This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
File:                     wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json)
Hash identifier:          YTfAeMXQ1Q5UFmniZgpC5ZS95oHB7gjhfuoMJdttEI8=
Subject key identifier:   1F:17:F8:26:E3:C4:7E:48:D6:B3:E3:3B:EB:2A:1C:0A:6B:BF:67:81
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Certificate issuer:       /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
Manifest number:          023C
Signing time:             Sun 25 Jan 2026 01:16:30 +0000
Manifest this update:     Sun 25 Jan 2026 01:16:29 +0000
Manifest next update:     Sun 01 Feb 2026 01:16:29 +0000
Files and hashes:         1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: vS4wuVgXZqTJcaK95tjrskBn9nvU6yGY5FG8QojWZW8=)
                          2: 8A7D7EA2426B11F0B0160739C4F9AE02.roa (hash: /DDZk7wXmoPoez1s38SJjUYi204sJqoeZ/e78IsM+C0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
                          rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
        Validity
            Not Before: Jan 25 01:16:29 2026 GMT
            Not After : Feb  1 01:16:29 2026 GMT
        Subject: CN=69756eee-5ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:94:ba:32:5e:f1:bf:10:d6:8c:2d:9a:cc:
                    db:e2:61:50:2f:ad:04:31:93:a0:4c:76:02:e6:49:
                    db:ef:73:dd:52:17:82:32:8d:c0:3c:cb:e9:e4:82:
                    a8:6f:b9:bd:a3:8d:b1:78:35:c1:55:c5:2f:58:4c:
                    de:ad:c3:35:4d:4a:c0:d9:44:46:f4:8b:49:68:61:
                    95:bf:db:37:1e:c5:32:d3:02:3f:ea:81:25:b7:0b:
                    10:03:5a:37:9b:ee:50:fb:df:23:30:41:19:28:22:
                    32:af:b9:cd:b8:74:b2:fc:75:bd:40:d4:9a:6b:90:
                    63:9a:de:05:10:cd:96:74:d4:38:57:fe:6c:74:5c:
                    53:17:ac:b5:32:b8:da:be:4f:3f:3d:98:7e:52:b7:
                    fd:23:0c:b3:4f:31:78:00:b0:96:ca:6b:38:ed:4a:
                    6d:ad:29:37:05:df:b3:3c:fe:23:37:92:e4:e0:e7:
                    8f:09:17:19:a4:17:40:33:23:58:7e:67:e6:72:4e:
                    7a:a9:68:22:a2:85:07:9f:95:be:b2:44:7c:16:5b:
                    fb:0f:32:20:7d:25:aa:0c:d8:af:34:ae:4c:40:33:
                    34:c5:fd:e9:b9:e9:f9:df:5e:6b:e4:3b:50:93:0a:
                    d4:06:bb:78:57:59:fb:1f:8f:9a:43:ea:0b:2f:0a:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:17:F8:26:E3:C4:7E:48:D6:B3:E3:3B:EB:2A:1C:0A:6B:BF:67:81
            X509v3 Authority Key Identifier:
                keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:28:e7:0f:35:82:af:50:01:e4:7c:aa:66:c9:c0:2f:22:0b:
         fc:75:32:ef:93:ea:90:c1:12:ce:f9:cd:44:1c:d0:c5:3d:51:
         e7:77:f7:c5:33:c6:e7:8b:eb:25:84:db:72:9c:fd:7e:ca:57:
         d7:55:e9:cc:8a:20:c2:49:06:80:9f:b8:0b:8f:32:81:37:4c:
         ce:cf:c5:f5:7f:ad:be:96:48:4a:91:30:8b:16:12:db:1d:c8:
         6a:c4:55:91:4c:b9:f4:20:67:57:57:6f:df:9c:3f:73:78:11:
         77:a1:9b:43:2e:25:9f:72:a9:76:80:85:44:c3:67:f8:ea:8d:
         ec:75:75:03:36:2c:d6:4b:ea:70:7a:56:85:bf:20:0e:e9:d7:
         31:10:ef:81:95:4a:03:08:ce:a1:3c:74:92:04:fc:15:61:99:
         bf:1a:6d:5b:82:1a:90:c5:8b:4c:56:12:1d:36:c7:fb:8c:08:
         ed:3b:36:5f:3e:0d:f5:8c:69:cb:b9:4a:85:52:72:77:99:5d:
         81:d8:e1:b6:53:0c:f5:1a:bf:62:4d:e0:6c:c6:54:d1:7a:f9:
         8a:ca:6d:5e:71:c5:b3:db:34:95:2d:c9:d1:dc:00:4f:58:46:
         62:d3:6d:18:18:9a:c1:16:fe:f7:4a:67:88:8b:ea:63:ba:3d:
         f4:ae:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:13 2026 by rpki-client