This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File:                     wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier:          2jnJxAHiQJ8+IdqStupe9t2lJ2yya3jfwaqlVtm+DBU=
Subject key identifier:   69:8C:D3:32:6F:33:1B:4F:05:93:FF:54:AD:99:4A:6C:02:1C:51:6B
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer:       /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number:          DA
Signing time:             Sun 25 Jan 2026 04:51:06 +0000
Manifest this update:     Sun 25 Jan 2026 04:51:05 +0000
Manifest next update:     Sun 01 Feb 2026 04:51:05 +0000
Files and hashes:         1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: rnIFXkjSRJJMWKDJvmrNLls05gFXSN/Dp6bSoRNtl/o=)
                          2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: Mzg80jeYIG3P35Y+O3KXXg2nXRf/rxFmyz1OLT1QE60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
                          rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
        Validity
            Not Before: Jan 25 04:51:05 2026 GMT
            Not After : Feb  1 04:51:05 2026 GMT
        Subject: CN=6975a13a-00f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:d0:ed:04:0b:57:49:38:2b:f1:b7:af:59:
                    07:1c:3b:40:95:85:53:8b:ce:31:3e:e7:fa:47:5f:
                    c6:c8:ed:95:64:71:fd:bf:fd:a5:18:6a:52:f3:40:
                    15:42:33:0c:18:53:f0:90:ff:7f:52:6e:a1:50:d1:
                    3b:39:14:91:05:a0:cb:c4:24:86:0c:25:ed:a3:5a:
                    ce:7b:cd:07:ca:da:a8:4f:7e:97:e8:c1:c8:32:98:
                    10:aa:30:3a:18:91:a0:6e:69:8c:96:cb:32:63:8c:
                    1e:d6:43:fc:f3:ee:2f:e2:d8:df:ad:37:b3:d5:84:
                    8f:36:bb:20:20:19:74:78:b3:05:43:af:46:8b:c6:
                    7c:2d:41:9a:4f:16:db:d6:03:77:20:ea:e3:72:a1:
                    91:7a:6a:42:7a:81:e9:77:04:d8:ba:dc:d9:e1:dd:
                    f8:f9:7b:d5:1e:b0:10:44:d2:85:d8:c5:1c:17:c2:
                    c8:74:4b:b3:14:b0:c1:43:8a:63:4f:19:bb:ac:e1:
                    d1:4c:ba:5b:47:b4:17:e0:a9:fd:f4:b0:cf:cc:56:
                    20:e2:78:e6:f4:eb:4f:b6:db:ed:fc:99:9c:ee:30:
                    da:f7:67:ec:4c:3d:7b:d6:9d:0a:cc:a6:51:b0:6e:
                    6e:72:5a:8b:94:48:c4:6d:2e:20:ab:d4:86:ec:e5:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:D3:32:6F:33:1B:4F:05:93:FF:54:AD:99:4A:6C:02:1C:51:6B
            X509v3 Authority Key Identifier:
                keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:20:81:14:95:23:f5:70:90:22:18:b3:e6:ae:d5:b6:26:04:
         f6:be:bb:0a:60:67:f8:1f:42:3a:76:ef:20:17:c0:24:26:7d:
         ae:d2:5f:97:13:33:20:15:d7:a3:fc:c6:a1:7e:cc:59:f5:02:
         ac:40:da:29:e0:43:52:28:2e:d7:9a:0c:45:6a:2a:ed:5e:30:
         32:67:df:d9:c6:02:04:c5:91:c8:1d:7d:f9:aa:e7:f8:e2:57:
         fa:7b:a2:b0:c0:05:29:ce:d0:b6:50:27:e0:e1:08:ac:31:5b:
         b0:ef:2b:26:06:37:2d:42:9a:43:7c:85:22:99:37:70:df:3d:
         52:2a:8e:a4:28:24:3b:66:7b:73:d6:ea:dc:b7:5d:14:e3:c2:
         f0:56:db:c0:2f:1f:80:87:3d:0d:02:dd:53:67:97:e1:1e:07:
         eb:01:ff:ca:0f:ee:96:d9:4d:2f:0d:0c:9e:9f:19:72:e2:26:
         4d:30:d5:9b:11:45:19:96:fc:e5:d2:76:62:60:96:ad:64:35:
         e5:3d:e1:3d:a0:59:c3:3b:cf:00:2d:af:46:ee:e7:34:11:07:
         dc:2e:6b:8a:0e:59:9e:d8:7f:0e:4b:2c:20:ea:32:df:67:e1:
         e6:73:9b:1e:83:b1:70:be:a9:2e:7a:5c:44:af:9c:c1:86:a5:
         7f:a0:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:33:40 2026 by rpki-client