This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File:                     w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier:          13Dl4U2I7pas6vwlBNi5iJzCCX9ypsHE19CY2mVPbAo=
Subject key identifier:   32:2D:5C:4F:4C:72:F9:94:98:C8:A8:6D:73:12:AC:04:79:95:DD:16
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer:       /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number:          01AC
Signing time:             Sun 25 Jan 2026 02:55:56 +0000
Manifest this update:     Sun 25 Jan 2026 02:55:56 +0000
Manifest next update:     Sun 01 Feb 2026 02:55:56 +0000
Files and hashes:         1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: sqUvO/7veUS8fqv2GY6UFNHCp+Azmac2hujfWXns1qE=)
                          2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: gez5Qlcfm6c6NA79ftuR/sN6GbAgowRygpjom7unUmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
                          rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
        Validity
            Not Before: Jan 25 02:55:56 2026 GMT
            Not After : Feb  1 02:55:56 2026 GMT
        Subject: CN=6975863c-fef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:2e:b8:1e:af:7f:f5:63:87:94:54:8e:cf:
                    10:9f:83:6b:11:bb:91:0c:5d:77:0a:66:a2:76:ff:
                    d3:0a:a7:b9:49:a4:34:40:81:60:5a:2b:4b:59:29:
                    20:59:8b:cc:7c:e8:b9:03:06:36:ce:56:30:2e:20:
                    cd:68:e0:76:16:e9:83:c9:a3:a9:69:1f:e2:7e:bd:
                    ad:c3:0f:1e:0a:7b:0a:a0:8d:ff:ee:f1:74:22:f9:
                    01:d0:79:de:aa:f1:07:ee:4a:89:fa:0b:f0:e0:ec:
                    79:36:64:53:10:7d:74:01:4f:f5:22:4a:de:75:ea:
                    8a:12:d8:dd:93:6a:a6:a4:39:69:67:bd:dc:94:3d:
                    36:8e:a8:ca:38:fd:4a:f4:4d:b9:67:43:d1:bb:4e:
                    41:70:69:92:47:ca:dc:c3:2e:91:77:7c:48:00:a5:
                    44:36:f8:e8:88:6b:fd:9a:0d:b6:92:d5:4e:38:0c:
                    1d:65:18:f1:e7:fb:36:b5:8d:7b:1a:dc:56:0a:ab:
                    a6:29:a7:ad:1d:13:99:d5:8b:7f:c8:7a:5c:eb:ae:
                    a0:d9:83:ed:1a:3b:12:b4:ee:2c:53:a2:85:b3:c2:
                    88:5d:5c:d6:55:9a:6e:56:40:0f:5d:09:7f:ea:37:
                    65:e5:c1:53:cc:18:13:05:81:8e:f6:a1:05:f2:c1:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2D:5C:4F:4C:72:F9:94:98:C8:A8:6D:73:12:AC:04:79:95:DD:16
            X509v3 Authority Key Identifier:
                keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4b:a5:5a:da:08:a2:74:94:e1:68:60:8e:b1:d2:da:ff:7b:
         da:b3:50:18:96:21:17:4e:c6:6e:20:1e:6f:1c:62:7e:6b:b5:
         d8:28:27:8a:5a:80:55:6d:41:19:2a:2b:87:b5:e5:15:ce:c3:
         c5:0d:01:d5:fa:b1:f1:3f:39:54:5d:2b:87:a4:f6:98:dd:91:
         12:1f:41:8a:13:e8:a5:fd:e0:c5:0b:5f:1b:fb:65:c9:ed:d9:
         ef:90:83:12:df:36:22:d1:4c:5f:54:70:20:75:47:b3:dd:d7:
         e2:8b:2d:ab:14:a8:cb:11:e1:d4:11:fc:1e:44:30:94:89:84:
         a3:07:d0:c8:5c:8c:6d:37:c9:01:1f:d4:e2:80:4a:cb:e8:3b:
         d6:9f:9c:8f:6b:5f:44:e4:6f:8a:84:f0:6d:8b:18:c2:c4:50:
         73:f5:bb:8e:43:df:bb:4d:d7:e0:a1:b6:9f:2a:ec:c8:eb:3d:
         ed:8d:8c:37:c0:7d:6e:ad:b7:b5:35:a2:3b:20:36:ca:cf:96:
         1b:3b:26:9e:1e:cf:b1:88:ff:c3:05:cb:b8:24:84:d0:82:83:
         71:f1:4b:a9:23:98:0e:7d:df:dc:3d:e3:88:23:76:01:46:af:
         c4:b9:3d:97:9d:01:f5:e8:d7:08:df:9c:3b:d7:a2:09:9a:50:
         95:9d:4a:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF
MkNDQkIyNUEwHhcNMjYwMTI1MDI1NTU2WhcNMjYwMjAxMDI1NTU2WjAYMRYwFAYD
VQQDDA02OTc1ODYzYy1mZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlZUuuB6vf/Vjh5RUjs8Qn4NrEbuRDF13Cmaidv/TCqe5SaQ0QIFgWitLWSkg
WYvMfOi5AwY2zlYwLiDNaOB2FumDyaOpaR/ifr2tww8eCnsKoI3/7vF0IvkB0Hne
qvEH7kqJ+gvw4Ox5NmRTEH10AU/1IkredeqKEtjdk2qmpDlpZ73clD02jqjKOP1K
9E25Z0PRu05BcGmSR8rcwy6Rd3xIAKVENvjoiGv9mg22ktVOOAwdZRjx5/s2tY17
GtxWCqumKaetHROZ1Yt/yHpc666g2YPtGjsStO4sU6KFs8KIXVzWVZpuVkAPXQl/
6jdl5cFTzBgTBYGO9qEF8sGxyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDItXE9M
cvmUmMiobXMSrAR5ld0WMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB
QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o
NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2S6Va2giidJThaGCOsdLa/3vas1AYliEXTsZuIB5vHGJ+a7XYKCeK
WoBVbUEZKiuHteUVzsPFDQHV+rHxPzlUXSuHpPaY3ZESH0GKE+il/eDFC18b+2XJ
7dnvkIMS3zYi0UxfVHAgdUez3dfiiy2rFKjLEeHUEfweRDCUiYSjB9DIXIxtN8kB
H9TigErL6DvWn5yPa19E5G+KhPBtixjCxFBz9buOQ9+7TdfgobafKuzI6z3tjYw3
wH1urbe1NaI7IDbKz5YbOyaeHs+xiP/DBcu4JITQgoNx8UupI5gOfd/cPeOII3YB
Rq/EuT2XnQH16NcI35w716IJmlCVnUpa
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:33:34 2026 by rpki-client