This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
File:                     Wnot3qYsiQ6QHx3NQEb814zAtBw.mft (raw, json)
Hash identifier:          8TPZghMwzHLMQvQabHbOjsdnxDlCQWDaVT2Lqo/XdZQ=
Subject key identifier:   83:3D:1B:07:95:95:36:A1:D3:3E:93:69:AA:22:19:6E:7D:10:6C:55
Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C
Certificate issuer:       /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C
Certificate serial:       070D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
Manifest number:          0708
Signing time:             Sat 24 Jan 2026 21:12:41 +0000
Manifest this update:     Sat 24 Jan 2026 21:12:41 +0000
Manifest next update:     Sat 31 Jan 2026 21:12:41 +0000
Files and hashes:         1: Wnot3qYsiQ6QHx3NQEb814zAtBw.crl (hash: Qq0y+C5cmKI2rf+ISw4oxsXJhFL9Oval750gWbp1Tw8=)
                          2: 7C7FDC646FF711EBA7506161C4F9AE02.roa (hash: +n5J+qx7tpV2H+mHVC6O7TSh7QMWtrt2mfYoCJ9j4Ho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E89AF, serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C
        Validity
            Not Before: Jan 24 21:12:41 2026 GMT
            Not After : Jan 31 21:12:41 2026 GMT
        Subject: CN=697535c9-575b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:08:d7:a9:c2:f7:c3:01:e9:3c:25:78:fc:
                    94:7f:48:61:02:a5:8a:3b:8b:92:6c:88:80:89:55:
                    0b:b7:52:44:c7:58:28:79:bc:a7:d5:61:40:4a:0c:
                    44:26:8a:cc:64:87:85:eb:1c:29:f1:32:4c:e6:30:
                    3c:9a:f2:41:6f:87:01:14:1c:3e:8a:48:d6:5a:95:
                    55:36:ed:7d:28:d0:93:55:e0:72:9c:3b:1e:5c:24:
                    32:e4:a1:ec:f5:15:6d:0b:3a:9b:b8:de:5d:a5:00:
                    e7:76:28:15:25:c7:3a:d6:4a:69:f9:a7:44:3a:e6:
                    e4:6a:d6:62:e8:bd:05:8e:5d:5c:ba:3c:aa:02:63:
                    1d:e2:56:37:08:fb:65:18:f6:ac:3a:b1:7b:57:1d:
                    59:15:f7:6f:13:3c:62:68:b5:98:52:cf:2e:12:02:
                    11:66:c4:c4:fa:51:49:85:b6:d8:d8:2a:28:4a:bc:
                    36:c8:fd:f2:1a:f2:eb:2f:a5:da:95:b2:e3:3b:b3:
                    31:88:36:27:5c:ef:f2:ce:db:fe:fc:2b:02:ae:9c:
                    a9:80:20:1c:58:f5:9e:79:64:1e:c3:43:48:55:83:
                    16:f1:a4:e6:c8:f2:19:9e:9a:1c:bc:69:98:d8:4d:
                    d1:f6:6b:4f:87:ed:c7:16:d1:9d:af:51:ba:03:8b:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:1B:07:95:95:36:A1:D3:3E:93:69:AA:22:19:6E:7D:10:6C:55
            X509v3 Authority Key Identifier:
                keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7e:c9:6e:51:11:fd:ec:9b:6f:be:8c:c1:c8:d1:3d:8f:ef:
         c4:cd:f1:a0:cc:a0:2a:03:88:be:61:f2:52:76:08:13:a6:47:
         9d:f7:1a:c5:f4:61:dc:03:68:9a:ea:ec:9f:62:e9:80:c9:59:
         b5:b6:c6:34:bc:a0:d3:0e:ee:4a:6c:8a:1d:30:03:2c:92:c6:
         0e:92:b0:3b:95:16:42:47:bc:d4:6f:5c:d7:dd:60:94:dc:29:
         b0:b6:1e:12:16:9d:66:34:0b:91:c4:90:34:f8:43:91:ab:fc:
         6d:c7:e9:73:5d:38:ed:b8:68:b6:e3:e2:36:37:30:a5:7d:5e:
         fc:4e:7a:5b:b4:ac:44:19:b7:8d:5f:d4:3a:78:fa:38:53:3b:
         38:aa:7e:2f:b5:cc:b7:ed:6a:99:bb:20:c2:b5:c5:4a:8c:93:
         fa:f1:d0:3d:92:06:7d:20:7d:e2:f5:2f:35:4f:5d:a6:da:e8:
         f4:7a:0c:99:b7:ab:7d:19:3c:a2:bd:ba:21:66:8b:7b:98:be:
         9d:11:08:bb:79:62:a0:da:91:97:71:6b:b4:cb:3f:5a:a5:28:
         c0:11:e5:cc:24:ef:0c:8d:d0:96:39:43:97:1a:b1:25:54:1d:
         5b:e7:81:70:41:2b:8b:89:a5:5c:58:c4:36:aa:e2:7c:ae:3c:
         d8:bf:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:29 2026 by rpki-client