This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
File:                     WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json)
Hash identifier:          DeBGp19YjP/VI6dW/h9ZQd4v5VC8qyb2HiiwWRQVwUE=
Subject key identifier:   FA:D5:19:9E:FC:17:7C:F8:65:0A:96:1C:D2:77:B1:DC:8D:DC:8A:32
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Certificate issuer:       /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial:       0A32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
Manifest number:          0A18
Signing time:             Sat 24 Jan 2026 19:17:17 +0000
Manifest this update:     Sat 24 Jan 2026 19:17:16 +0000
Manifest next update:     Sat 31 Jan 2026 19:17:16 +0000
Files and hashes:         1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: T4XKoPH1FgM+ssrfFo6O3W+mgYjl6hK7TRV1Q5ZO2Vg=)
                          2: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: EhKz+qpZCdGGz4K9XW4D89cMEqKMRNKMYWUEYrhee9w=)
                          3: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: OxqkPAcwe8U/URYzB78s+OkY3R6dzxppCgDSq39fiQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2610 (0xa32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
        Validity
            Not Before: Jan 24 19:17:16 2026 GMT
            Not After : Jan 31 19:17:16 2026 GMT
        Subject: CN=69751abd-5d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:75:3d:fc:16:8a:8b:61:3d:44:ca:68:44:
                    a6:eb:5e:7a:1e:a8:d2:eb:00:67:27:60:8c:75:44:
                    9d:57:a0:5f:18:ae:0d:c0:1a:2b:df:94:f0:07:3d:
                    56:29:31:a6:92:38:e9:a6:46:f7:cb:fe:84:e2:71:
                    fb:18:16:61:a9:25:41:51:bb:df:57:e5:a1:0f:b0:
                    13:8e:a8:ae:df:7c:8d:34:be:15:49:b4:44:a7:c8:
                    8a:cf:45:53:2a:01:36:16:c6:55:36:49:88:96:1b:
                    b7:9f:bb:2a:e7:de:a1:77:2a:02:ae:d6:3b:94:2e:
                    f2:99:25:7b:e7:dd:53:0c:78:55:5f:05:22:7b:91:
                    46:a6:d6:3e:53:e1:14:68:54:38:72:28:f8:4e:7f:
                    3a:9b:0d:cd:e7:20:ea:3d:99:34:65:bc:71:76:84:
                    d1:a3:ee:15:2b:fa:ee:37:3d:5b:be:84:fc:cc:32:
                    c8:c7:85:35:09:10:ac:66:8f:65:65:6a:17:5c:e3:
                    1d:c6:c8:9e:ce:43:1b:d5:32:ab:ac:bb:cf:5f:6a:
                    ba:70:a4:28:ac:f9:da:18:06:ad:7b:93:60:0f:48:
                    21:01:3a:15:7b:7c:00:03:2f:08:75:c9:c6:4a:7e:
                    e8:ac:bf:b7:6b:d6:bd:07:da:9f:71:89:48:f5:8e:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D5:19:9E:FC:17:7C:F8:65:0A:96:1C:D2:77:B1:DC:8D:DC:8A:32
            X509v3 Authority Key Identifier:
                keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:cc:16:58:6b:9f:f2:02:71:34:e0:aa:3b:6f:28:86:7a:08:
         2e:cd:ab:9a:26:c8:d8:c2:89:a9:f1:31:a1:e0:05:bd:5b:dc:
         8c:7c:66:7e:7c:47:6f:b0:08:58:1b:27:bb:6b:13:8c:82:bd:
         c9:a4:ef:4c:a7:1a:21:44:a6:a7:12:ad:15:3f:ba:ad:62:91:
         b5:5c:9e:57:d1:59:0b:2a:2a:70:58:c9:59:9b:99:7e:69:a1:
         38:cf:44:1f:5a:84:c8:c4:8d:57:e2:79:d9:79:15:af:ac:bc:
         e7:d1:19:6e:19:75:7c:18:b3:2f:d9:f3:0a:a9:82:04:79:5e:
         c4:80:92:01:85:28:16:e9:75:85:65:ad:86:c1:d9:67:26:e5:
         da:48:5a:30:e3:74:28:fc:57:09:61:73:6f:01:a7:c8:9a:e5:
         76:c4:8e:b2:06:8a:c6:fd:f0:2f:d0:ad:24:f9:be:6c:69:16:
         d1:c2:af:fe:cc:32:86:2a:1a:23:68:61:7d:b0:15:23:7a:87:
         33:f3:7c:48:c6:4a:2f:5e:ce:a6:df:86:cd:ef:e7:84:3c:4a:
         31:67:d0:73:18:95:cb:e3:9d:65:a8:3c:bb:3b:60:67:ac:eb:
         a1:9f:29:cd:79:f1:89:c7:ae:e8:b2:0a:ce:f0:d3:b2:74:f0:
         0f:e4:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:11 2026 by rpki-client