This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
File:                     WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json)
Hash identifier:          QDwutSR9pw79TFRxJ6CvNVgghEWivk5xQAeCYIONSqA=
Subject key identifier:   30:44:08:5D:72:21:D9:E2:5F:66:48:57:26:08:1A:A4:9C:C8:35:18
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Certificate issuer:       /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
Manifest number:          1E
Signing time:             Fri 23 Jan 2026 06:53:21 +0000
Manifest this update:     Fri 23 Jan 2026 06:53:20 +0000
Manifest next update:     Fri 30 Jan 2026 06:53:20 +0000
Files and hashes:         1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: vKcgI5D1EBLeddxrEMWXuVEuCsXr2qatVnKeG9TFy/o=)
                          2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: peAS/ngmPwYZnb97WFQxinsPTC6bCf5NaFTKHcSyPQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
                          rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
        Validity
            Not Before: Jan 23 06:53:20 2026 GMT
            Not After : Jan 30 06:53:20 2026 GMT
        Subject: CN=69731ae1-5c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:f3:01:8e:c0:3a:ff:a3:82:fa:ca:ee:ce:
                    66:55:d5:54:25:fa:07:67:ac:34:88:0a:9d:f0:6a:
                    09:50:bb:b9:ea:7e:fb:87:f0:ec:e9:ec:2d:13:ce:
                    34:0a:d1:32:dc:db:f2:9d:1b:90:77:88:cb:a0:6d:
                    5e:c6:db:48:4b:af:74:90:7c:e9:77:08:2d:00:67:
                    e1:3d:77:2b:76:ce:06:82:87:b4:7b:9a:25:a2:2a:
                    9f:f1:9c:ad:cf:00:8f:5b:43:28:74:48:1c:0a:4c:
                    06:16:72:7e:a8:cb:01:3c:6c:07:99:18:34:cb:a3:
                    29:0a:72:84:f2:0e:c7:77:e0:10:e0:27:b1:65:75:
                    fc:cc:11:2d:7a:d5:9d:3c:4a:10:8a:76:e0:fe:73:
                    4c:c4:f6:21:d0:52:13:3f:e9:6d:11:1e:43:3e:1d:
                    47:6f:3a:b2:5e:ad:8b:b2:4d:e9:dc:4b:37:25:cb:
                    b2:31:25:78:2d:bc:fa:3f:56:a2:76:89:36:66:d4:
                    f7:1f:33:e5:b7:98:8d:ae:70:32:01:33:c9:96:8c:
                    24:de:c9:1b:05:0e:c6:cf:96:da:84:c1:53:8c:0e:
                    56:1d:b6:1e:da:56:99:28:13:58:0b:d4:d6:f3:c5:
                    17:ff:73:69:f8:29:7f:b2:e1:c8:79:0b:51:e8:ef:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:44:08:5D:72:21:D9:E2:5F:66:48:57:26:08:1A:A4:9C:C8:35:18
            X509v3 Authority Key Identifier:
                keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:68:0f:77:21:6c:83:e6:9a:c7:30:fc:a4:bc:00:f2:8d:8f:
         d4:7b:ea:fe:90:2f:9c:55:29:b1:71:90:e4:ea:63:e7:62:22:
         04:0a:4f:a0:60:c5:17:e7:6f:3d:86:29:c7:0d:7f:2e:67:b8:
         81:17:64:a6:59:03:c8:7c:49:92:b7:64:2e:5d:88:11:e4:8d:
         b9:76:eb:d3:66:67:08:e3:09:a9:08:07:3e:22:91:11:6c:23:
         28:3c:33:f0:78:e4:43:38:22:1b:f3:c6:fd:e4:d7:2f:c6:95:
         95:21:57:a1:c3:00:f0:ea:5b:34:a9:ab:92:36:ed:bd:97:14:
         70:78:17:53:29:04:e8:59:7c:4a:eb:6e:20:3e:99:88:29:50:
         8f:fc:5f:60:8c:fb:ed:a1:6a:33:d8:58:81:29:d8:26:ec:df:
         8d:01:d9:89:61:6b:ae:e0:26:01:cb:03:b8:17:2b:23:40:cc:
         c0:b2:d2:ba:8c:5a:4f:d0:67:10:70:b2:4b:e8:0e:44:b6:e0:
         e9:cf:40:67:8b:49:6d:f7:cd:85:d3:39:5b:1d:f5:c4:11:3d:
         57:f9:19:a9:72:aa:1c:13:24:82:c0:ab:f8:b4:82:f5:8c:f9:
         40:c4:12:a5:5a:c2:21:ba:26:ee:52:e7:30:ab:2f:04:92:c1:
         3f:07:38:1e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RDFGRTExMC8GA1UEBRMoNTg3QzRFRjg4NUJENDE2QTk5RDEwRjU1QjZFODE2OEMw
MkQwMjAxQzAeFw0yNjAxMjMwNjUzMjBaFw0yNjAxMzAwNjUzMjBaMBgxFjAUBgNV
BAMMDTY5NzMxYWUxLTVjNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYxvMBjsA6/6OC+sruzmZV1VQl+gdnrDSICp3waglQu7nqfvuH8Ozp7C0TzjQK
0TLc2/KdG5B3iMugbV7G20hLr3SQfOl3CC0AZ+E9dyt2zgaCh7R7miWiKp/xnK3P
AI9bQyh0SBwKTAYWcn6oywE8bAeZGDTLoykKcoTyDsd34BDgJ7FldfzMES161Z08
ShCKduD+c0zE9iHQUhM/6W0RHkM+HUdvOrJerYuyTencSzcly7IxJXgtvPo/VqJ2
iTZm1PcfM+W3mI2ucDIBM8mWjCTeyRsFDsbPltqEwVOMDlYdth7aVpkoE1gL1Nbz
xRf/c2n4KX+y4ch5C1Ho7+D3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMEQIXXIh
2eJfZkhXJggapJzINRgwHwYDVR0jBBgwFoAUWHxO+IW9QWqZ0Q9VtugWjALQIBww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMUZFLzVEQjYwOEFFQ0Y4
QzExRjBBRUY2QzU1OUM0RjlBRTAyL1dIeE8tSVc5UVdxWjBROVZ0dWdXakFMUUlC
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV0h4Ty1JVzlRV3FaMFE5VnR1Z1dqQUxRSUJ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE
MUZFLzVEQjYwOEFFQ0Y4QzExRjBBRUY2QzU1OUM0RjlBRTAyL1dIeE8tSVc5UVdx
WjBROVZ0dWdXakFMUUlCdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJ1oD3chbIPmmscw/KS8APKNj9R76v6QL5xVKbFxkOTqY+diIgQKT6Bg
xRfnbz2GKccNfy5nuIEXZKZZA8h8SZK3ZC5diBHkjbl269NmZwjjCakIBz4ikRFs
Iyg8M/B45EM4Ihvzxv3k1y/GlZUhV6HDAPDqWzSpq5I27b2XFHB4F1MpBOhZfErr
biA+mYgpUI/8X2CM++2hajPYWIEp2Cbs340B2Ylha67gJgHLA7gXKyNAzMCy0rqM
Wk/QZxBwskvoDkS24OnPQGeLSW33zYXTOVsd9cQRPVf5GalyqhwTJILAq/i0gvWM
+UDEEqVawiG6Ju5S5zCrLwSSwT8HOB4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:17 2026 by rpki-client