This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
File:                     wngM_VepmGmT2_bA1r3u92tFGXI.mft (raw, json)
Hash identifier:          5Tm+dnTk+/k7TJ+CqO7z8LxtzAqoBOXpdvttSQ3pjJw=
Subject key identifier:   6E:C3:A9:71:EB:85:18:B4:5F:5E:B8:CE:26:77:A8:AC:62:1C:75:AB
Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
Certificate issuer:       /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
Certificate serial:       0AD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
Manifest number:          0ACD
Signing time:             Sat 24 Jan 2026 18:57:00 +0000
Manifest this update:     Sat 24 Jan 2026 18:57:00 +0000
Manifest next update:     Sat 31 Jan 2026 18:57:00 +0000
Files and hashes:         1: wngM_VepmGmT2_bA1r3u92tFGXI.crl (hash: yzKxhi/8deUSvFUIlnCpKqurmEQDpzH4/cjQczQjjMA=)
                          2: BCFA6274C35C11F0BCE51340C4F9AE02.roa (hash: W5BhLwm8XeaqdragIwCA+lMkwRm6VapbpwEXtnEy0Xw=)
                          3: 828FBA521E3511EB800DB148C4F9AE02.roa (hash: oGaPAiCIGxwvx1m0yhdtvzk/Yk0mtLu3eaCey59T6YI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
                          rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2776 (0xad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E007B, serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
        Validity
            Not Before: Jan 24 18:57:00 2026 GMT
            Not After : Jan 31 18:57:00 2026 GMT
        Subject: CN=697515fc-d534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:ba:7b:06:20:ba:b3:80:e7:67:70:3d:c4:
                    a5:6a:e5:c7:71:4a:5d:97:78:ad:a3:98:e7:56:e8:
                    53:83:37:8b:dc:9c:0c:bc:d2:1d:fa:cf:50:0b:68:
                    70:8b:98:89:fa:af:8b:eb:64:93:8f:17:10:5b:93:
                    0d:94:4f:12:16:27:fa:7c:a6:99:b6:4f:c6:57:48:
                    65:fa:89:df:6e:95:18:cc:72:45:1d:09:25:d0:23:
                    06:f7:1a:d6:82:60:fa:96:f0:e6:05:38:b7:74:c7:
                    1f:a1:f0:76:de:a3:62:6b:e5:3d:99:eb:26:f0:71:
                    7c:12:8a:5e:c9:a6:cc:1c:b1:db:e0:14:f3:51:0c:
                    c2:a2:c4:20:e2:5c:e5:92:ef:8c:d5:b5:a0:ee:55:
                    a3:c5:e3:62:16:a0:1b:3a:79:c6:31:ca:ff:4f:37:
                    bc:04:a1:76:d9:4c:6c:b2:0e:63:77:29:dc:55:73:
                    86:0b:e0:45:86:90:f2:c0:0e:cf:80:98:18:a6:89:
                    a0:3b:12:87:9f:c0:02:31:58:37:de:d2:7e:db:e6:
                    d0:79:db:43:07:d5:c7:09:9f:63:5c:00:c1:41:71:
                    84:f1:01:57:07:70:65:9b:ba:e1:59:3f:4f:e1:67:
                    d8:bc:02:cf:c1:66:16:cf:cd:ce:b7:a4:92:10:25:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C3:A9:71:EB:85:18:B4:5F:5E:B8:CE:26:77:A8:AC:62:1C:75:AB
            X509v3 Authority Key Identifier:
                keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:c4:f8:12:42:36:a1:f6:06:f3:5b:ae:c0:a9:97:19:f0:
         54:f8:bf:53:f0:b5:66:38:64:ba:37:6e:eb:38:f2:79:c7:2e:
         d8:89:3a:d0:8b:18:47:4a:af:4b:4a:1c:dd:ab:f7:d7:42:c9:
         3b:ba:81:91:d5:b8:97:34:76:fc:62:c3:7b:f3:64:8f:88:1e:
         0e:bf:59:44:cf:f6:d7:ba:df:85:4a:0e:af:c4:9b:e0:d8:fb:
         44:33:3a:11:1a:1f:6d:e9:27:ce:ac:e3:48:2f:97:b0:1e:20:
         94:3f:1a:73:cb:c6:23:6f:56:0f:a1:54:c0:46:0a:65:22:63:
         d1:47:4a:cf:33:f8:7e:ca:0f:0f:03:9a:1b:1a:ed:1b:e7:e1:
         6b:55:7e:fc:2d:b3:a9:32:49:4b:9c:15:bf:d3:76:d3:e7:dc:
         94:ae:11:a5:26:0c:ca:45:e8:23:db:74:2b:5b:e1:de:af:2a:
         35:ea:5b:89:0c:13:e7:be:74:5c:7f:fe:a5:17:98:39:fc:37:
         43:bc:02:83:4d:37:aa:6d:aa:cf:a6:21:40:10:bd:78:14:12:
         3a:49:d6:66:c2:00:63:4c:06:71:13:2c:28:fc:6d:c2:53:e0:
         49:6c:b6:ea:ef:29:c4:9f:07:89:58:a7:13:f7:1b:66:42:d6:
         67:20:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:35 2026 by rpki-client