This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File:                     SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier:          HRCjqpOSHKoT1lFfOM+QXvCRAJYR4e7bJN107c51RXE=
Subject key identifier:   7C:EC:17:81:67:99:FF:6D:48:6F:46:BD:31:0A:56:CB:B4:68:14:09
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer:       /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number:          1F
Signing time:             Sun 25 Jan 2026 01:48:25 +0000
Manifest this update:     Sun 25 Jan 2026 01:48:25 +0000
Manifest next update:     Sun 01 Feb 2026 01:48:25 +0000
Files and hashes:         1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: Dat8KoKxqnBxp0E+PcFqCtuyKz/keGcNNonb2od5DrE=)
                          2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 6w+qBhaQP14zy72YyydEIPq0/gA1jmSu65E6u7NcIZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
        Validity
            Not Before: Jan 25 01:48:25 2026 GMT
            Not After : Feb  1 01:48:25 2026 GMT
        Subject: CN=69757669-76d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:b9:97:ad:79:61:50:04:71:b8:62:e9:97:
                    94:04:36:67:79:63:a1:e6:36:5d:4b:7a:bd:53:81:
                    9f:ee:60:f4:f6:6e:f3:db:b9:57:b2:76:63:e9:70:
                    da:93:0d:07:32:a7:9a:53:01:c8:01:06:b2:ff:3f:
                    95:01:1f:c6:2a:c9:f4:00:63:5a:0b:ce:4e:f9:0a:
                    69:65:e4:2a:2c:a8:a4:a4:d3:c3:94:16:1d:55:6e:
                    db:07:01:14:9e:97:d2:2d:33:80:4f:07:c2:f9:ed:
                    2f:74:47:39:23:c4:33:40:2e:60:c0:4d:36:16:10:
                    4d:55:69:e6:3b:8e:d5:b3:8d:dc:e0:91:e9:ca:a5:
                    cb:16:81:d5:87:4f:6d:db:1a:64:09:d2:15:12:36:
                    85:a8:1c:33:ab:2f:29:83:88:c8:11:82:9e:d9:1c:
                    30:3b:29:26:9d:5c:45:0f:54:62:56:08:41:5d:78:
                    11:3a:87:b2:ac:79:92:2b:c1:b8:5b:8a:87:09:35:
                    56:b3:96:1d:07:05:bf:0c:2e:ed:25:b3:f4:8f:9a:
                    f4:0a:ae:be:fd:58:79:75:32:98:6c:0a:df:d1:c1:
                    1b:94:df:28:a2:36:25:e8:6c:ac:43:36:87:b8:fd:
                    92:e5:df:36:b7:90:c0:b1:c5:bd:c2:75:c9:04:45:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EC:17:81:67:99:FF:6D:48:6F:46:BD:31:0A:56:CB:B4:68:14:09
            X509v3 Authority Key Identifier:
                keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:a6:96:4a:e0:6d:04:24:ce:41:f5:24:5a:43:63:2c:27:
         5e:cb:26:43:56:86:84:7c:13:77:d9:d2:93:02:58:2b:57:d5:
         10:d0:ca:89:ce:88:82:64:b2:3d:26:d0:3b:6b:36:84:4d:ae:
         d9:b6:f1:5b:14:4f:4e:4a:12:64:13:84:a2:89:cb:a8:f7:24:
         32:1f:8a:76:f0:c3:93:85:ff:66:71:73:18:64:71:cd:57:60:
         19:10:40:50:5b:83:e2:20:11:c0:92:19:38:c7:0a:15:f8:64:
         db:f2:91:73:be:c9:4c:66:d0:9e:e8:60:d2:1d:f1:c2:bf:e1:
         fe:fd:31:0a:0e:de:78:d4:0e:b0:b1:79:01:ab:66:13:1d:44:
         2d:15:32:06:21:11:8b:68:3f:f9:c6:ce:90:f4:81:0c:05:d8:
         7f:52:32:69:40:c7:2f:0f:89:8f:33:e4:56:14:fb:15:d6:be:
         c7:f3:fc:cd:a8:72:00:7b:43:d9:41:8a:9c:f1:93:4c:05:d2:
         a4:80:78:7a:64:d8:ec:26:38:88:53:99:a5:1a:3e:ef:83:59:
         81:d6:c2:01:79:c4:70:d7:55:f2:4e:fd:93:6a:70:0a:d7:86:
         e3:7c:6d:79:69:bd:42:bb:f8:65:73:2b:00:f4:f2:51:7c:05:
         a8:ba:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:41 2026 by rpki-client