This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          aGsJdAASOEL5l3IdxX5yvq8ZLNPCJntw0unm9Q7A1Ys=
Subject key identifier:   73:E1:9D:7F:E0:17:1E:43:9D:72:9B:D9:01:96:79:A7:E4:78:BC:E9
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       042C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          0423
Signing time:             Sat 24 Jan 2026 23:33:50 +0000
Manifest this update:     Sat 24 Jan 2026 23:33:49 +0000
Manifest next update:     Sat 31 Jan 2026 23:33:49 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: T7EPW6qldJy1Qhd2s9v27AkknCk9zUQggcn9EGjb6Kc=)
                          2: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=)
                          3: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=)
                          4: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=)
                          5: 2106E428992111EC99E0095AC4F9AE02.roa (hash: WwA/rBGjBDEpiOexD1IjCU08QUDY8G7l57/ipRDGA8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068 (0x42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Jan 24 23:33:49 2026 GMT
            Not After : Jan 31 23:33:49 2026 GMT
        Subject: CN=697556de-dbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:21:48:06:d8:c5:e8:05:0b:86:d6:65:a7:
                    3d:b4:9d:55:b4:41:da:9e:26:e2:16:d0:2e:5f:66:
                    71:2d:45:e5:61:18:88:8c:31:4b:bb:f3:fe:3c:0c:
                    f7:e1:24:9e:07:b7:50:68:18:38:f7:8e:9e:4c:88:
                    f1:92:25:12:10:f9:af:cd:ba:8a:68:a5:55:f9:59:
                    ce:e8:12:be:e6:0d:7d:75:d8:7e:2f:fb:4c:a6:ea:
                    5e:29:86:59:c0:4f:fe:8e:05:89:a6:2a:ba:ee:1c:
                    4b:8c:a7:38:4d:72:03:62:00:6d:f1:b1:c7:4a:f6:
                    83:70:0c:be:14:1d:62:ea:b5:f7:63:97:53:cc:c5:
                    81:45:44:77:55:b1:2b:11:78:d8:95:56:6e:17:5d:
                    de:b9:04:39:46:0f:7e:04:70:c8:48:ec:8a:09:1d:
                    e1:6f:ad:f9:af:9d:76:70:29:d3:c3:39:98:7a:2b:
                    07:1d:7f:0d:0c:d6:26:7c:b0:1a:24:b7:cd:75:f2:
                    34:0b:e4:6b:38:4f:1e:ea:a1:ec:78:01:3e:77:58:
                    f6:b8:b8:9f:28:2e:96:79:50:8d:0a:2b:1a:40:27:
                    e0:20:f6:52:ee:27:5a:82:b9:de:16:f0:c3:85:61:
                    af:83:0c:41:6e:44:44:06:9f:45:13:02:e4:a8:63:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:9D:7F:E0:17:1E:43:9D:72:9B:D9:01:96:79:A7:E4:78:BC:E9
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:25:84:db:ad:e0:63:49:c4:8b:c3:82:c3:02:e1:8c:8c:f9:
         a5:20:94:a8:56:0c:49:35:ed:29:eb:ff:5c:ba:0f:0b:5a:2e:
         30:4c:56:4b:97:fe:7b:f8:5f:60:b4:91:7b:1e:6d:88:46:ad:
         1f:e6:88:ee:bc:1f:85:2c:2b:58:ba:fc:05:53:ce:6e:35:ad:
         65:ea:bd:2c:5a:82:57:be:52:1f:3d:c8:13:af:9e:d3:09:de:
         45:87:81:cf:9a:0f:6c:f4:bd:69:7a:02:11:da:28:84:10:17:
         2f:24:a1:15:4f:3a:00:a2:84:88:9e:ba:ae:a5:96:9b:64:12:
         09:af:9a:ae:1d:c8:b6:ca:8b:a7:b1:91:89:71:0f:16:08:54:
         8a:3a:54:d0:f8:17:27:43:ae:83:a9:53:51:93:f5:e1:c4:ec:
         71:9a:b4:98:b9:39:9b:3c:e5:31:94:57:b5:e8:b7:38:09:66:
         f0:91:29:91:91:85:56:df:c0:d6:81:aa:34:8b:58:48:dd:3a:
         80:de:fa:03:8e:8f:e5:fe:bc:80:7c:3b:a5:26:91:4b:43:2a:
         71:6e:06:c9:32:1e:07:f3:bf:12:65:c3:92:51:ad:98:bf:9a:
         65:7c:34:08:05:5b:9b:8d:a5:34:c8:72:9e:83:84:7e:d4:f8:
         97:a1:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:00:58 2026 by rpki-client