This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
File:                     wtbHmmd8l-xwBjE76RZ-DeZspFI.mft (raw, json)
Hash identifier:          GnoXHl4K9yXOfh1qFx1K4f5aGRw0ATeAzNrGj5stvXk=
Subject key identifier:   F6:22:DD:60:D3:89:32:2C:87:32:44:97:43:A5:D0:07:90:C9:62:C4
Authority key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
Certificate issuer:       /CN=A9192F5B/serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
Manifest number:          33
Signing time:             Sun 25 Jan 2026 06:40:11 +0000
Manifest this update:     Sun 25 Jan 2026 06:40:10 +0000
Manifest next update:     Sun 01 Feb 2026 06:40:10 +0000
Files and hashes:         1: wtbHmmd8l-xwBjE76RZ-DeZspFI.crl (hash: 1+GOOfhJCgA7C9DmZyhJMWh2rSA0jxfm9XCGRajDznE=)
                          2: 4619B082F15C11F0A6B34B2B5F6F56BC.roa (hash: IfWG1R1Je9GzJGjcffqAQ0R1P1J1fs4cLH2QCvIzFkk=)
                          3: 283AD1AEF15C11F092AE22215F6F56BC.roa (hash: HSCt9NcLYYzlzzjXCvsEsT6Lof/UjxarzXKK9dxk5ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
        Validity
            Not Before: Jan 25 06:40:10 2026 GMT
            Not After : Feb  1 06:40:10 2026 GMT
        Subject: CN=6975bacb-d150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:42:28:59:26:34:6f:a8:38:e9:4b:f3:a9:
                    a4:66:0b:a7:e2:7b:d9:3f:e3:65:23:b6:e0:64:a2:
                    c1:91:dc:27:04:d4:f4:de:ae:9d:47:7b:ec:bb:17:
                    f2:a7:a3:bb:d2:2c:57:d2:ef:8e:80:e0:c9:ab:70:
                    8f:e8:f2:2b:e3:44:a3:fe:41:43:b0:7d:d5:0d:ab:
                    f9:2d:b4:ee:f4:71:38:1e:76:dc:cd:e5:1d:ac:85:
                    f4:10:80:d2:76:64:d4:d7:3e:86:92:73:4f:c2:e3:
                    fd:d7:14:d2:b0:4f:94:c8:d6:07:28:7a:03:09:43:
                    02:f4:61:d9:18:56:3f:84:54:38:42:34:77:11:ca:
                    5f:d7:cd:77:16:72:fb:7b:03:31:12:ac:97:39:b3:
                    14:42:ff:46:d6:7f:56:7b:4d:03:fe:07:57:cd:9d:
                    60:33:a3:74:24:b6:dd:9e:57:89:10:d1:31:2f:c1:
                    89:0b:4f:10:1b:30:00:2e:ed:3b:42:ca:1b:fe:24:
                    3a:0d:e4:6c:b9:53:0b:6e:51:cc:f4:fe:e8:01:e9:
                    de:10:e3:0d:c1:2e:01:77:3e:86:67:83:12:db:f5:
                    48:13:bc:b6:b6:a4:37:0a:bf:08:c8:58:2c:83:fc:
                    ea:71:00:bf:5e:1f:0e:8a:f2:98:52:c5:3f:f0:7b:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:22:DD:60:D3:89:32:2C:87:32:44:97:43:A5:D0:07:90:C9:62:C4
            X509v3 Authority Key Identifier:
                keyid:C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:21:70:b7:d8:c6:a2:c0:0c:43:c5:f1:56:bc:a7:21:6b:01:
         24:09:ae:95:a5:02:4c:53:11:b8:10:a6:5e:f0:d9:76:20:69:
         69:7a:ee:05:3a:6b:61:56:97:08:be:55:a5:fe:30:2b:c3:74:
         72:70:f6:ca:36:69:22:2d:d8:9f:dc:2c:c3:65:a5:a3:b2:f9:
         65:60:95:5b:5e:13:1d:7f:9c:7e:cf:13:16:06:45:fe:99:a1:
         d6:f7:51:2f:1d:66:ab:ae:fa:18:8f:f4:d6:fb:66:42:50:c3:
         1e:f5:e2:47:6c:0a:3e:e9:5b:91:67:6f:02:12:17:32:b3:07:
         6c:a5:1d:77:8d:c3:cf:66:a1:ea:c4:67:e9:42:3b:ef:16:b6:
         4a:4f:ca:43:59:43:9a:85:28:d9:54:08:ad:dc:c2:30:cb:6e:
         8d:5b:52:82:eb:6e:69:6e:20:8d:72:57:9f:85:9b:01:d0:d9:
         d5:e1:1a:c7:4a:e3:2e:4c:a2:cd:fe:ed:d6:83:ba:90:b9:39:
         e6:15:10:dc:90:ca:64:d2:c9:a2:c2:9f:5b:a9:d0:24:aa:e4:
         25:26:23:6e:e4:96:6d:3e:27:58:38:eb:50:fd:b6:0b:b4:2d:
         37:1a:ce:0c:46:8d:0f:7c:91:0b:08:1b:22:42:63:df:34:c3:
         ec:51:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:10 2026 by rpki-client