This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File:                     WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier:          cZBPesuYEy+TN0e0kSXq4GCku4S8gb6K02I3YnaP6W4=
Subject key identifier:   B8:4A:F1:10:84:EE:CC:EF:FA:23:32:3E:E0:E7:FD:6B:D8:7E:61:4C
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer:       /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial:       3589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number:          352C
Signing time:             Sat 24 Jan 2026 14:25:43 +0000
Manifest this update:     Sat 24 Jan 2026 14:25:42 +0000
Manifest next update:     Sat 31 Jan 2026 14:25:42 +0000
Files and hashes:         1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: WuA9V9iT48E3a1Hakdh75M5IQTwSb+dTOc1g9ltxqQI=)
                          2: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=)
                          3: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: BAOg63rbaOIys2g97FtFz7H79eFm+GfNyVf99pFuu0Y=)
                          4: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=)
                          5: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=)
                          6: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=)
                          7: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: 0G3q5fTwQFZqfpwdr70W2RcZ9RQYxzqD0UwSER0DP5U=)
                          8: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=)
                          9: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=)
                          10: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
                          rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13705 (0x3589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
        Validity
            Not Before: Jan 24 14:25:42 2026 GMT
            Not After : Jan 31 14:25:42 2026 GMT
        Subject: CN=6974d667-88da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:74:6c:d2:b8:ee:f1:ff:c7:b2:4a:2a:44:
                    f2:c6:09:dd:88:41:cf:f7:3e:dd:19:13:56:e6:52:
                    83:ed:ea:86:b8:18:9f:dd:a3:eb:0d:3f:4e:3a:9d:
                    07:a5:aa:8c:e4:28:b0:53:82:5b:18:05:5f:cf:2d:
                    02:03:fb:23:db:95:59:e9:4b:cd:8f:12:20:ce:5a:
                    6e:f4:ae:b2:98:84:9e:d3:e3:91:5e:cc:0d:e9:a7:
                    a3:c2:64:8c:ad:55:72:26:d7:c1:46:93:27:fd:5d:
                    28:64:8e:8a:73:be:ae:a9:19:87:3b:62:7b:75:f6:
                    b4:41:1e:5a:6c:04:36:49:4e:de:b8:ff:86:35:dc:
                    09:b4:6e:3c:e6:b4:18:fa:16:85:f9:9a:73:bc:83:
                    1a:3f:ea:f6:bf:e0:85:5c:27:c9:52:05:d0:48:73:
                    09:7a:79:44:ca:17:36:ef:c5:b8:30:6c:00:eb:8a:
                    2d:d8:dc:02:0f:f8:9a:9f:d6:90:8b:58:70:62:2c:
                    dc:ae:34:83:a9:a2:d7:2f:b8:57:35:18:f9:bc:ef:
                    5f:32:26:3f:52:9e:61:80:21:92:5e:1b:37:71:f7:
                    2e:62:3a:d9:83:a5:d0:ab:02:c5:0d:9e:9c:44:0c:
                    4a:c0:e3:56:45:9a:16:b3:bc:74:f6:e6:75:07:73:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4A:F1:10:84:EE:CC:EF:FA:23:32:3E:E0:E7:FD:6B:D8:7E:61:4C
            X509v3 Authority Key Identifier:
                keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:06:4a:02:76:c9:12:10:94:e6:74:d6:ed:b6:fb:7b:64:
         1e:ec:dd:d3:4f:0e:cf:3b:83:e0:24:c1:65:4d:f5:3e:f0:b7:
         4b:d4:0d:6f:8a:0e:37:de:46:5e:94:7d:0d:99:aa:66:90:2c:
         9b:63:82:b1:ed:36:ab:eb:eb:4f:8e:29:1e:07:18:3f:7c:f9:
         da:9a:2b:e4:3a:65:64:f8:d9:d5:31:b4:7f:f1:ed:d5:9b:77:
         fd:4d:64:59:50:7f:aa:51:11:22:47:da:3d:da:8f:95:4a:61:
         d0:13:0a:ff:2d:1f:5a:01:41:a8:2b:95:bc:ff:fd:5f:c4:95:
         ae:99:2d:3a:33:1f:59:62:06:f4:7e:e9:7c:97:da:85:41:68:
         0a:bd:3b:16:3c:64:3f:05:30:77:ad:49:48:e5:1e:a6:3e:e2:
         2a:b1:fe:9a:63:86:d5:40:9a:1c:cf:e9:32:f5:6c:dd:ab:af:
         87:55:00:0d:16:8b:f8:8f:d1:9b:e2:94:1f:a0:07:03:5c:80:
         7e:b5:0b:63:f7:c7:d7:43:e1:06:93:84:8c:25:80:69:e6:1a:
         41:5e:73:77:1c:86:3a:53:2f:8f:02:89:b7:df:7e:f7:0a:c9:
         7e:e8:19:36:95:95:e9:2f:4b:5d:2e:bf:b3:eb:c9:8f:9f:6c:
         75:41:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:51:10 2026 by rpki-client