This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
File:                     wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json)
Hash identifier:          fiuged/BAuwj4Jlz+va6431R/BOQEud7aWaPE9fLSRY=
Subject key identifier:   BE:30:E0:2D:26:3A:D2:25:30:26:25:87:66:38:5D:04:F9:73:BC:03
Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
Certificate issuer:       /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
Manifest number:          017B
Signing time:             Sun 25 Jan 2026 03:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:59 +0000
Manifest next update:     Sun 01 Feb 2026 03:00:59 +0000
Files and hashes:         1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: vcAgbCFwet73o4IUTj6OB4A5265DTL1GXI9ZtxVZSFc=)
                          2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: mx+hZNnEHjoWsdsKMFKjqe1rg9GBHxL9Qf87GWS5aXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
                          rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
        Validity
            Not Before: Jan 25 03:00:59 2026 GMT
            Not After : Feb  1 03:00:59 2026 GMT
        Subject: CN=6975876c-7721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:a1:d7:96:c6:d5:9c:bf:53:27:c6:e5:14:
                    ed:64:2a:db:93:a8:02:3d:08:0f:e8:3d:3a:72:44:
                    c0:66:21:62:9b:ac:d0:c3:ec:d6:39:5a:02:6a:7b:
                    2b:22:b3:3f:23:67:d5:69:b7:79:6e:c2:47:cb:67:
                    da:eb:df:29:f8:c6:cb:82:ca:95:ea:e8:46:ee:84:
                    85:77:7c:ec:0b:cf:f1:53:41:44:f2:13:bc:c8:a2:
                    0e:fa:4b:78:e2:fd:4e:8d:41:a9:6d:3c:d6:c0:c2:
                    0e:5c:bc:46:24:86:46:55:c2:94:66:d4:b5:30:7e:
                    e4:cc:99:d8:2b:3f:44:f9:e8:72:9b:81:e5:45:81:
                    1f:50:7c:a3:3c:da:2e:d6:3f:02:8a:b9:56:d8:43:
                    66:15:64:d5:87:da:80:52:47:3f:e1:93:c8:12:3a:
                    90:34:7b:3a:6f:b0:d0:09:23:a1:4d:8d:7b:f5:d7:
                    f1:22:6f:3f:ec:9e:03:92:2c:55:8c:ae:90:34:c2:
                    d9:08:7e:56:3b:49:38:ae:e6:46:51:bf:a8:88:d2:
                    0c:ac:b4:28:4b:5a:26:9b:2d:6d:98:eb:09:84:f7:
                    93:4c:9e:89:93:14:df:16:b6:0f:7c:64:30:ce:f9:
                    ba:dc:f6:83:1c:de:43:a6:87:83:98:74:8c:96:d7:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:E0:2D:26:3A:D2:25:30:26:25:87:66:38:5D:04:F9:73:BC:03
            X509v3 Authority Key Identifier:
                keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:28:24:6b:05:14:b7:56:13:3e:be:e0:02:16:eb:11:48:
         bd:24:65:37:6c:19:e3:18:5a:17:f1:81:13:da:99:b5:d2:74:
         4a:7c:31:dc:37:d3:5b:e4:d8:fd:25:11:8c:15:35:3e:1d:62:
         d6:80:9a:f5:a8:6b:f3:d6:25:e1:da:c8:5b:f9:b6:25:95:3b:
         2a:af:e8:da:3c:23:7f:75:96:87:0b:92:48:23:7a:9f:f7:d4:
         25:15:f2:d6:c9:26:d0:49:c8:d8:85:1e:3a:64:94:ef:d2:c2:
         82:9b:88:33:92:05:46:32:de:9d:06:99:56:05:88:ee:8c:d1:
         10:6d:4d:76:2d:03:2d:80:3f:95:34:f0:8b:0e:8b:f8:e4:9f:
         b9:6b:09:cc:75:6d:81:85:34:2e:72:87:8b:c2:f9:5e:8b:94:
         42:84:0e:35:8c:95:e2:47:78:69:30:5c:23:cd:0c:5c:e9:5f:
         68:5f:d6:33:e6:ee:10:ce:e4:fd:28:6c:ec:59:30:44:d0:02:
         e4:96:32:39:29:18:5d:0b:e5:29:2a:59:52:06:94:db:c0:b7:
         c8:26:cd:af:e3:9d:4d:e3:00:24:22:fb:1d:18:f4:64:7e:51:
         f7:71:8f:b5:c8:8e:39:f7:a9:ed:9b:63:24:22:3a:ba:64:6e:
         8d:06:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:20 2026 by rpki-client