0:83:55:45:d9:40:be:bb:24:bd:
                    ad:0f:de:8b:b1:f2:d8:31:23:02:10:ac:5e:d3:58:
                    68:73:76:24:ca:d9:68:ef:82:41:03:90:53:d4:4b:
                    0f:9f:8e:e3:ec:f1:6e:8f:4c:69:bc:35:b0:e5:6d:
                    f2:38:9c:2d:77:2b:69:50:bc:f0:97:2d:2d:fb:80:
                    7b:1c:00:df:b9:3b:5f:f2:14:2f:73:0a:3c:2a:b8:
                    e9:6f:e7:be:8c:38:44:8e:30:67:5c:9f:f0:52:02:
                    62:a5:66:23:ff:d6:10:4a:c5:f9:cb:14:1c:50:f4:
                    0d:86:3c:11:f4:fd:8d:48:3e:02:ed:ba:03:46:b3:
                    d8:b5:a6:d4:fb:db:b9:64:91:47:87:58:88:2c:5b:
                    31:47:13:e1:f8:2c:ff:d3:29:67:70:f5:52:74:2e:
                    8b:6a:ee:1e:52:ba:ca:25:0f:ce:4c:44:5d:c6:58:
                    13:87:88:ad:68:59:1a:c0:d5:d2:03:9b:75:eb:0e:
                    de:e4:16:f1:90:1f:77:86:b2:96:23:a2:ca:2d:d6:
                    0f:ae:b3:13:97:42:e5:ab:51:6a:2c:dc:69:10:1a:
                    1f:c7:1b:fc:65:f1:be:2e:28:b6:5d:1b:7d:35:aa:
                    0e:a9:1f:5e:0c:c1:42:ee:70:2e:8c:a0:f4:62:14:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:36:33:BD:A3:54:23:F3:90:8A:C6:68:E5:DD:7B:E8:C0:6F:9D:05
            X509v3 Authority Key Identifier:
                keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:97:3d:02:a0:ed:dd:8d:b4:f9:77:04:32:6e:5a:a1:e0:d0:
         c7:3b:ee:6b:e4:b4:43:14:8a:af:9b:f8:b0:f8:e6:24:0a:83:
         82:03:63:4c:47:c4:e6:1b:be:da:e4:a3:29:a4:bb:39:23:1c:
         05:65:66:4f:e1:63:f8:9f:75:cd:a3:35:71:a9:92:55:9e:fe:
         aa:78:65:7c:3e:0b:ff:0b:38:c0:e5:61:22:c9:28:df:67:58:
         a7:e5:d0:9b:63:59:d3:98:7c:85:a5:9e:3a:96:2a:9a:a8:d7:
         20:df:b0:b2:ed:d3:a8:dd:1a:0c:c3:c7:43:b8:b5:81:33:a1:
         c1:4c:05:cf:e4:c1:56:7b:a9:83:60:48:47:e2:c0:ef:e9:15:
         a6:df:76:0f:c4:0f:b8:ba:15:9e:4e:36:18:a9:bb:99:7d:02:
         f8:0b:b4:d1:81:41:24:e7:74:b8:60:66:5c:2e:ca:00:f5:d1:
         33:a6:d7:f3:f2:84:fd:f6:6b:cb:c8:c9:fa:67:3a:17:05:a2:
         15:aa:44:31:38:d2:ec:32:1c:5c:a4:3f:a6:50:04:ca:a2:14:
         65:44:17:36:05:cc:f1:a6:9f:58:a0:74:d5:3b:c3:82:5a:df:
         c8:0d:01:ce:23:3f:75:86:48:d7:1d:1c:a6:2b:31:d4:c5:12:
         6d:7b:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:00:19 2025 by rpki-client