This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File:                     WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier:          JmszSJ0KmzMAjyGO79AOsBeqggwyJBlzDfnzVYZIAR8=
Subject key identifier:   F1:A4:86:4C:4C:70:1B:9A:4A:67:05:CD:97:09:15:81:7A:AE:78:C0
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       13F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number:          13C6
Signing time:             Sat 24 Jan 2026 14:52:29 +0000
Manifest this update:     Sat 24 Jan 2026 14:52:28 +0000
Manifest next update:     Sat 31 Jan 2026 14:52:28 +0000
Files and hashes:         1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: xIuk3HuvU7ZRRJ9WdrAfDA2oEXDkH/1ywsOsHHH3NCI=)
                          2: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=)
                          3: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=)
                          4: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: 0YA+4PX9JYpc8QBE3JHr5LKBbRzHe9X88/5AFsZZNig=)
                          5: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=)
                          6: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=)
                          7: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=)
                          8: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=)
                          9: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5104 (0x13f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Jan 24 14:52:28 2026 GMT
            Not After : Jan 31 14:52:28 2026 GMT
        Subject: CN=6974dcac-979b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:9f:16:c2:b5:cc:53:0c:42:91:c3:9d:f7:
                    27:e3:91:b4:6c:9b:42:29:62:f3:51:c2:8a:10:2f:
                    49:bd:4a:26:a9:b5:33:4f:fb:0e:4d:2b:bb:f4:5e:
                    6a:7b:62:3f:d2:c3:b7:69:ce:27:ab:e0:39:df:cf:
                    c1:37:a0:0a:89:fc:16:8d:bb:e9:86:26:77:d0:e3:
                    e5:21:2b:c1:ee:42:9d:54:5c:79:f7:e2:1c:3f:0a:
                    67:41:35:5a:84:dd:96:55:3b:6e:6e:a2:c9:46:e6:
                    50:3b:2c:94:98:0b:cd:ab:fe:44:71:d1:3c:d5:27:
                    67:5f:7e:7b:e2:62:d3:6e:bd:44:72:ab:0f:cf:6b:
                    dc:9e:82:05:97:63:ca:e1:fe:54:aa:07:6f:2b:9e:
                    56:b2:c2:b0:c0:f2:c5:39:40:68:d9:67:0f:13:21:
                    d7:cb:5b:df:d4:26:fc:f3:ff:ae:3f:7f:a4:ce:56:
                    d7:40:b3:85:10:25:83:67:ea:b2:34:00:db:7c:20:
                    1f:9f:9b:ad:55:72:b9:d8:54:ea:a9:62:04:78:11:
                    ee:80:73:e4:d3:7e:a8:37:c8:e9:64:41:ec:94:c5:
                    25:6b:95:ba:bf:3b:2b:ca:29:fa:de:24:be:4e:f3:
                    f8:aa:25:f6:75:f4:9d:6c:6b:25:11:aa:2b:14:09:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A4:86:4C:4C:70:1B:9A:4A:67:05:CD:97:09:15:81:7A:AE:78:C0
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:21:cc:0f:c2:7e:b6:63:6a:2f:c9:e9:be:11:b6:02:8a:2a:
         3e:80:bb:41:c3:30:e8:9a:0c:ab:f8:9c:c4:a1:01:bb:86:4f:
         02:c9:73:ed:da:20:25:9c:de:f1:24:28:e8:65:74:65:01:64:
         04:26:40:30:93:0a:61:da:23:b7:d4:6e:06:3e:09:cc:aa:ca:
         07:8b:c4:77:05:de:61:3e:29:6c:c2:6a:a9:ad:6c:d6:a7:5a:
         ad:2b:14:c3:d3:17:50:6c:28:a5:d1:e8:2f:fd:42:81:ce:6b:
         92:73:f6:ab:25:ea:6a:9b:4c:63:3c:e1:66:4c:9d:84:32:7a:
         14:ef:f1:97:f4:9e:66:d9:76:3e:db:2e:82:47:ee:86:7b:7b:
         f7:97:f8:a6:c1:c9:78:72:f1:0e:fa:03:4a:9a:48:fb:6e:c8:
         79:41:bd:88:28:51:72:b9:84:25:93:26:be:d3:3c:a9:94:1e:
         fc:ff:e1:49:96:1b:c9:85:91:4c:07:aa:d9:0e:06:b5:b1:c0:
         0d:1f:2a:16:2d:bc:34:c0:b5:34:6c:1a:aa:d9:fd:cf:74:ca:
         86:aa:4e:4e:a8:d5:31:ea:56:26:49:8b:3f:0b:b2:cf:bb:44:
         2d:b4:f7:ff:54:b1:d8:f4:ec:87:c4:cb:5b:e4:8f:3e:a7:73:
         2a:d3:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:24:33 2026 by rpki-client