This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          7HDLwbFq9Vn+shuCwRBsRVbnSjbKM/b/4Q34KYHoHSA=
Subject key identifier:   AE:ED:C4:DE:5D:7F:4A:F8:3C:80:D4:67:EA:2E:70:0D:D9:2E:1B:52
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          35A0
Signing time:             Sat 24 Jan 2026 14:44:49 +0000
Manifest this update:     Sat 24 Jan 2026 14:44:49 +0000
Manifest next update:     Sat 31 Jan 2026 14:44:49 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: NO4gbn5UTCZEsWTfczJYbfrRgxa6L98TGUJxLCQD5NE=)
                          2: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
                          3: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
                          4: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
                          5: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
                          6: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
                          7: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
                          8: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
                          9: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: FY0t2N10iRK+Zr0ip8svKKHBrZSNX6MAybdSYEAFs30=)
                          10: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
                          11: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
                          12: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
                          13: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: bdFFvc6eNQU1+yjsu6zdGpd9HjnTWxx0y+6B+LSnliU=)
                          14: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
                          15: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
                          16: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
                          17: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
                          18: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
                          19: BA0DF746D9F611F08511A4D47CD3641D.roa (hash: FaBVsUXWtdTBULefU8iO1BgtwzRuhinKdm9tVg3D5qQ=)
                          20: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
                          21: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
                          22: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
                          23: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13971 (0x3693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Jan 24 14:44:49 2026 GMT
            Not After : Jan 31 14:44:49 2026 GMT
        Subject: CN=6974dae1-8323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:04:9d:12:e8:e2:6c:04:81:45:59:80:ac:
                    6a:0f:8b:5c:8c:b4:a1:e2:65:05:49:53:05:c8:39:
                    a4:a7:3d:cc:35:a1:b3:c8:99:3b:2d:fa:70:c1:1b:
                    fa:01:da:7a:61:f6:67:3e:aa:8b:1e:69:29:c6:8f:
                    61:b2:22:57:2b:d4:a4:b0:7e:c3:4a:8d:90:9f:64:
                    83:b7:6b:2c:34:f2:dd:ef:2f:f1:b7:3f:bd:30:ac:
                    ca:51:59:0e:d8:20:7d:46:7a:79:93:f5:df:a3:24:
                    6c:91:f3:8a:bc:55:60:70:73:e0:c1:d5:18:7f:42:
                    3b:b0:38:c0:e5:b3:f1:5a:11:0d:1c:93:cf:f8:ca:
                    34:74:be:eb:fb:ff:64:f2:7d:ec:7b:41:96:b8:e2:
                    f5:b0:88:bf:91:18:7c:71:d9:2c:73:a8:cb:a1:af:
                    24:0d:d2:89:d7:91:6d:e2:4e:37:31:b9:be:21:2b:
                    cb:4e:3d:1d:99:48:5b:98:80:4a:cd:67:d5:05:96:
                    b5:b9:c5:d1:31:18:22:a4:b8:3b:88:aa:60:49:c8:
                    ff:76:f1:cc:bb:d9:31:85:1b:7b:7d:f4:14:ef:60:
                    eb:06:d0:21:fa:9a:a1:dd:51:70:0c:ea:a6:eb:51:
                    96:19:56:13:9b:11:b1:9b:e2:93:f6:c7:72:30:d6:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:ED:C4:DE:5D:7F:4A:F8:3C:80:D4:67:EA:2E:70:0D:D9:2E:1B:52
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:60:0a:6e:d7:d6:94:19:08:cf:48:0a:15:6d:06:7b:02:c5:
         71:86:49:16:88:82:fa:35:dc:a2:03:45:62:e5:3d:f4:93:16:
         bf:01:c7:3c:de:18:9c:ec:fe:36:06:8c:01:50:dd:5e:9b:fc:
         e3:e3:b7:d0:04:58:6c:93:91:0d:57:1c:59:08:fe:cd:e4:55:
         d4:08:7f:77:8b:79:93:c5:59:6b:23:54:13:0b:a8:6e:2b:b0:
         55:de:ba:22:43:70:57:f7:e7:ca:8f:ec:b5:91:fd:97:f2:81:
         01:d8:76:8c:40:f4:90:c9:14:60:94:77:3d:fc:6d:e2:9b:ed:
         c4:91:4e:ae:84:35:0f:c2:17:3a:bb:e2:80:61:80:e9:d1:46:
         b4:eb:84:81:fd:88:e9:2b:3d:17:b8:3f:1a:ff:26:23:2b:f6:
         ff:4d:f3:b1:24:4d:bb:a1:02:e6:3c:97:7b:39:f9:46:eb:fb:
         87:b4:6a:ab:c0:cd:b7:d1:d3:35:27:f0:cf:4f:3e:bf:5d:54:
         75:87:ac:e2:b5:aa:ef:91:f7:f1:c7:1a:62:a0:99:77:fb:60:
         67:fc:5c:d4:53:88:09:bb:de:b7:59:73:1d:74:1b:e0:49:bb:
         ad:78:fe:fa:09:3e:c5:ad:cb:1d:cc:2e:8e:8f:11:33:e5:9d:
         83:f2:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:51:36 2026 by rpki-client