This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
File:                     r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json)
Hash identifier:          llWVRtk0eBCFqtnefk0xBOlmrqb6twid5O2cR1371W4=
Subject key identifier:   90:42:95:8F:AB:CA:12:72:5A:A5:0C:A5:11:8C:D8:AE:8C:C9:D8:0A
Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
Certificate issuer:       /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Certificate serial:       0796
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
Manifest number:          0785
Signing time:             Sat 24 Jan 2026 20:55:24 +0000
Manifest this update:     Sat 24 Jan 2026 20:55:23 +0000
Manifest next update:     Sat 31 Jan 2026 20:55:23 +0000
Files and hashes:         1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: FdCf4q9RVLBQlGqgilmLPCAO14LKe+y23fwBVgdcqf0=)
                          2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: czgCm9inUwQtKmsycjisqnVVnUqNecHZYtpi4MypO+s=)
                          3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: I3DJPrqQDQWNYUcfVkhfL36sgECV3rkEkAXDv9beZH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl
                          rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
        Validity
            Not Before: Jan 24 20:55:23 2026 GMT
            Not After : Jan 31 20:55:23 2026 GMT
        Subject: CN=697531bb-7cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:35:24:b8:f3:8a:78:56:77:0d:d9:82:34:
                    26:46:c7:e1:1a:f4:33:3b:55:e8:21:6c:fc:6e:51:
                    83:41:35:b7:cd:0e:fe:e4:e7:9e:75:9b:73:5c:24:
                    dd:28:4b:e4:b0:25:ba:7a:3c:3c:ff:2e:96:fe:30:
                    94:6b:4e:b4:44:1a:2d:cb:71:96:f1:37:4f:c3:fb:
                    ea:f2:c8:b0:85:19:a8:35:48:d1:80:c8:a2:fc:0a:
                    f2:eb:a9:b0:a1:a7:33:07:e1:98:54:38:89:bb:32:
                    81:9f:3e:35:21:55:cb:25:7a:01:cc:57:71:4d:46:
                    f5:1b:15:5b:c5:e7:c9:9a:a6:83:9a:19:f6:61:68:
                    21:ad:14:fa:33:05:fd:86:7b:5c:9e:7d:db:44:f8:
                    59:7d:7b:ae:84:d5:37:43:f9:d6:85:bf:d1:e7:0b:
                    da:71:43:c9:33:a7:3d:fb:91:ec:25:ff:9c:c0:4f:
                    08:87:8a:c5:cd:8e:26:54:ad:38:07:ae:77:ba:82:
                    72:92:80:b7:75:41:3d:cf:64:72:47:94:51:e6:ba:
                    5b:bc:c8:38:c9:cb:90:9c:ca:10:4e:c0:13:f0:38:
                    e1:fd:7e:13:36:83:8f:d3:49:98:03:5a:37:e0:ca:
                    cc:6a:b1:c2:0f:fa:80:74:f5:f2:46:16:e8:cc:28:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:42:95:8F:AB:CA:12:72:5A:A5:0C:A5:11:8C:D8:AE:8C:C9:D8:0A
            X509v3 Authority Key Identifier:
                keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:09:71:37:a6:da:b1:0c:93:64:61:ed:22:70:8c:bb:60:0f:
         17:d6:09:3e:56:9b:30:f0:39:b9:4e:d2:3f:5c:d3:2d:50:2b:
         32:16:a5:6b:b9:2f:49:ca:8b:06:5a:1e:9a:2f:d9:b6:03:9e:
         79:33:08:7f:0d:5c:09:df:74:3c:e9:98:e1:72:6a:58:27:e2:
         0f:8b:38:b3:28:ad:d4:b2:a6:d1:f4:a3:01:9b:09:71:14:90:
         61:d2:04:f2:b6:2f:6f:ff:c2:53:0c:2f:80:13:a8:7e:cb:75:
         f4:3d:3a:ad:21:f2:bb:29:ae:5f:ed:0a:43:8b:13:87:eb:79:
         21:e6:6d:1f:26:71:22:94:ad:82:3c:1b:a9:1f:f2:d4:50:ad:
         7c:db:5e:2b:18:2e:68:c7:57:c0:44:06:1d:08:f6:4d:4e:43:
         43:cc:77:8d:c4:ba:ed:84:22:2b:46:72:11:f9:cb:9c:86:3d:
         18:ac:93:9b:4b:f5:8b:eb:7c:2f:bf:7a:7a:9f:f4:2e:9a:0a:
         d5:5e:93:29:2a:8c:b5:1f:5b:58:f1:b0:17:1b:dc:50:75:3c:
         ed:c8:ea:e2:0f:e9:50:27:7e:8c:3a:f1:02:ad:0d:ad:e4:9d:
         15:b6:6e:8c:1c:04:43:1f:8b:ad:aa:ba:06:dc:3e:27:9d:28:
         cd:1d:5b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:04 2026 by rpki-client