This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
File:                     Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json)
Hash identifier:          weKsp/kNiWH60mdc3Ec5AtPsIrmj5AcudVOtXiD0U18=
Subject key identifier:   28:53:92:10:FD:98:CA:DB:2F:E2:32:8A:9F:1C:D3:39:60:01:32:2F
Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB
Certificate issuer:       /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
Manifest number:          0841
Signing time:             Sat 24 Jan 2026 21:44:40 +0000
Manifest this update:     Sat 24 Jan 2026 21:44:40 +0000
Manifest next update:     Sat 31 Jan 2026 21:44:40 +0000
Files and hashes:         1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: cIt2meOpycnMCE1MiTLhtDGVUx7Ld09lwy6afKYOAk0=)
                          2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: 6nj6gAXwER1+n2mf9YSf45I25ExEU+9WMLCZesRDaKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235, serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
        Validity
            Not Before: Jan 24 21:44:40 2026 GMT
            Not After : Jan 31 21:44:40 2026 GMT
        Subject: CN=69753d48-d61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:26:5c:40:79:73:ce:47:b0:1b:b1:4e:b2:
                    c4:d8:fc:bc:db:a2:31:66:5c:5e:bb:71:03:db:77:
                    1f:94:45:39:89:d6:a8:b1:74:19:de:55:e9:19:74:
                    7c:d9:b3:06:67:be:c3:a9:a2:f9:58:51:1d:fa:f6:
                    47:27:1f:41:24:c3:63:32:ec:3c:fe:87:0d:f4:4e:
                    a0:15:0f:87:f0:1c:bf:fc:a0:b7:77:04:35:79:25:
                    56:5d:61:22:e3:94:de:72:a0:f5:9e:7b:38:34:0e:
                    40:c6:39:1f:0c:10:8b:6d:ba:af:da:e2:a5:72:30:
                    a9:ef:97:f0:46:f7:08:c1:3e:ca:f7:42:4e:f0:75:
                    c4:4c:11:73:d7:cf:c5:8c:27:63:25:94:9f:c5:9a:
                    10:f1:12:5e:a5:1b:62:01:30:3d:33:42:e7:b7:38:
                    51:c7:7d:77:6b:ce:ff:fa:ce:7f:c3:92:8f:55:2b:
                    67:af:15:c4:46:04:31:5b:da:b2:59:4e:f2:7f:7f:
                    d8:0c:b5:ed:a4:e6:3b:11:05:1e:56:74:8f:fc:08:
                    15:49:0d:5e:2a:47:b0:ee:7d:98:54:03:4b:a8:b2:
                    b8:2d:07:26:78:0e:19:e3:63:b4:eb:1e:81:25:c8:
                    03:29:30:71:6b:2d:4f:1c:1e:63:49:e3:cf:2d:2f:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:53:92:10:FD:98:CA:DB:2F:E2:32:8A:9F:1C:D3:39:60:01:32:2F
            X509v3 Authority Key Identifier:
                keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:19:80:20:f3:4e:b3:87:c4:17:c0:be:3d:5a:7d:c4:da:
         b0:4e:33:60:40:eb:3e:13:28:cc:20:ac:68:6d:36:8e:be:fc:
         95:c6:3d:48:f3:6c:20:f5:eb:67:b6:eb:a2:c0:b0:ec:72:f1:
         18:28:27:4b:d8:2c:b3:cf:cd:16:c7:3d:3b:88:6a:5d:9c:ef:
         f5:b4:76:8d:23:94:dc:79:b5:12:f0:03:b0:c7:f0:ad:49:0e:
         c4:05:08:29:d9:4b:6f:20:17:c6:73:48:2b:fb:54:5f:7d:0b:
         ed:fc:d1:e7:00:1b:89:c5:16:cd:f8:90:32:06:b8:f7:53:c7:
         14:90:cf:0a:ef:5e:6e:5f:c7:c4:51:8c:1a:94:a0:e8:2b:86:
         08:88:d5:bc:7d:12:52:30:44:e8:47:4c:19:4d:c8:97:02:bf:
         9e:ff:1a:69:09:e7:b5:4c:b4:d4:63:ac:87:20:91:fd:8a:c3:
         b8:37:d6:db:2b:2f:f8:7f:5d:df:ac:9a:b1:a5:81:d2:78:05:
         58:6f:ed:e3:bf:d8:f8:ce:de:03:a2:30:e7:f6:42:fe:bc:af:
         19:e1:b9:4e:13:02:56:98:30:fd:42:54:68:60:3f:dd:4d:72:
         32:69:9e:b7:1c:94:4f:72:f2:79:c7:3e:21:bb:ec:94:33:bf:
         10:a7:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:25 2026 by rpki-client