This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
File:                     wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft (raw, json)
Hash identifier:          LPon0+MuisdI2nzBpF2T86hcuoVniHw09lXC68uAQsM=
Subject key identifier:   DB:46:07:2F:E9:6B:DD:A1:54:D9:89:50:D1:9F:8D:A8:E7:E4:47:EF
Authority key identifier: C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A
Certificate issuer:       /CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
Manifest number:          01DD
Signing time:             Sun 25 Jan 2026 02:03:24 +0000
Manifest this update:     Sun 25 Jan 2026 02:03:23 +0000
Manifest next update:     Sun 01 Feb 2026 02:03:23 +0000
Files and hashes:         1: wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl (hash: xB4P9Y97kFlpVKzmSGYkayc8tQ8NHqm0GnGcWvhzl+c=)
                          2: 32503D0625FC11EE9A575E36C4F9AE02.roa (hash: coDJ25CP62J5iPaE/zCXs0A10y/EaRgWhlToPaB3W0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl
                          rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FED9, serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A
        Validity
            Not Before: Jan 25 02:03:23 2026 GMT
            Not After : Feb  1 02:03:23 2026 GMT
        Subject: CN=697579ec-24da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:fe:94:26:f8:34:b1:a3:ec:13:97:d0:60:
                    ed:01:16:09:d2:08:9c:51:d9:05:ce:10:e4:67:4c:
                    95:46:ac:77:80:d5:88:d9:d1:0d:42:f3:18:08:ea:
                    6b:dd:22:85:46:b7:7c:01:1a:90:d9:46:cc:6b:71:
                    e8:d8:b1:89:df:60:58:ff:5f:af:0e:31:44:e7:d0:
                    11:7e:2c:dc:e8:33:90:22:9e:88:ff:b9:c9:ea:8a:
                    85:24:2d:fd:57:4a:9a:c2:b6:64:b6:f3:c2:36:4e:
                    9c:3f:1e:3c:3e:5f:59:a7:05:36:ca:4c:ce:99:e0:
                    91:f3:ec:84:c0:11:1b:3d:b5:de:ea:37:98:a3:a6:
                    17:8f:f9:3f:d0:e0:4a:e5:a6:81:5b:fc:a4:a3:ec:
                    ae:e7:9f:be:3c:fc:01:10:62:7c:34:b8:7b:3a:de:
                    35:1b:61:5f:15:d2:8c:b9:c4:c6:1c:16:1b:14:9b:
                    37:30:ec:6b:3c:dd:7f:af:c5:ad:35:08:3b:0c:d5:
                    b9:04:a2:93:62:20:b7:42:ed:8a:b2:c4:14:13:c8:
                    2d:87:29:57:d1:06:91:b4:8a:13:10:eb:d6:cf:23:
                    e7:7d:83:87:bd:17:b7:b9:54:c2:0f:03:be:d0:24:
                    6e:1b:5c:6d:0f:a9:b4:0e:c4:a3:30:29:06:11:22:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:46:07:2F:E9:6B:DD:A1:54:D9:89:50:D1:9F:8D:A8:E7:E4:47:EF
            X509v3 Authority Key Identifier:
                keyid:C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:20:78:10:c2:c1:6b:38:fd:e1:aa:fe:6d:6c:72:9e:f4:95:
         1a:96:4e:99:5d:95:27:23:58:b6:25:5f:83:b3:af:6c:03:a5:
         b0:60:06:74:3c:95:c4:7f:55:82:b4:56:16:f9:19:83:53:f9:
         37:f6:d4:4b:b3:2f:cd:b7:4d:f2:2f:fb:1e:49:83:b9:cf:e0:
         e1:40:e7:b6:15:e9:e1:0a:98:31:ad:0a:3f:45:6e:7c:5f:8c:
         52:84:2a:76:88:eb:ec:5c:48:a3:6b:53:4b:c7:f9:d3:56:53:
         97:f6:e5:40:e8:de:1b:cf:2f:68:67:07:fe:f2:e0:4a:d8:fa:
         c4:74:b7:66:6c:39:d5:4a:07:a0:e2:7c:86:5f:8e:c0:81:63:
         53:5b:2a:fd:9b:49:21:2c:cd:3c:a7:93:50:ab:73:fb:44:27:
         5a:86:7b:5f:ac:8c:de:63:17:de:51:c9:6f:10:a6:3a:b4:c4:
         13:0f:9c:c3:3f:c5:78:b3:c4:18:c6:1d:a3:0c:bb:ba:88:6b:
         e9:97:a4:54:e0:5d:b5:7b:10:9b:90:da:2d:19:28:59:c5:df:
         5a:e1:e5:09:4a:8f:82:94:5f:7a:3b:73:96:fe:d7:07:08:fc:
         f6:e8:c7:34:a8:08:6b:61:52:ad:63:bd:9a:3a:a1:cb:87:01:
         59:31:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:21 2026 by rpki-client