This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File:                     WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier:          q0Jvd5CFVT+b40UhzKEUkfwqYsC0thM3t0yznwl4uxs=
Subject key identifier:   18:8B:F8:0C:6B:0F:2E:1E:63:44:E4:8F:9A:78:B2:0E:53:57:11:8F
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       05E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number:          05DD
Signing time:             Thu 18 Dec 2025 22:20:47 +0000
Manifest this update:     Thu 18 Dec 2025 22:20:47 +0000
Manifest next update:     Thu 25 Dec 2025 22:20:47 +0000
Files and hashes:         1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: VBGTfa4gNFmc/N6R2F25vH3y2LAoHQHmegQqYRuAmBA=)
                          2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: eAEKnlDfmbmvzyOLqZ04+l0qIxLGX9JSF33CVH6hcIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Dec 18 22:20:47 2025 GMT
            Not After : Dec 25 22:20:47 2025 GMT
        Subject: CN=69447e3f-5e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ba:da:2c:67:77:b6:d1:d1:8e:97:5d:68:b5:
                    4b:48:11:09:28:bb:a6:76:6b:32:70:ce:c6:c6:79:
                    3c:35:8d:03:08:e3:8d:36:92:78:f4:5d:3e:99:7d:
                    f3:3f:8d:2d:7f:29:47:7e:7e:5d:13:c6:9c:a5:6b:
                    27:3a:bf:dd:99:bb:28:3e:0e:f8:71:76:d0:b9:32:
                    56:bb:9f:c1:3e:4c:98:dd:8f:d9:41:ad:58:9b:6c:
                    d8:e9:28:33:3e:db:aa:cc:5a:7b:a4:e7:1a:28:e4:
                    03:14:7d:4d:b2:4b:93:c8:7f:21:3b:56:47:97:48:
                    60:03:2e:fe:3c:33:ff:60:5c:09:f0:e6:86:90:b5:
                    0f:ea:4a:62:28:8c:91:64:e7:7e:f9:2d:99:60:8d:
                    15:33:71:65:52:21:72:0c:f8:57:0a:0b:61:ed:f2:
                    6e:b0:62:0f:a4:2c:27:68:bc:99:38:dd:16:a8:d5:
                    9c:76:4a:85:4a:7f:af:73:7f:79:66:6a:82:96:4c:
                    00:9a:5c:0e:cc:74:d0:00:5e:2b:5b:7d:b9:65:be:
                    ef:fb:21:ec:ee:68:73:f4:4b:86:32:2a:31:86:76:
                    f5:22:1f:d7:c2:33:b7:33:5b:8f:a6:f8:db:00:97:
                    ad:92:c4:ef:14:d5:8e:c0:29:2d:97:5e:e6:8b:d6:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8B:F8:0C:6B:0F:2E:1E:63:44:E4:8F:9A:78:B2:0E:53:57:11:8F
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c4:06:e1:f8:70:ce:5d:6f:d8:b6:cc:17:40:dc:ce:07:31:
         73:ab:4d:65:19:f0:4a:16:47:45:e3:d6:33:34:ab:b1:bb:05:
         87:4e:7b:2c:64:90:cf:b3:27:6b:a6:e4:f0:f4:23:94:a5:d8:
         c1:f3:b5:d1:26:62:b9:3a:71:5f:53:54:73:d7:25:d5:3b:01:
         5f:0d:8e:b5:d3:74:e2:db:56:c0:1e:7a:ea:7b:d4:83:2c:6f:
         62:f0:00:ee:6b:d5:87:4c:11:58:11:49:91:2d:cd:45:53:c2:
         12:d1:e1:85:f4:8f:4a:c7:b7:53:d8:bc:b1:a1:fc:d5:a6:df:
         dd:95:b1:42:74:d2:c8:b1:1b:1a:8c:09:aa:bc:29:f3:4b:93:
         8e:bf:3e:63:80:24:0e:cc:22:89:d4:2f:65:15:6d:b9:74:16:
         e7:60:34:cc:fe:f5:bd:d6:25:46:2d:f3:35:c6:94:31:da:c9:
         ad:9a:41:70:7c:c4:09:5c:02:47:54:6f:ae:99:33:1d:19:8c:
         8e:96:83:f6:9b:3a:d9:2a:09:2a:23:f4:b1:76:41:40:ec:a4:
         01:38:99:b6:fb:91:24:0c:4f:13:0b:6d:70:8b:3d:42:7f:8e:
         3c:5a:94:09:3c:87:01:ea:79:87:c3:a8:de:a7:04:e7:e3:99:
         dd:b2:13:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:58:08 2025 by rpki-client