This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
File:                     wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json)
Hash identifier:          wScAmRXxoLnwUcRnxtRzbhw5nt5IqqNJTvTGF8fuCew=
Subject key identifier:   C1:88:26:55:A3:43:AB:7C:79:C8:D7:4E:A3:2E:54:26:0F:32:73:56
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
Manifest number:          01A5
Signing time:             Fri 23 Jan 2026 02:34:32 +0000
Manifest this update:     Fri 23 Jan 2026 02:34:31 +0000
Manifest next update:     Fri 30 Jan 2026 02:34:31 +0000
Files and hashes:         1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: lGN8nqTaqJPWflObtKdWL+PIh6aOTf7ijVNazDaTRDw=)
                          2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: c3SWUfV7Pzswi2wVxw1lSd2ayx+ZUQtxdR0BtT91QSI=)
                          3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: 4PWxSJvGPsYEjGtgHYM8obqb8f7X6eyOT+IKt9t0/2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Jan 23 02:34:31 2026 GMT
            Not After : Jan 30 02:34:31 2026 GMT
        Subject: CN=6972de37-ffab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:f3:d4:8f:52:35:07:0f:2d:aa:2d:be:7f:
                    ed:a5:5b:f2:f9:bc:cf:b3:a4:bb:5c:58:fa:e5:a8:
                    93:5d:49:f4:7e:7c:39:00:39:6a:fc:4c:7f:54:fc:
                    90:a3:8e:1f:cd:3d:59:ea:51:41:29:23:bd:50:a7:
                    d3:34:a1:f7:a8:cf:87:2a:0f:6f:e5:c9:1c:f5:6b:
                    4e:19:80:b2:20:00:58:08:99:15:da:b5:44:fa:6b:
                    ad:8b:bc:c8:8f:45:26:4e:c0:21:f8:d6:b5:cc:62:
                    67:c9:32:09:4b:6b:2d:02:82:a1:e2:af:61:9a:19:
                    7e:a9:2d:da:80:8a:db:d0:34:dc:48:e3:0a:3d:48:
                    0b:22:71:dd:33:10:b0:f9:c9:26:9e:82:de:1d:68:
                    cd:34:d2:de:01:4f:be:20:a0:61:c0:de:75:0e:c6:
                    48:26:47:fc:99:3b:16:24:6e:ac:c5:42:d1:67:9c:
                    10:96:a1:b5:07:c3:32:24:1d:7b:ca:21:33:c4:42:
                    64:7f:c1:c0:1f:ae:09:e6:62:52:2e:9d:86:f3:6f:
                    40:e8:42:42:91:4e:c4:50:97:f9:6e:c5:1b:4f:78:
                    be:73:77:d3:c3:29:78:ea:48:4d:8a:69:e3:6b:8d:
                    b9:3d:a6:96:5e:84:6e:b9:c1:21:66:b5:18:29:92:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:88:26:55:A3:43:AB:7C:79:C8:D7:4E:A3:2E:54:26:0F:32:73:56
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2b:d4:1b:2b:0f:fd:25:de:20:65:47:78:40:6b:9d:ea:26:
         6e:d7:be:fa:ec:43:ee:8a:4a:c8:77:ca:4d:17:1a:e4:0a:d4:
         02:74:43:26:c7:fd:2e:f4:5d:8c:87:7f:f8:f8:ee:f6:9b:36:
         59:a5:93:67:08:b0:56:31:fd:69:df:17:38:b1:38:a1:cd:4e:
         b1:04:79:9e:66:25:fa:17:d1:a4:9a:9d:54:c5:66:e7:c6:f8:
         83:b5:73:d8:6e:fe:de:e0:9d:01:25:56:7c:a1:b7:3c:b7:0d:
         94:5e:9b:41:da:25:6b:52:fa:55:f3:1f:de:e5:e2:ab:d5:72:
         c0:c9:20:c7:7e:0f:e3:3d:73:67:63:e1:82:55:69:e2:b2:ac:
         7e:b7:ef:02:86:db:db:a6:10:f7:3f:0e:f3:9c:24:1c:ca:f8:
         df:73:2f:62:8e:ab:a9:91:94:9f:46:5e:cc:da:c7:24:64:30:
         ef:3f:5d:ec:50:68:e9:39:a5:53:a8:17:50:57:b2:7e:b6:67:
         2a:3d:e8:4f:e9:0a:39:8a:17:40:28:5f:38:c5:4e:d3:ea:df:
         35:e0:4e:bd:da:26:0c:47:14:38:78:d5:6c:fa:d3:e3:00:26:
         ba:92:26:7e:3b:4d:63:66:f5:ca:33:7b:d6:d2:95:16:78:17:
         65:fb:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:56 2026 by rpki-client