This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
File:                     WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json)
Hash identifier:          14Tk8W3EZnu96f+ql5lgCOqA3wGh0QLVe7eb135iKQU=
Subject key identifier:   D1:90:28:C9:C8:85:95:5C:5C:F1:13:6B:15:48:D8:7F:7E:ED:66:7C
Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Certificate issuer:       /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
Manifest number:          84
Signing time:             Sun 25 Jan 2026 05:50:21 +0000
Manifest this update:     Sun 25 Jan 2026 05:50:21 +0000
Manifest next update:     Sun 01 Feb 2026 05:50:21 +0000
Files and hashes:         1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: +D6Z1abLLKmpiTid52zgITnENJK8j7QaQOHz7izmi+Y=)
                          2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
                          rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
        Validity
            Not Before: Jan 25 05:50:21 2026 GMT
            Not After : Feb  1 05:50:21 2026 GMT
        Subject: CN=6975af1d-3173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:6c:72:a8:4c:12:49:24:4e:58:af:0e:4d:
                    3f:fe:ec:fe:3f:6b:08:93:34:06:5b:14:1e:19:da:
                    3c:fe:17:6e:f2:bb:18:24:b4:7d:c7:30:c5:f7:9b:
                    af:7d:6c:7e:6f:30:a0:ba:ae:98:ab:9e:c7:60:eb:
                    65:e0:2d:1d:11:29:25:c8:b2:53:7d:6b:1e:df:69:
                    0b:32:ba:ed:ec:32:9f:20:85:f0:a3:e5:1d:db:23:
                    68:0f:52:4c:b8:df:30:2d:b7:1d:4d:06:21:d1:a5:
                    00:99:7d:58:70:97:d8:22:cc:4c:51:95:ba:f3:af:
                    af:8a:c3:7e:0d:49:3a:91:58:3a:11:a0:3d:01:2a:
                    6b:a9:b5:bc:40:1d:9a:fc:d8:d2:8c:2d:a4:fe:8e:
                    b9:dd:0f:61:2f:fe:e5:e8:b9:ec:63:18:3e:ea:24:
                    79:80:94:a2:d2:fa:42:c1:f3:6c:cd:17:86:ea:72:
                    71:67:77:6b:e7:d9:e5:80:d3:9c:9f:4b:fc:ad:8c:
                    91:b6:dd:32:5d:17:47:34:bd:51:6b:80:09:d9:f1:
                    08:ad:33:19:a4:44:fc:66:d0:a1:b3:6e:43:ce:fb:
                    f6:d3:c2:2e:3c:7b:55:76:54:d1:57:18:1a:e2:4a:
                    7e:2a:01:47:b7:e4:3d:8f:0d:ec:4c:5b:95:da:1a:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:28:C9:C8:85:95:5C:5C:F1:13:6B:15:48:D8:7F:7E:ED:66:7C
            X509v3 Authority Key Identifier:
                keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c2:6f:72:7b:65:42:3d:59:db:32:b1:d2:4d:62:93:f6:14:
         23:a4:e1:9e:a7:ed:1a:b4:7e:3d:be:53:7c:bd:3c:a3:ee:6d:
         5f:90:fb:ae:fa:8b:9d:b4:6c:c2:d1:68:93:a3:37:fa:8d:f5:
         0a:03:09:2e:48:ab:a5:48:9d:02:cc:27:5b:5d:af:22:b9:7b:
         27:fe:f8:9d:0a:76:b7:3d:88:15:b1:c0:e4:3a:cf:d4:3d:43:
         9b:6f:3b:db:e3:63:11:7a:ce:ad:93:4d:a6:00:e9:4a:5f:98:
         2d:6b:50:06:97:a1:61:99:56:73:dc:e4:36:34:d1:8b:1c:e2:
         b3:6f:68:fe:b6:aa:3d:08:49:dd:6f:fb:23:4d:7b:d5:eb:31:
         38:e2:74:91:89:0d:51:e9:5f:cf:6b:a8:94:42:23:2e:78:22:
         41:46:e4:50:a7:8a:5b:80:c6:c5:ae:93:1c:e4:a9:be:34:4b:
         af:78:c4:d4:bb:a1:d6:0a:12:bb:41:46:de:1a:89:fc:8a:32:
         31:29:08:ee:c2:0e:54:4f:c2:a3:b1:89:47:3f:7f:0c:34:f4:
         59:65:fa:53:98:ea:c9:17:d5:7a:53:15:dc:c4:c4:3a:93:ce:
         80:c1:87:0a:ad:e7:63:33:ca:fa:05:f8:ca:db:42:78:31:96:
         5f:84:09:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5NDkxMTAvBgNVBAUTKDVBMzU4QjQ4NEFEODdGRTAyOUMxMDFEQUU2RDJFRDgy
OEQ4NjA1NTMwHhcNMjYwMTI1MDU1MDIxWhcNMjYwMjAxMDU1MDIxWjAYMRYwFAYD
VQQDDA02OTc1YWYxZC0zMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx5tscqhMEkkkTlivDk0//uz+P2sIkzQGWxQeGdo8/hdu8rsYJLR9xzDF95uv
fWx+bzCguq6Yq57HYOtl4C0dESklyLJTfWse32kLMrrt7DKfIIXwo+Ud2yNoD1JM
uN8wLbcdTQYh0aUAmX1YcJfYIsxMUZW686+visN+DUk6kVg6EaA9ASprqbW8QB2a
/NjSjC2k/o653Q9hL/7l6LnsYxg+6iR5gJSi0vpCwfNszReG6nJxZ3dr59nlgNOc
n0v8rYyRtt0yXRdHNL1Ra4AJ2fEIrTMZpET8ZtChs25Dzvv208IuPHtVdlTRVxga
4kp+KgFHt+Q9jw3sTFuV2ho5CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGQKMnI
hZVcXPETaxVI2H9+7WZ8MB8GA1UdIwQYMBaAFFo1i0hK2H/gKcEB2ubS7YKNhgVT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk0OS82NjNCMjVGMjM2
RTYxMUYwOTUxRUI4N0VDNEY5QUUwMi9XaldMU0VyWWYtQXB3UUhhNXRMdGdvMkdC
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTk0OS82NjNCMjVGMjM2RTYxMUYwOTUxRUI4N0VDNEY5QUUwMi9XaldMU0VyWWYt
QXB3UUhhNXRMdGdvMkdCVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXwm9ye2VCPVnbMrHSTWKT9hQjpOGep+0atH49vlN8vTyj7m1fkPuu
+oudtGzC0WiTozf6jfUKAwkuSKulSJ0CzCdbXa8iuXsn/vidCna3PYgVscDkOs/U
PUObbzvb42MRes6tk02mAOlKX5gta1AGl6FhmVZz3OQ2NNGLHOKzb2j+tqo9CEnd
b/sjTXvV6zE44nSRiQ1R6V/Pa6iUQiMueCJBRuRQp4pbgMbFrpMc5Km+NEuveMTU
u6HWChK7QUbeGon8ijIxKQjuwg5UT8KjsYlHP38MNPRZZfpTmOrJF9V6UxXcxMQ6
k86AwYcKredjM8r6BfjK20J4MZZfhAkW
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:33 2026 by rpki-client