This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File:                     _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier:          5vzlnRvgTJsI0ggCLS8HZB3+MSNRAroZ3FQkGH6R5Fc=
Subject key identifier:   34:F0:DC:12:27:10:EA:A1:A7:28:D2:22:75:3E:FE:F9:92:C1:AE:41
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer:       /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial:       0B93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number:          0B8B
Signing time:             Sat 24 Jan 2026 18:35:28 +0000
Manifest this update:     Sat 24 Jan 2026 18:35:27 +0000
Manifest next update:     Sat 31 Jan 2026 18:35:27 +0000
Files and hashes:         1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: HjC3xX2+/7O8YTmJtHeH8FcSFomGYrcpefYy0B4SXEI=)
                          2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: cE46r29KbbkAXjWAwbBON9XRly7r0/vPAZnB5kdMO20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
                          rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
        Validity
            Not Before: Jan 24 18:35:27 2026 GMT
            Not After : Jan 31 18:35:27 2026 GMT
        Subject: CN=697510f0-0cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:33:59:87:0d:c2:51:fe:5f:da:79:06:2b:
                    25:1a:e9:c4:87:f7:bc:82:d2:75:f6:9f:79:24:0e:
                    b3:62:c9:3b:7b:33:ec:b9:3d:a1:1f:72:21:ac:b7:
                    b0:06:2b:07:d0:2a:1b:10:c5:f5:01:38:2e:3c:58:
                    53:63:3d:0d:ca:23:b8:98:9e:41:b9:86:b2:a4:f6:
                    cd:e8:74:6d:ae:4a:7f:38:5c:62:51:0e:9f:39:a1:
                    3f:31:c1:4d:9b:a4:50:0d:28:e3:2f:a8:8a:6d:79:
                    69:cf:ae:df:45:e5:98:81:82:5c:94:0c:be:0a:52:
                    45:e5:2f:45:5c:fd:22:31:fe:d5:b3:dd:eb:1a:bc:
                    b3:36:ae:8b:d0:46:d9:23:75:7b:b1:c1:32:37:e0:
                    1c:5b:e9:77:b5:a2:d7:59:4f:9f:76:7d:9d:ba:f1:
                    40:6b:d2:e4:2e:c2:e2:98:0d:98:4e:1d:b7:cd:ad:
                    46:fb:0b:7c:af:b1:4d:0f:5e:cb:df:68:41:e8:77:
                    70:20:38:bd:a1:aa:cb:c1:d6:57:3d:4d:81:41:8d:
                    b2:68:04:31:03:9d:2e:6d:19:31:66:bb:43:14:a8:
                    69:55:2b:cb:31:cd:85:55:30:c7:ed:e9:d9:01:c8:
                    2d:da:ca:f4:e4:b7:ca:c9:19:fc:1f:29:07:ec:20:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F0:DC:12:27:10:EA:A1:A7:28:D2:22:75:3E:FE:F9:92:C1:AE:41
            X509v3 Authority Key Identifier:
                keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:27:cb:26:60:7d:e5:6e:93:ea:98:8f:c9:c5:2b:b1:0b:97:
         2f:33:51:4d:8f:d9:27:40:ac:8a:0d:6f:26:12:bd:70:9f:07:
         73:c3:56:ca:b4:43:a3:c0:eb:c5:a9:1c:2a:50:87:6c:a6:81:
         ac:6d:26:65:1e:fa:b3:6f:bd:f2:62:45:f8:86:e8:c1:12:31:
         28:87:17:c4:c1:90:30:56:32:b0:92:89:9a:f7:2d:09:44:96:
         8c:4f:82:8f:63:bf:4e:f4:81:d7:cb:ab:d3:7f:bb:56:53:9e:
         aa:46:6a:b1:6a:7c:e3:04:cd:5a:95:6b:da:a9:62:2a:2a:4b:
         46:a9:60:a3:c6:30:ad:d4:31:f7:43:6e:95:d8:54:61:90:4c:
         cf:fa:6f:f9:54:06:b1:39:80:ec:4c:40:db:f1:29:07:43:58:
         f8:6d:38:b3:29:f8:9f:73:18:81:1f:61:94:7d:c9:dd:39:38:
         b1:ce:73:f9:37:38:ad:af:6b:2a:45:f6:62:9b:93:57:8c:c4:
         1a:5d:e3:37:0f:db:c4:87:00:c7:49:3e:0b:9e:45:8e:74:73:
         ae:73:05:2c:9e:06:9e:c7:a9:c7:5a:92:2f:cd:7c:ca:1f:37:
         f0:a3:1d:a6:60:4f:77:fe:24:5a:d5:1e:f7:f0:e5:ed:51:16:
         d7:e7:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:41 2026 by rpki-client