This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
File:                     Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json)
Hash identifier:          wUVsK2AOxT4oSCodlxHULmcSc4aMbXQ8ECXwgOGVj2o=
Subject key identifier:   07:85:39:88:A5:1E:18:6F:44:42:4C:75:15:97:45:7B:92:86:4E:86
Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Certificate issuer:       /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
Manifest number:          D9
Signing time:             Fri 23 Jan 2026 04:46:18 +0000
Manifest this update:     Fri 23 Jan 2026 04:46:18 +0000
Manifest next update:     Fri 30 Jan 2026 04:46:18 +0000
Files and hashes:         1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: zeHPTQImt6xyA7/yUldeRKhCIq7Z7O6T7jPkc9gFtBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
        Validity
            Not Before: Jan 23 04:46:18 2026 GMT
            Not After : Jan 30 04:46:18 2026 GMT
        Subject: CN=6972fd1a-4261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:30:f9:92:b7:7e:35:61:2a:4b:46:06:b4:
                    8e:c0:4f:92:39:7f:7b:77:fa:5a:67:2d:03:af:1b:
                    52:59:8d:2f:67:3e:24:fc:7e:28:b3:26:b6:12:f5:
                    b4:ef:aa:ed:85:20:0f:94:56:8c:47:e4:41:36:9d:
                    fa:a3:41:22:d8:94:20:c5:fe:c7:ee:0a:e3:2e:23:
                    90:78:42:29:04:98:e8:3d:04:76:55:08:21:a0:40:
                    27:02:af:b6:98:6f:ab:d5:86:49:86:7b:f2:86:b0:
                    eb:ea:27:a1:76:0f:9f:a7:df:b8:17:81:cc:0d:b0:
                    47:4f:d7:1e:fb:92:b6:9c:a3:db:ae:20:70:49:6f:
                    e7:9b:6a:99:d4:1a:db:91:ea:66:52:e9:17:6f:39:
                    71:d8:97:d5:a6:27:c8:49:9e:8a:7e:33:1c:94:ba:
                    d1:0c:b9:db:3d:5e:7b:59:ad:03:34:09:b6:16:49:
                    97:8b:ee:29:a5:2e:b4:41:dd:c9:90:83:ad:ce:75:
                    a0:d9:0a:dc:c4:3c:30:c7:af:c1:24:dc:37:2e:9f:
                    46:04:42:8c:31:fd:95:87:d8:28:5d:af:06:87:e8:
                    17:54:05:80:b1:7d:ec:e1:56:fd:89:04:02:fe:38:
                    bb:83:37:79:a7:2d:b3:9e:81:3e:12:ce:8c:73:2c:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:85:39:88:A5:1E:18:6F:44:42:4C:75:15:97:45:7B:92:86:4E:86
            X509v3 Authority Key Identifier:
                keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:07:8d:75:e0:b3:e3:d7:10:d1:06:d7:4e:3d:85:c9:2b:34:
         46:4a:f5:ee:f8:df:21:b7:ed:78:6c:d1:bb:70:c6:30:80:2e:
         41:4b:32:b1:31:e5:df:54:7a:7e:11:3d:09:f4:ce:cd:c8:c5:
         1f:a0:e2:36:96:fc:0f:f8:8a:b0:39:10:55:1f:23:05:d0:c2:
         46:67:66:29:02:82:78:c6:f5:d2:7b:93:d5:b8:23:f1:05:6f:
         a7:51:68:75:cd:ea:a7:80:43:9c:5d:fb:87:1d:dd:a1:ec:fb:
         70:4e:c3:b7:47:bd:c5:57:18:39:33:d7:ce:1c:fe:a6:e7:b4:
         88:27:66:60:a7:21:fc:46:19:a2:b5:0e:b2:ea:60:7b:f6:33:
         e0:a1:28:3e:fa:4a:5c:9f:3b:76:ee:d6:e4:0c:e9:38:9f:56:
         d2:e7:eb:3a:c6:94:4b:73:a1:88:8d:92:7d:ed:04:81:2e:07:
         ff:08:66:d4:18:c4:9e:0b:4e:75:57:eb:c2:d0:f7:4b:b8:66:
         ab:8d:e9:93:30:ae:3e:b5:dd:ed:21:67:b8:7d:ef:15:50:34:
         e4:4a:56:cd:01:b0:48:1a:44:74:9d:94:14:28:b4:98:4d:7d:
         e7:d2:de:ec:c0:b7:5a:be:66:5b:9a:7f:17:48:6b:b4:e9:d1:
         ad:e5:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:54 2026 by rpki-client