This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File:                     WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier:          0k7aWIkQfanqZJ0pE5jDqxJIZXOkeiOWjoFkIuO2xLE=
Subject key identifier:   AC:D7:6D:3A:BA:95:D4:00:8B:41:11:48:D0:D7:93:71:B2:09:C5:F8
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer:       /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial:       04FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number:          04F9
Signing time:             Sat 24 Jan 2026 22:54:28 +0000
Manifest this update:     Sat 24 Jan 2026 22:54:27 +0000
Manifest next update:     Sat 31 Jan 2026 22:54:27 +0000
Files and hashes:         1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: q7W4ogGcnvGndXsPHq/2G9S7GAKYfI2oQygVI0qUOIA=)
                          2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: flGZY0OZ/isSxgXY6JSmW0PQxMoPLoOfi+JFDAY+z3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
                          rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
        Validity
            Not Before: Jan 24 22:54:27 2026 GMT
            Not After : Jan 31 22:54:27 2026 GMT
        Subject: CN=69754da4-86f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:0a:6b:33:a5:22:b8:b9:c6:27:44:d9:e0:
                    8e:d8:6f:8b:bf:88:2e:ce:d9:16:3b:f8:eb:c9:82:
                    6d:04:6d:e7:cf:5c:f6:c7:b3:ad:4b:18:1a:e1:27:
                    a6:01:61:50:24:96:7a:c7:6e:e8:51:78:0e:cf:8c:
                    e7:cb:32:ea:c0:21:98:75:b8:c7:e8:9c:f3:bd:72:
                    3d:15:46:d4:63:4b:c4:82:06:f5:3c:6f:25:6e:d5:
                    3a:3e:88:2c:e3:5c:fb:25:5a:ea:2b:2c:1c:55:d6:
                    b1:2b:bf:25:55:5e:1a:bb:f4:e0:bf:9a:85:20:42:
                    34:d8:93:8b:a2:85:23:5f:7e:6f:32:d1:38:d7:46:
                    0f:a1:b8:77:57:ac:5b:ed:bf:58:90:62:25:c4:a3:
                    db:43:76:e6:0c:cc:b7:e6:79:c3:57:ce:c6:aa:22:
                    f2:b8:b7:9d:21:f9:ae:b7:0c:34:3d:76:7f:0f:91:
                    e5:7a:cb:7c:dc:80:f4:df:2d:02:a2:4e:83:04:a7:
                    68:ba:70:01:16:db:33:f4:64:51:f6:29:45:cb:a3:
                    b5:91:4a:ff:85:00:6a:49:72:09:f6:e2:fb:0e:1f:
                    65:21:30:ff:ef:53:56:36:a6:b9:59:c3:27:dd:4e:
                    fc:01:d9:17:47:9b:ae:47:e4:f4:51:f5:94:32:9a:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D7:6D:3A:BA:95:D4:00:8B:41:11:48:D0:D7:93:71:B2:09:C5:F8
            X509v3 Authority Key Identifier:
                keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:17:bf:47:62:ea:f6:28:48:f4:10:e7:81:e9:a2:c7:0d:8a:
         6b:65:dd:4e:bb:fb:53:8c:a8:13:cd:c2:ad:11:e1:48:a4:65:
         a5:a4:fe:69:dc:99:44:b2:c8:4e:76:c7:9b:3e:bc:a9:c0:ac:
         7b:05:e9:70:f8:0f:5e:4a:9d:cc:66:9d:6e:25:36:8f:cb:20:
         4a:52:2f:0f:9b:d9:fa:14:fb:80:15:eb:f5:b4:ef:c4:38:ca:
         de:16:43:06:c4:4d:05:c4:aa:d5:47:61:7e:25:14:18:08:21:
         f2:f2:40:7a:f0:6c:3d:ff:eb:04:32:ca:57:d7:b7:71:bf:f8:
         ab:5a:85:6e:ae:2a:f1:74:e2:51:05:28:b8:c5:1b:fc:6b:19:
         94:f8:1d:d1:68:f2:c8:74:cf:f9:46:97:85:d8:20:e8:f5:2e:
         b1:9b:dc:90:f8:5b:d5:10:0a:0e:55:d9:b2:0c:fe:0d:14:0a:
         d2:51:ce:af:82:42:5b:2b:d0:5c:22:e8:0b:41:dd:6c:28:ca:
         ae:07:2b:97:bf:21:55:2c:63:0e:5d:c6:a6:1a:46:03:4c:e9:
         22:4c:87:ae:d6:5a:0d:c1:68:bf:0e:9a:d8:0f:d4:26:2a:28:
         58:da:99:fb:90:7c:15:b7:8e:ca:fd:f7:d3:87:4e:13:7c:39:
         57:c5:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:47 2026 by rpki-client