This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
File:                     W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json)
Hash identifier:          tMrO2vP6OoZqlSJodz4SK7E5Jpr3nOPo435P2eWVkMw=
Subject key identifier:   52:73:B7:DF:FE:27:95:61:83:6C:85:40:1E:AF:B7:E3:41:78:93:C8
Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F
Certificate issuer:       /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
Manifest number:          0152
Signing time:             Sun 25 Jan 2026 03:26:31 +0000
Manifest this update:     Sun 25 Jan 2026 03:26:30 +0000
Manifest next update:     Sun 01 Feb 2026 03:26:30 +0000
Files and hashes:         1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: xJ66Xz/HOTjWSqOF3BmTvtuK6gy1LqS5DoCsDebOAtY=)
                          2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl
                          rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
        Validity
            Not Before: Jan 25 03:26:30 2026 GMT
            Not After : Feb  1 03:26:30 2026 GMT
        Subject: CN=69758d66-b062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:51:ad:bc:ae:44:4f:e7:32:37:c4:a7:f5:
                    69:eb:c3:49:a5:0f:13:d9:85:c7:b3:03:ca:9e:b1:
                    ff:e3:9f:a2:47:6c:c2:6e:9e:cf:44:ea:b5:8f:23:
                    d4:76:84:5a:90:0c:b7:00:e4:d9:60:d5:94:69:e9:
                    2f:68:02:9b:cd:95:ac:a1:ad:30:64:2e:64:80:b2:
                    b3:70:c4:60:15:e3:db:84:aa:c7:02:a1:ad:31:b0:
                    3d:56:8d:7d:0b:02:d1:04:e6:7e:8a:94:33:10:f9:
                    e6:84:56:8f:59:cd:65:75:16:9d:06:10:ad:0d:d9:
                    58:31:8e:2d:e5:73:f8:cf:3c:e1:ff:e4:3b:94:93:
                    e5:9a:ac:b7:24:5a:19:c6:3b:d8:c6:a6:bf:53:99:
                    62:19:d4:ed:10:7e:59:26:6f:f2:b4:78:85:73:3f:
                    a3:10:cc:67:40:8e:5a:3a:81:e9:0a:3a:49:e9:7f:
                    6e:0b:be:0d:0a:6a:53:fd:8a:f3:14:c3:f0:1d:9e:
                    0b:5a:ce:63:b2:74:02:2e:2c:be:33:42:c9:7c:e9:
                    4f:b8:15:24:99:8c:8a:9d:f3:ad:11:b4:98:19:14:
                    06:f8:5c:53:ad:8c:0f:c6:a0:59:f1:aa:7e:13:9b:
                    90:7e:e6:39:3d:13:35:00:89:97:83:22:b6:75:4b:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:73:B7:DF:FE:27:95:61:83:6C:85:40:1E:AF:B7:E3:41:78:93:C8
            X509v3 Authority Key Identifier:
                keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:e0:d9:38:5c:08:a5:b4:32:56:7e:a6:be:7c:33:b4:ba:
         ec:cb:4f:fd:c1:0c:3f:db:b3:cf:29:5d:da:23:2b:55:5a:88:
         f0:f2:c2:d9:29:d1:5d:e2:59:85:2c:de:07:91:6e:4a:cb:84:
         ef:79:c7:ab:f5:f0:ca:ca:f0:7e:90:38:0a:d8:60:40:2c:f3:
         6f:65:93:a1:f4:24:83:f5:84:05:6d:ef:ed:2a:d1:d0:8d:8c:
         0f:4a:7f:7c:b4:e7:fd:32:01:da:3c:62:8d:14:e4:80:75:d4:
         1f:96:c5:05:1b:eb:3c:af:15:26:62:f1:bb:e3:26:1b:e7:b7:
         90:4a:a5:a3:13:07:e4:2c:c5:72:22:88:e6:8b:9b:f2:c9:e8:
         a4:b6:fd:ae:11:fd:58:5f:da:22:23:b1:f3:18:f1:cf:9b:eb:
         a3:d3:c8:8f:15:88:9a:ce:e0:ec:18:d7:05:6e:97:c5:31:bc:
         38:0f:71:89:24:f9:57:a2:45:d4:28:1a:af:f6:e3:ae:01:74:
         89:fc:b6:fd:11:f8:fb:06:94:98:b3:13:09:ef:e1:8b:38:0a:
         3f:52:a0:28:8f:8d:91:47:f5:34:d4:2d:cd:f8:dc:80:5f:43:
         1a:a6:52:9f:a9:2d:68:cc:22:d4:d9:47:a2:ad:56:a8:28:26:
         2a:a6:18:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF
REMwRkRFMkYwHhcNMjYwMTI1MDMyNjMwWhcNMjYwMjAxMDMyNjMwWjAYMRYwFAYD
VQQDDA02OTc1OGQ2Ni1iMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApbxRrbyuRE/nMjfEp/Vp68NJpQ8T2YXHswPKnrH/45+iR2zCbp7PROq1jyPU
doRakAy3AOTZYNWUaekvaAKbzZWsoa0wZC5kgLKzcMRgFePbhKrHAqGtMbA9Vo19
CwLRBOZ+ipQzEPnmhFaPWc1ldRadBhCtDdlYMY4t5XP4zzzh/+Q7lJPlmqy3JFoZ
xjvYxqa/U5liGdTtEH5ZJm/ytHiFcz+jEMxnQI5aOoHpCjpJ6X9uC74NCmpT/Yrz
FMPwHZ4LWs5jsnQCLiy+M0LJfOlPuBUkmYyKnfOtEbSYGRQG+FxTrYwPxqBZ8ap+
E5uQfuY5PRM1AImXgyK2dUtoXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJzt9/+
J5Vhg2yFQB6vt+NBeJPIMB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw
QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW
VzFVbE5qMFNOY1h0d1AzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAR/+DZOFwIpbQyVn6mvnwztLrsy0/9wQw/27PPKV3aIytVWojw8sLZ
KdFd4lmFLN4HkW5Ky4Tvecer9fDKyvB+kDgK2GBALPNvZZOh9CSD9YQFbe/tKtHQ
jYwPSn98tOf9MgHaPGKNFOSAddQflsUFG+s8rxUmYvG74yYb57eQSqWjEwfkLMVy
Iojmi5vyyeiktv2uEf1YX9oiI7HzGPHPm+uj08iPFYiazuDsGNcFbpfFMbw4D3GJ
JPlXokXUKBqv9uOuAXSJ/Lb9Efj7BpSYsxMJ7+GLOAo/UqAoj42RR/U01C3N+NyA
X0MaplKfqS1ozCLU2UeirVaoKCYqphj1
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:14:26 2026 by rpki-client