This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
File:                     RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json)
Hash identifier:          Uo2LpcnoyC5qcY7JCETXuoH1QRWk+3hoYR7N56IsO5c=
Subject key identifier:   FB:7C:F3:1D:CF:9A:9D:32:57:21:6C:71:97:93:F3:2F:6F:DD:C8:F6
Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75
Certificate issuer:       /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
Manifest number:          033C
Signing time:             Sun 25 Jan 2026 00:12:01 +0000
Manifest this update:     Sun 25 Jan 2026 00:12:01 +0000
Manifest next update:     Sun 01 Feb 2026 00:12:01 +0000
Files and hashes:         1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: fXtI48ObiMOy39Ekgk0RH1jOXFXPMNuxYo2s6I1tIWA=)
                          2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: Q4rmj8ZW9q3ZMhMYZknk/X38qXU9tpt3Fwr+6cA845w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl
                          rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
        Validity
            Not Before: Jan 25 00:12:01 2026 GMT
            Not After : Feb  1 00:12:01 2026 GMT
        Subject: CN=69755fd1-c7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:7a:75:d5:b7:bb:25:c9:ea:03:16:c4:e3:
                    b7:12:df:02:cc:38:5f:86:47:bf:24:72:24:04:d0:
                    34:f2:ac:d2:97:ed:97:47:1d:36:25:49:f3:dc:cf:
                    81:de:40:e1:f5:21:89:a3:05:54:c5:2f:c0:63:e4:
                    7c:95:23:1b:17:e5:95:78:8e:3f:9c:18:0d:88:53:
                    5f:e1:51:69:f9:c5:dd:be:e9:ec:e8:6c:41:32:ff:
                    a8:23:2f:3f:da:e5:79:d2:ad:31:43:08:df:56:4a:
                    34:eb:c1:04:63:1b:1e:c7:9e:49:37:b6:e9:66:cb:
                    52:0e:51:25:bb:6a:77:51:af:68:27:16:d3:b6:22:
                    64:1e:ce:82:66:6d:b5:be:52:a4:2d:85:10:e8:e2:
                    c6:d3:be:1b:3e:c2:ff:ba:15:9f:0f:53:d7:8b:91:
                    b7:e4:c0:7b:40:ac:32:86:e1:b8:ac:13:dc:7b:00:
                    0b:ce:0a:b3:2a:d5:a4:7d:b1:82:b4:91:af:fc:01:
                    cd:76:b7:fe:b3:6a:5e:2c:3f:25:ad:40:66:37:ac:
                    b4:66:52:30:91:bd:59:c0:89:c4:9f:64:86:39:45:
                    2c:4e:a5:34:02:2b:41:65:cd:63:b6:94:6a:b7:77:
                    31:69:49:91:f6:6a:20:b8:31:12:f1:96:2f:6d:72:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7C:F3:1D:CF:9A:9D:32:57:21:6C:71:97:93:F3:2F:6F:DD:C8:F6
            X509v3 Authority Key Identifier:
                keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:a4:de:89:25:b6:ad:10:fb:aa:d1:41:6c:cb:5d:c5:98:
         81:19:60:b2:58:35:e2:1e:61:a9:79:92:3f:44:4d:9f:0f:27:
         a3:d8:4c:4e:b4:e0:46:cf:39:be:23:3e:ec:76:bc:be:5f:6a:
         cc:1c:c2:cd:62:83:0c:4f:d5:04:2c:54:40:c0:98:51:59:17:
         0a:19:fa:63:7c:f9:0b:ac:07:9b:52:c4:d0:c2:87:50:0e:0b:
         64:ca:9e:b3:4a:77:0f:bc:42:04:0d:a2:97:b7:32:38:91:af:
         4c:3d:87:f2:a7:0e:c0:e0:a2:e1:de:ad:e8:aa:c2:b3:b7:c8:
         03:21:69:96:05:70:14:be:98:ff:08:5f:c8:09:8b:5c:1f:70:
         81:ee:4e:e7:a4:1a:d2:47:87:bf:04:97:2d:b6:07:8e:33:72:
         34:2d:85:7f:9e:6c:58:26:64:06:5d:75:e5:86:2d:8b:67:55:
         8c:2d:03:25:c1:0b:f4:c6:5c:b1:84:6f:25:99:d1:71:d6:d2:
         9b:ee:b0:1d:41:9a:ba:06:c5:c1:6e:b3:dc:9f:26:24:71:f2:
         9a:9c:95:5b:b6:5c:55:53:d1:36:e2:61:86:d9:03:14:0c:6d:
         58:9d:14:70:b7:d9:8c:95:36:03:a7:04:8b:e8:c0:6c:d1:e9:
         6a:20:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:04:26 2026 by rpki-client