This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
File:                     W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json)
Hash identifier:          9etk4tWSg7XcD2pI3eUl7rtNHPU9291eswxxsIVwBVM=
Subject key identifier:   41:A5:F1:5F:3B:DE:C6:16:DE:82:BA:98:C2:6B:F0:0E:D8:B7:2D:92
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Certificate issuer:       /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial:       0957
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
Manifest number:          094A
Signing time:             Sat 24 Jan 2026 19:36:15 +0000
Manifest this update:     Sat 24 Jan 2026 19:36:14 +0000
Manifest next update:     Sat 31 Jan 2026 19:36:14 +0000
Files and hashes:         1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: pILogadGfywM0El3Cucm2Ll9CBK6kRe3t+oUhhc/EK8=)
                          2: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=)
                          3: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
                          rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
        Validity
            Not Before: Jan 24 19:36:14 2026 GMT
            Not After : Jan 31 19:36:14 2026 GMT
        Subject: CN=69751f2e-5beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:ab:a5:48:07:ca:45:55:63:23:0a:c0:9d:
                    db:b6:08:bc:a5:61:24:f9:f9:f6:42:67:68:9e:ae:
                    74:1f:8f:e8:a2:b0:bc:62:a3:20:ea:6c:cf:3a:ef:
                    72:99:fc:16:9d:4f:52:a2:79:9e:26:bc:07:f5:71:
                    f8:80:69:92:f2:fa:05:5a:28:87:6e:a2:43:1c:93:
                    b1:3c:c4:c4:06:7b:1e:7f:56:0b:f2:f4:30:6d:dc:
                    5b:0c:74:19:33:b4:d7:45:29:2a:af:9c:e4:7b:c7:
                    46:06:6d:9c:3b:b2:74:1d:de:57:a1:33:be:96:e1:
                    f8:87:fe:30:10:da:d6:0b:cc:52:dc:8b:f5:a4:16:
                    eb:27:46:77:b7:99:40:ca:41:d0:d2:42:3e:8f:a8:
                    5e:9b:d4:55:e9:d3:e9:04:1a:87:2a:1e:9e:61:d2:
                    84:3b:86:89:85:43:98:cc:a2:20:6b:3a:89:d1:cf:
                    6a:22:b8:a3:79:80:eb:c5:ce:e7:4f:2c:42:e2:32:
                    41:b3:c3:41:78:46:90:c3:62:19:e0:d3:c1:b6:44:
                    3d:71:6c:7b:29:a2:e4:b8:51:d3:ef:76:59:ce:7d:
                    95:31:c6:47:a9:56:f6:61:6c:34:14:2d:f2:56:27:
                    8b:44:83:1d:c3:bd:b6:e9:66:af:92:b9:7b:52:40:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:F1:5F:3B:DE:C6:16:DE:82:BA:98:C2:6B:F0:0E:D8:B7:2D:92
            X509v3 Authority Key Identifier:
                keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:38:67:03:4d:fe:f6:b1:78:94:36:07:c5:0f:d0:5a:54:
         da:1d:6c:13:1d:96:a0:56:0f:10:53:54:b4:81:d6:ac:cf:6e:
         ef:5c:b2:22:71:48:d1:8a:80:3c:5a:5e:b0:da:47:ce:f3:66:
         13:ac:e0:cf:16:ef:83:fa:39:c2:0d:46:90:7f:08:c6:10:4e:
         87:97:0e:ce:12:1c:4e:8c:57:13:32:ee:64:7f:35:3c:43:be:
         48:d9:c6:e9:24:d3:40:84:b7:d7:75:0c:dc:f1:27:bd:98:ee:
         24:2f:dd:d7:2a:3a:d3:ff:74:0a:86:8d:2f:d7:5c:3b:56:a3:
         35:00:6e:88:05:ba:bb:f9:d4:71:0e:88:9e:c4:5e:ae:6f:f4:
         0a:42:75:ca:d5:70:ad:3f:4a:ea:b6:1e:fc:47:a3:85:13:b3:
         4f:13:45:4b:72:44:7c:01:3f:a6:c7:33:a6:86:59:42:a0:9c:
         d4:94:70:a0:b2:85:0a:ed:f7:be:63:db:78:06:99:45:aa:f5:
         d3:fb:64:48:08:4a:b3:be:3a:f1:c9:0a:bd:93:3c:12:e0:29:
         f2:72:cf:c2:78:17:5a:c5:7e:a0:44:d9:3e:b9:e0:9b:05:36:
         5e:2e:30:38:60:48:23:19:b8:06:b3:3f:72:86:5c:79:ad:0f:
         cf:f9:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:55 2026 by rpki-client