This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
File:                     wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json)
Hash identifier:          kQzwkqHkFpWvhP6bx+BYz+yfXxmqVX9ItS+KL4U0w5o=
Subject key identifier:   C0:F7:4C:F4:1B:3B:DF:86:AA:58:27:0A:9C:69:82:8F:BD:CA:58:79
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Certificate issuer:       /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial:       2689
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
Manifest number:          2676
Signing time:             Sat 24 Jan 2026 15:32:02 +0000
Manifest this update:     Sat 24 Jan 2026 15:32:02 +0000
Manifest next update:     Sat 31 Jan 2026 15:32:02 +0000
Files and hashes:         1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: J63XOVus6bhPpDDJIW3fBBFv10Q4Mn9ADxga2AmrQU8=)
                          2: 665C2DFC1C1511EFB1AF8F28C4F9AE02.roa (hash: lIonHfcn1CuwQW3kN+S33JwTNW1MriZKXW51TfBozU4=)
                          3: ACDC884E1C1511EF93C5F728C4F9AE02.roa (hash: pXwAyW9Hy/DMGmTjqX3G4l47uqWRP7c4rJmBKT94M2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
                          rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9865 (0x2689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
        Validity
            Not Before: Jan 24 15:32:02 2026 GMT
            Not After : Jan 31 15:32:02 2026 GMT
        Subject: CN=6974e5f2-5ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:e8:39:8b:78:97:92:0a:b1:26:93:dd:f9:
                    62:a7:ea:c9:28:3c:c2:5f:a5:57:2d:f2:30:ad:43:
                    04:dc:43:b1:bc:5d:5f:a5:44:7b:45:45:32:18:4b:
                    b2:a6:0e:b4:f9:d9:1d:da:01:0f:e9:1f:51:2a:a4:
                    d6:d4:a9:99:da:56:6b:36:49:ad:f7:75:d8:4b:6d:
                    2b:80:26:9f:45:2d:47:e6:4b:98:6a:f3:93:c9:40:
                    bb:c2:dd:fd:b2:fc:91:ec:8c:36:b7:a9:6d:ee:2c:
                    2d:29:14:f2:e7:aa:1c:95:bd:70:ff:23:95:21:d8:
                    bd:55:d9:9e:70:8f:94:1a:44:2f:52:f6:08:ce:a0:
                    8c:07:d3:2f:d5:78:0d:18:2f:e2:f7:32:b2:fb:87:
                    71:4b:21:14:2b:50:f0:ce:61:bd:d8:23:31:87:00:
                    4c:28:ed:64:54:b3:96:b8:8e:bd:c3:a9:a4:02:d9:
                    d7:0b:72:2a:65:06:f8:8c:43:40:5b:24:58:c2:07:
                    2c:df:82:d6:84:c3:d3:1a:cb:a6:0a:b5:80:95:0b:
                    8f:83:aa:a4:c8:4e:26:04:08:c3:bb:3a:f1:8f:31:
                    45:34:a5:ec:df:da:8b:e8:03:e3:c1:9f:22:a5:16:
                    7e:24:25:df:05:98:da:2a:b6:36:73:20:3b:9d:53:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:4C:F4:1B:3B:DF:86:AA:58:27:0A:9C:69:82:8F:BD:CA:58:79
            X509v3 Authority Key Identifier:
                keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f5:4d:75:36:d5:a0:19:32:c7:84:09:39:28:c2:e6:67:66:
         a1:d8:5e:31:65:4f:d7:59:ba:69:a1:37:e4:fa:5f:23:9a:47:
         35:af:ce:b8:02:e3:67:29:27:fe:60:15:41:75:20:84:15:85:
         4a:15:be:b7:f5:0e:27:d5:ad:43:79:ce:f5:6e:75:7d:a0:53:
         c4:20:42:95:de:35:37:7d:90:39:dd:44:1d:a5:c8:32:1d:f7:
         d9:fb:25:ef:b6:c3:c7:1b:fb:c8:09:c6:7c:33:14:00:e6:94:
         84:35:57:b3:34:ce:4a:7e:1f:28:d1:ed:1a:36:67:1c:7e:7c:
         e5:e5:84:fd:76:a2:b5:f0:46:87:71:64:1f:51:0c:5f:40:cc:
         ee:99:67:62:16:a1:0d:ef:71:94:fc:f2:1d:8c:53:ad:98:e8:
         bd:21:b6:da:d3:58:e9:9f:34:44:62:4d:5c:7b:03:e2:1b:97:
         ec:23:05:68:2a:00:2d:52:81:1a:3e:0e:9a:3b:12:5b:e0:be:
         45:5a:21:5f:08:56:7a:5e:de:f7:a2:a6:4c:23:68:ef:59:f7:
         8f:18:fe:06:05:07:80:ff:ff:7a:fe:63:46:14:4b:a6:14:46:
         91:8c:0e:3b:4e:8c:ea:48:b6:94:48:38:2f:90:b7:30:df:11:
         a9:9d:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:42 2026 by rpki-client