This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File:                     WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier:          XEdr4BX0Smkj5DiuJWcDxZewYg4Nk7UGpTJNSjy3M3o=
Subject key identifier:   B8:1C:51:1A:28:CA:AC:04:58:67:77:02:DF:17:7E:AE:04:86:78:D0
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       0615
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number:          060F
Signing time:             Sat 24 Jan 2026 22:07:11 +0000
Manifest this update:     Sat 24 Jan 2026 22:07:11 +0000
Manifest next update:     Sat 31 Jan 2026 22:07:11 +0000
Files and hashes:         1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: X/GVBZL4Q7AMdMXXTQLxW4N532WvHgGzdcNf0YrIZOM=)
                          2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Jan 24 22:07:11 2026 GMT
            Not After : Jan 31 22:07:11 2026 GMT
        Subject: CN=6975428f-f6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:a0:43:88:ca:54:7b:c4:a1:26:f1:7e:a4:
                    96:b9:57:c9:1f:4d:11:4c:91:f8:f8:a4:71:a4:30:
                    9c:a3:23:95:21:73:67:e1:6d:d1:58:0f:3a:ca:c2:
                    bf:f3:a5:42:39:cf:a2:af:6d:95:8a:1f:be:a5:6b:
                    6a:70:f5:85:1e:09:26:04:21:30:5e:0f:f2:75:c1:
                    a4:67:77:0a:50:7f:e6:60:f4:2b:af:4d:1e:f1:78:
                    25:f7:18:34:00:81:72:60:eb:7f:ca:a5:be:3c:aa:
                    71:13:2d:f0:5e:37:2e:1b:11:f3:29:46:77:6d:11:
                    61:1d:cd:b5:6f:4f:84:44:84:34:d7:ad:9d:71:3d:
                    15:a3:0a:b4:0a:1b:1f:44:43:4b:63:32:3a:5e:15:
                    d3:26:fe:fa:c5:52:ff:7a:ce:69:a8:0f:74:63:18:
                    d4:81:66:26:8e:41:a0:24:05:18:08:36:cd:8a:90:
                    ee:86:68:ce:a2:a9:f4:de:a0:e7:d6:98:00:f1:89:
                    ec:45:68:5b:e1:2a:54:cf:c1:a7:9d:2b:ba:90:07:
                    d2:70:95:4c:59:17:b4:ab:31:b5:56:2f:17:18:cb:
                    51:29:66:d2:7b:a6:5f:de:30:c7:05:84:42:ec:31:
                    9f:c8:04:86:2f:f3:fe:a9:7d:30:34:8e:d3:2f:4f:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:51:1A:28:CA:AC:04:58:67:77:02:DF:17:7E:AE:04:86:78:D0
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e0:40:3b:e3:ae:a2:a9:cf:8b:06:81:b1:c3:32:bd:ef:85:
         22:14:78:87:05:91:84:94:35:b9:85:0c:9b:ff:ab:1b:f4:cf:
         af:49:3c:f4:89:2b:12:ac:6d:5a:47:50:ff:63:86:11:cf:3f:
         94:d5:19:b0:38:e3:ad:07:83:89:63:7e:51:2f:12:c4:87:2e:
         7e:b2:65:04:34:dd:17:33:79:b8:7f:23:ee:fb:10:0b:1e:ec:
         c6:d1:e8:ed:bc:9d:b1:4e:02:2f:f5:f0:f2:1d:01:33:85:6c:
         41:2b:6a:dd:b4:07:35:04:d9:0e:73:36:d5:37:69:3e:24:88:
         c2:c1:3a:22:c2:bb:71:e0:ed:70:a7:e5:ee:e4:d2:41:00:43:
         68:09:bb:2a:79:30:c9:41:b0:4b:1c:7b:3d:7e:5d:3f:61:ad:
         48:60:f9:b5:bd:c4:dc:a6:dd:9d:a3:f4:7b:d0:97:d5:43:3a:
         06:d5:d0:ed:3e:df:14:c2:b9:a5:12:2d:c8:c1:77:24:f0:a4:
         7b:61:03:2d:df:37:f5:8a:e3:d1:00:54:92:23:28:b3:70:fa:
         23:79:9e:fb:3c:06:40:cb:30:06:cb:c0:91:2e:98:02:0f:16:
         d9:5d:60:b1:1c:10:be:3f:13:b0:eb:27:be:a0:f8:a1:7f:26:
         fc:51:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:42 2026 by rpki-client