This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
File:                     wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json)
Hash identifier:          fTO/+d7b5X5NwQdrKUQ69uTr+mFS8L+czVHjJKeCPa4=
Subject key identifier:   8A:85:92:91:F1:2B:E3:93:DF:0C:DA:FA:E3:3A:4F:19:8F:46:33:0A
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Certificate issuer:       /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial:       0931
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
Manifest number:          0A13
Signing time:             Sat 24 Jan 2026 19:43:23 +0000
Manifest this update:     Sat 24 Jan 2026 19:43:22 +0000
Manifest next update:     Sat 31 Jan 2026 19:43:22 +0000
Files and hashes:         1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: 7AVw48PdHnDy6Mscjnv+5FqSsbbNqdQnqPzPXmnZU1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
                          rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2353 (0x931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
        Validity
            Not Before: Jan 24 19:43:22 2026 GMT
            Not After : Jan 31 19:43:22 2026 GMT
        Subject: CN=697520db-3bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:af:58:65:d3:aa:c6:b1:08:e1:a7:0c:30:
                    2f:a7:d2:6c:42:13:f1:c3:f0:f4:c5:98:4f:ac:9d:
                    ce:92:90:36:4c:c3:94:1c:5a:ee:90:7a:e6:48:76:
                    fc:82:ff:ae:05:dc:e8:22:8e:57:06:02:bb:8a:d2:
                    0e:f7:cb:c4:f6:29:24:f4:5f:94:c2:fd:9e:5f:e7:
                    a9:49:33:54:01:72:ae:46:30:07:06:ce:71:8b:24:
                    b9:86:2e:09:0a:ca:38:06:07:09:3b:56:f1:7f:50:
                    ed:4a:22:f8:cb:89:cb:bf:2c:14:ad:40:ae:a7:ae:
                    00:f9:e4:b4:6d:9b:31:05:59:82:40:a5:e1:f2:d4:
                    7c:c7:8a:e4:86:eb:15:f7:83:f7:b2:c9:05:cf:9b:
                    06:c4:90:4d:0c:7d:7d:4d:07:3c:49:6d:c2:1b:3b:
                    49:b2:ca:26:62:dc:6f:5b:aa:a5:be:2e:9c:4b:6c:
                    9b:aa:43:0f:4d:62:fe:b9:b4:2d:d8:b2:67:03:d6:
                    6c:d4:50:60:c8:e5:19:8e:45:c4:96:25:b6:3d:a9:
                    90:7c:9d:8f:7d:06:b1:3e:25:c0:18:b6:d5:bc:f0:
                    12:aa:35:7e:24:e5:2f:a7:b0:06:d7:7d:d1:ab:ca:
                    75:6a:88:3b:48:16:85:9f:e8:42:6a:9a:31:a8:72:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:85:92:91:F1:2B:E3:93:DF:0C:DA:FA:E3:3A:4F:19:8F:46:33:0A
            X509v3 Authority Key Identifier:
                keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:d6:34:ee:3f:ae:38:01:ae:fd:5c:6f:e0:27:40:38:5e:
         17:52:a1:db:2d:41:27:15:b2:a3:d6:66:5d:05:51:05:bf:6e:
         f0:5e:8c:9d:1c:29:be:30:31:8d:e2:c7:3c:b5:ba:b1:62:fb:
         e9:f7:6f:d4:0d:49:d8:ef:e8:1d:fb:8e:12:38:8a:85:4b:fa:
         b0:6c:2b:02:9c:dd:59:02:d2:02:59:18:5e:c0:0b:7c:a0:16:
         29:12:44:f2:80:fa:8a:87:bc:26:3b:5f:65:09:0c:47:19:6e:
         d1:ba:eb:97:22:e6:45:6c:46:e4:f9:a1:26:80:23:43:44:da:
         90:00:ed:aa:b4:2e:ac:be:72:7d:78:3b:fd:4c:6b:16:09:55:
         b7:85:61:d9:05:61:d0:07:c6:33:c7:a6:c5:31:99:f8:1d:9f:
         21:da:e9:45:af:e8:22:ec:91:fe:10:69:bc:d3:db:45:1c:47:
         f0:c8:c2:df:92:12:9a:35:8f:5c:5b:b0:3c:b9:8d:cd:78:0a:
         2b:b6:be:1c:f0:4e:44:37:72:89:93:2d:a7:66:58:dc:85:b6:
         0d:07:46:61:3d:4c:52:bc:b8:a7:61:da:f4:8d:c6:be:c6:33:
         53:06:dd:24:d0:7f:bd:e8:a5:2c:f5:ac:17:72:e6:3b:87:42:
         d0:cc:ce:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVCMkQxMTAvBgNVBAUTKEMwMzA1NkY2ODA5OTY0N0FGNzU4NUU1M0Y2QTk4RUNG
RjNEOTg4REYwHhcNMjYwMTI0MTk0MzIyWhcNMjYwMTMxMTk0MzIyWjAYMRYwFAYD
VQQDDA02OTc1MjBkYi0zYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSuvWGXTqsaxCOGnDDAvp9JsQhPxw/D0xZhPrJ3OkpA2TMOUHFrukHrmSHb8
gv+uBdzoIo5XBgK7itIO98vE9ikk9F+Uwv2eX+epSTNUAXKuRjAHBs5xiyS5hi4J
Cso4BgcJO1bxf1DtSiL4y4nLvywUrUCup64A+eS0bZsxBVmCQKXh8tR8x4rkhusV
94P3sskFz5sGxJBNDH19TQc8SW3CGztJssomYtxvW6qlvi6cS2ybqkMPTWL+ubQt
2LJnA9Zs1FBgyOUZjkXEliW2PamQfJ2PfQaxPiXAGLbVvPASqjV+JOUvp7AG133R
q8p1aog7SBaFn+hCapoxqHL9PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqFkpHx
K+OT3wza+uM6TxmPRjMKMB8GA1UdIwQYMBaAFMAwVvaAmWR691heU/apjs/z2Yjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF
QjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpIcjNXRjVUOXFtT3pfUFpp
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dEQlc5b0NaWkhyM1dGNVQ5cW1Pel9QWmlOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpI
cjNXRjVUOXFtT3pfUFppTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwAtY07j+uOAGu/Vxv4CdAOF4XUqHbLUEnFbKj1mZdBVEFv27wXoyd
HCm+MDGN4sc8tbqxYvvp92/UDUnY7+gd+44SOIqFS/qwbCsCnN1ZAtICWRhewAt8
oBYpEkTygPqKh7wmO19lCQxHGW7RuuuXIuZFbEbk+aEmgCNDRNqQAO2qtC6svnJ9
eDv9TGsWCVW3hWHZBWHQB8Yzx6bFMZn4HZ8h2ulFr+gi7JH+EGm809tFHEfwyMLf
khKaNY9cW7A8uY3NeAortr4c8E5EN3KJky2nZljchbYNB0ZhPUxSvLinYdr0jca+
xjNTBt0k0H+96KUs9awXcuY7h0LQzM4d
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:43 2026 by rpki-client