This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
File:                     wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json)
Hash identifier:          y6GYQ8+Px1bLpNn/uzL3LUZJZLRiY9nRQZ7b8JfxtN0=
Subject key identifier:   16:88:D6:92:F9:A0:B3:8D:DB:E2:AF:A3:FB:29:45:E6:18:25:FD:AC
Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
Certificate issuer:       /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
Manifest number:          C8
Signing time:             Sun 25 Jan 2026 04:59:32 +0000
Manifest this update:     Sun 25 Jan 2026 04:59:32 +0000
Manifest next update:     Sun 01 Feb 2026 04:59:32 +0000
Files and hashes:         1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: xBqLtIBWzMrHlO/iVke7RFW/jwKu3IpvJOdOoPcofCg=)
                          2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
        Validity
            Not Before: Jan 25 04:59:32 2026 GMT
            Not After : Feb  1 04:59:32 2026 GMT
        Subject: CN=6975a334-246f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:23:c1:a4:43:06:df:91:ee:ff:ca:99:0f:
                    bf:cb:e7:6d:e6:50:40:76:cc:ff:73:56:4b:4f:c9:
                    98:83:4e:03:54:bf:9e:4a:e8:fd:af:cb:ab:28:d7:
                    c1:97:51:3c:24:6a:a5:44:c3:6a:3a:42:53:10:91:
                    52:8e:38:23:37:d1:a7:58:73:00:8c:2c:b5:1c:ea:
                    8d:85:a8:a9:af:dd:f9:0f:07:c5:d9:0c:5c:ff:49:
                    2e:80:1d:7a:f0:54:e5:55:ee:98:10:5c:41:ae:f4:
                    64:71:f9:e2:a4:ef:ba:ea:93:41:9b:22:20:ce:fa:
                    14:88:da:44:c3:96:f4:c8:15:de:10:1f:44:f3:41:
                    b7:3e:71:eb:da:3e:b4:ea:c2:d6:8d:b2:ff:4b:ae:
                    be:4b:d8:7b:79:2c:4a:65:ca:ca:ec:43:f9:a1:dc:
                    19:6c:67:e1:3f:79:de:4e:cc:75:ab:b5:5a:9c:3e:
                    84:4f:48:21:e1:a1:a1:85:0f:c9:88:04:01:30:2e:
                    2c:ff:5d:2a:60:fd:cf:1e:32:3f:f1:9c:b6:a6:f6:
                    30:98:0b:05:e4:8b:43:c5:34:49:be:1d:0a:a1:d0:
                    7b:aa:f1:55:43:ac:90:1b:67:15:c6:6f:f1:4c:d5:
                    96:f3:94:b1:39:ae:29:dd:96:e7:22:75:f7:2d:5d:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:88:D6:92:F9:A0:B3:8D:DB:E2:AF:A3:FB:29:45:E6:18:25:FD:AC
            X509v3 Authority Key Identifier:
                keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a9:88:90:6a:90:61:86:77:cf:6b:67:3e:e5:8b:cf:6d:1e:
         e4:34:ee:7c:69:d1:77:90:84:c6:53:48:c9:09:8e:fb:34:29:
         1c:7c:f7:75:b5:24:cc:58:a9:5b:a3:fa:f6:42:41:37:54:f1:
         5b:f8:f4:8d:1f:1d:6a:95:f8:05:a0:2d:75:f5:a6:e7:28:fb:
         d7:bf:26:48:6c:9d:62:ee:eb:0b:02:9d:47:07:3f:ff:9e:3d:
         b1:ed:ec:62:85:7a:84:9c:e3:13:2c:f4:04:77:73:fd:46:80:
         6f:6d:4c:f0:7e:6c:63:11:09:78:a6:04:0c:d5:35:bb:4b:20:
         41:cd:14:06:ff:81:f5:cb:e4:91:51:28:4f:72:72:0d:c6:24:
         7f:8c:07:90:44:82:67:20:81:89:2f:a5:1b:8a:a3:d3:46:ce:
         78:42:ba:a4:92:4d:05:fa:77:5f:a0:2a:53:42:06:2d:b6:19:
         4a:9d:1d:26:73:95:9c:b0:44:7a:db:8c:81:33:08:47:fc:9c:
         c8:82:a8:d8:70:5f:bb:ce:d8:b5:9d:8c:51:e6:61:f8:79:ba:
         3c:26:e1:2f:7a:e8:90:06:a7:53:9a:bd:ef:98:91:0f:d5:65:
         ad:7a:a1:d1:f2:01:bc:05:40:34:2e:20:48:ee:a7:0d:6a:81:
         c9:cf:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:07:55 2026 by rpki-client