This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
File:                     wpOM5j17miRX6TKieulx0gcEp_0.mft (raw, json)
Hash identifier:          KKfzbMvSWXbhTrds/n5lv8aHoy0GKJ4ge6o1KyL3Pf0=
Subject key identifier:   F8:FF:35:C6:62:AE:CA:FC:F1:BE:59:67:43:BB:C3:12:91:96:C1:58
Authority key identifier: C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD
Certificate issuer:       /CN=A91BB5D6/serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
Manifest number:          DD
Signing time:             Sun 25 Jan 2026 04:51:48 +0000
Manifest this update:     Sun 25 Jan 2026 04:51:48 +0000
Manifest next update:     Sun 01 Feb 2026 04:51:48 +0000
Files and hashes:         1: wpOM5j17miRX6TKieulx0gcEp_0.crl (hash: +7JHZDPD2M9Qm81iUZhAjySkbl/bXy4HmAphlvhta38=)
                          2: EBA68084CB5011F0931F9B82C4F9AE02.roa (hash: 9fQAL/bzJXwpZXC3gS3XqEhK3DPphX2H+iZZTEZAEJY=)
                          3: 486461F6AFD211EF96F7E025C4F9AE02.roa (hash: atU5jRflrWRdDeNRrXad3/x5zwvsglIX5TcPYZiGeNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D6, serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
        Validity
            Not Before: Jan 25 04:51:48 2026 GMT
            Not After : Feb  1 04:51:48 2026 GMT
        Subject: CN=6975a164-9652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:77:26:b0:70:f7:df:82:c6:29:ea:f5:ff:
                    12:89:75:f6:7c:d2:e7:d7:e5:6e:12:dc:08:bc:9e:
                    e9:41:c1:d5:c5:c0:cd:16:f8:89:80:a6:e8:9a:b7:
                    23:42:4a:91:ca:0f:2f:99:c3:6d:5b:64:00:84:c7:
                    74:6e:9b:71:64:0b:94:c1:16:e3:67:5a:08:f7:a9:
                    ba:36:5d:c4:27:e3:44:2a:40:8c:48:43:e7:ed:c8:
                    46:49:3f:a3:0e:80:69:8c:72:6e:42:67:5c:0c:ae:
                    c4:9a:12:06:51:3b:82:da:00:a2:a4:97:c5:e6:57:
                    e1:09:d3:c4:db:f0:38:78:9a:a2:61:70:a6:99:44:
                    91:65:f6:df:ef:ba:e3:09:df:63:46:c0:96:5a:56:
                    53:7b:66:3c:52:7a:3a:42:c0:e6:46:e5:8f:63:db:
                    93:73:1b:a8:7d:41:2f:36:cd:bf:32:7f:a4:fc:e2:
                    00:54:b9:46:f1:c4:d8:1b:a7:dd:80:5a:7a:dc:84:
                    6e:38:ed:9f:75:5f:7c:31:fd:b1:a4:62:9a:a3:e0:
                    45:bf:ee:5f:d7:c9:c6:fc:8b:a0:6a:32:e3:21:ea:
                    d3:b6:45:0b:3e:aa:98:80:36:f0:6f:9d:43:7c:f9:
                    c4:29:0c:b8:07:8b:17:73:20:12:46:94:4a:bc:18:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FF:35:C6:62:AE:CA:FC:F1:BE:59:67:43:BB:C3:12:91:96:C1:58
            X509v3 Authority Key Identifier:
                keyid:C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:03:77:4c:76:23:ff:38:d8:ad:7e:46:c2:e0:6e:66:c5:0e:
         00:c6:e3:9b:65:db:08:27:09:b1:2b:00:7a:e0:86:07:2e:d2:
         fa:78:20:0c:de:73:16:df:3c:e1:b9:eb:f8:ab:a2:e4:ca:5f:
         63:2c:88:f2:bd:76:d4:0a:25:36:76:ed:15:49:d2:19:b3:8f:
         cd:44:a6:84:4f:7c:14:62:8f:e6:cc:49:ed:6c:fc:76:c8:d2:
         8b:c4:fa:a6:9b:2e:4c:fa:f4:89:ac:76:4e:f3:e5:d0:b4:59:
         4e:6f:60:6c:fc:8c:d5:9b:a6:1f:24:f8:1e:3c:d4:2b:9d:74:
         81:ac:a6:02:45:fe:51:83:33:dc:e5:fa:c7:4e:87:ab:e5:b3:
         6c:59:0b:fa:02:c3:bc:1e:4a:34:87:e0:62:8c:0c:2a:89:e4:
         4d:48:7c:53:72:73:62:9e:9e:1d:ea:07:5c:1a:d9:13:6c:14:
         5e:b0:30:21:1c:c6:fc:c7:90:52:61:48:2f:5a:f4:2f:c0:5e:
         38:cd:29:cf:11:b8:55:28:c3:a6:4b:b4:27:27:1e:da:62:18:
         45:42:4b:19:bd:47:9a:6c:4f:c5:a4:eb:e2:10:b6:40:76:2b:
         12:2c:8d:25:3c:66:37:73:8e:f0:9e:fc:71:47:91:70:6a:00:
         2f:fd:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:18 2026 by rpki-client