This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
File:                     W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json)
Hash identifier:          tMtSVJ0KATjpAEeaoMwCRLkFzNem6YMYQsqpOSY2F44=
Subject key identifier:   51:DE:97:48:52:3B:CF:38:B2:4A:FA:01:08:0E:7B:5F:0C:40:60:EC
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0CCF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
Manifest number:          0CC4
Signing time:             Sat 24 Jan 2026 17:52:08 +0000
Manifest this update:     Sat 24 Jan 2026 17:52:07 +0000
Manifest next update:     Sat 31 Jan 2026 17:52:07 +0000
Files and hashes:         1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: lThtBEHZZ9D8ZgVbPcPG5W1Dcdbflx1r1/t8gissLL0=)
                          2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: iEFdnNUSTVmlnEmHIkSfOkDzcc3pJG72lpQKbTvUl98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3279 (0xccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Jan 24 17:52:07 2026 GMT
            Not After : Jan 31 17:52:07 2026 GMT
        Subject: CN=697506c8-572b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:23:ca:f4:79:0e:cf:b0:d0:6a:af:30:cd:
                    ad:6d:c5:5e:52:fd:6b:69:52:30:86:97:e8:45:2d:
                    e2:9a:c1:b0:95:b1:db:80:24:a7:e6:7b:a4:17:83:
                    34:ad:41:7b:d8:8e:d3:39:c3:a6:db:3b:a1:a9:0c:
                    2c:24:03:18:0c:da:e9:e3:a8:14:20:17:8b:bf:d8:
                    be:78:a4:3a:27:dc:2a:1c:6b:71:1f:e6:5b:67:a9:
                    8b:af:58:35:3a:fb:60:a0:9b:54:8a:ef:ee:e3:0a:
                    40:79:dc:f3:de:57:5d:80:66:83:6a:9a:ca:0e:d3:
                    4a:97:cf:7e:e8:f1:23:43:f3:a7:39:ec:77:a6:18:
                    e7:51:33:d7:84:3e:9b:76:0a:cb:71:2c:06:1b:22:
                    17:f1:25:f9:ca:fd:9e:ae:df:08:ae:f7:5d:7a:93:
                    20:20:8f:01:7d:b2:b9:87:5b:a5:e2:f8:4a:f7:91:
                    ac:a8:15:9b:60:b9:1b:49:9a:f9:11:8d:0a:be:bb:
                    cb:e1:99:2b:9f:76:a8:24:47:0a:92:73:0f:7b:15:
                    48:cd:e3:00:cf:1e:c0:a1:12:3a:b1:15:d6:2d:c3:
                    8d:23:62:bc:0b:12:f2:76:94:27:ef:eb:d8:a1:15:
                    f7:fc:a8:68:14:c4:6c:16:86:97:87:88:36:7f:10:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DE:97:48:52:3B:CF:38:B2:4A:FA:01:08:0E:7B:5F:0C:40:60:EC
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:72:d2:9a:e6:19:48:30:0d:91:f3:8d:9e:82:6c:1e:9b:63:
         c2:ba:39:23:28:a3:0e:0d:54:e6:08:3b:3c:f3:f4:57:b7:49:
         e7:90:37:d5:ad:cd:09:3d:7f:f4:9d:0d:d3:07:cf:08:78:e2:
         cb:bf:bb:ba:10:f7:d5:8d:23:94:57:5d:df:5a:b4:72:04:61:
         de:34:ed:76:b4:74:de:44:b5:43:36:1f:9f:05:78:30:9d:3f:
         98:03:a2:0e:a8:c6:6a:36:a8:f5:53:3b:22:3f:f3:b2:2d:1f:
         98:20:5b:fa:d3:5b:09:68:22:6a:c7:12:bf:29:a1:82:52:64:
         32:d4:51:13:ce:b8:be:0e:1a:4c:55:94:7e:14:f6:dc:b9:11:
         3c:29:81:d5:6b:60:94:68:04:c4:3c:ac:7b:6c:c8:c2:45:20:
         58:9e:21:58:1f:59:9d:eb:92:53:ce:41:0a:01:0c:f1:40:24:
         cc:62:ce:49:eb:4f:41:90:84:90:d3:60:fe:0d:3e:77:ba:1f:
         3e:a7:a9:45:e4:81:7a:29:e3:27:72:b8:e8:10:d4:01:fc:36:
         b8:8a:98:1f:d5:ee:f6:ae:e4:a1:a3:47:db:53:6e:6b:a0:49:
         2d:06:16:58:6a:12:8b:08:db:67:c9:32:12:04:33:fb:ab:db:
         dc:36:56:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY0QTExMTAvBgNVBAUTKDVCRDk3QzMxRUM3OEM2RjE1N0Q3NzJDMUJCNTc2Qjgw
MjQ4MkI3MjgwHhcNMjYwMTI0MTc1MjA3WhcNMjYwMTMxMTc1MjA3WjAYMRYwFAYD
VQQDDA02OTc1MDZjOC01NzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmXQjyvR5Ds+w0GqvMM2tbcVeUv1raVIwhpfoRS3imsGwlbHbgCSn5nukF4M0
rUF72I7TOcOm2zuhqQwsJAMYDNrp46gUIBeLv9i+eKQ6J9wqHGtxH+ZbZ6mLr1g1
OvtgoJtUiu/u4wpAedzz3lddgGaDaprKDtNKl89+6PEjQ/OnOex3phjnUTPXhD6b
dgrLcSwGGyIX8SX5yv2ert8IrvddepMgII8BfbK5h1ul4vhK95GsqBWbYLkbSZr5
EY0KvrvL4Zkrn3aoJEcKknMPexVIzeMAzx7AoRI6sRXWLcONI2K8CxLydpQn7+vY
oRX3/KhoFMRsFoaXh4g2fxCg0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHel0hS
O884skr6AQgOe18MQGDsMB8GA1UdIwQYMBaAFFvZfDHseMbxV9dywbtXa4Akgrco
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRBMS82QjdENjlBNjA0
NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2RlgxM0xCdTFkcmdDU0N0
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c5bDhNZXg0eHZGWDEzTEJ1MWRyZ0NTQ3R5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjRBMS82QjdENjlBNjA0NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2
RlgxM0xCdTFkcmdDU0N0eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPctKa5hlIMA2R842egmwem2PCujkjKKMODVTmCDs88/RXt0nnkDfV
rc0JPX/0nQ3TB88IeOLLv7u6EPfVjSOUV13fWrRyBGHeNO12tHTeRLVDNh+fBXgw
nT+YA6IOqMZqNqj1UzsiP/OyLR+YIFv601sJaCJqxxK/KaGCUmQy1FETzri+DhpM
VZR+FPbcuRE8KYHVa2CUaATEPKx7bMjCRSBYniFYH1md65JTzkEKAQzxQCTMYs5J
609BkISQ02D+DT53uh8+p6lF5IF6KeMncrjoENQB/Da4ipgf1e72ruSho0fbU25r
oEktBhZYahKLCNtnyTISBDP7q9vcNlbB
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:59 2026 by rpki-client