This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File:                     wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier:          2fDNkUVHJKlL50JK+yKZ/tUG2IxViS975ryVig6ITG4=
Subject key identifier:   42:7F:FA:E1:E0:1D:93:42:E1:65:77:40:B2:68:AA:C4:BB:30:3E:D5
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer:       /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial:       3515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number:          350A
Signing time:             Sat 24 Jan 2026 14:58:40 +0000
Manifest this update:     Sat 24 Jan 2026 14:58:39 +0000
Manifest next update:     Sat 31 Jan 2026 14:58:39 +0000
Files and hashes:         1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: 4bEFItewNnwOZtG6CNpw/nDtPYDDB2tO9hJ1fbsP5Pw=)
                          2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: sb92Yiu1DkaA/Jlw4YPyCeHs7T2hutc7NkpwUwObZxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
                          rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13589 (0x3515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
        Validity
            Not Before: Jan 24 14:58:39 2026 GMT
            Not After : Jan 31 14:58:39 2026 GMT
        Subject: CN=6974de20-54c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:b8:cb:42:6d:89:ee:7d:00:b2:e9:1d:ea:
                    df:03:cf:25:b8:ab:b5:da:01:8a:e0:2b:18:9e:39:
                    3e:86:8a:14:eb:dc:a3:55:20:01:ae:d0:78:1b:3f:
                    84:05:56:e5:2b:d9:09:7c:47:84:bc:b3:68:78:99:
                    7e:8b:32:a2:1f:8e:91:b3:ab:c4:6d:60:9b:7b:ba:
                    e7:dd:4d:b4:07:5d:87:3a:14:d5:e6:20:d2:8e:aa:
                    bb:21:87:54:6f:76:b9:70:11:f3:0c:e8:05:1a:cc:
                    b9:49:92:1b:1b:d6:5b:38:db:9a:35:fb:5f:96:69:
                    e5:a4:e6:4a:e4:2a:5f:94:12:86:9d:87:66:d1:c7:
                    64:b6:2d:62:c3:2d:aa:b4:ea:83:ad:f3:6e:9a:de:
                    dc:9b:2b:30:91:b9:f8:7f:a2:10:a3:bb:b5:18:7a:
                    fa:04:57:75:55:8b:0f:f6:c4:26:bc:4a:b7:ac:1c:
                    56:5b:eb:5c:c3:a1:ac:10:b8:69:fd:3a:9c:2b:19:
                    b6:69:ff:24:6b:51:cb:f1:51:49:96:33:bd:55:25:
                    c0:4e:88:e5:4f:16:41:6f:87:fd:7e:3e:3f:a6:3a:
                    8e:4b:03:5c:1c:04:03:a1:87:ce:26:86:98:e0:30:
                    00:10:fd:2c:e0:f6:25:e1:da:d6:0d:ba:ea:72:29:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7F:FA:E1:E0:1D:93:42:E1:65:77:40:B2:68:AA:C4:BB:30:3E:D5
            X509v3 Authority Key Identifier:
                keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:1c:4e:2b:c9:da:06:52:8d:2b:6c:8d:6a:92:3e:05:bf:
         ee:41:9e:d8:84:73:5c:36:18:38:4c:1a:12:01:6b:69:7a:57:
         97:7c:71:e7:95:cc:de:fa:b3:6a:24:68:07:11:5b:76:bd:ef:
         18:10:f1:69:45:61:29:2b:e5:b6:eb:45:79:c6:0e:92:2a:54:
         f6:5a:53:2b:33:83:71:db:30:c5:64:9d:4b:7f:8b:5c:40:ec:
         a6:51:41:37:53:68:02:0c:fe:99:5b:5b:cf:e8:f3:35:91:d6:
         f6:c6:d5:68:f8:6f:7a:36:31:a4:28:7c:02:7f:ed:b6:de:2a:
         ee:8e:5c:89:ea:ae:96:d7:f1:44:a9:49:de:29:40:aa:f7:68:
         59:43:85:57:7d:24:1c:24:e3:88:25:42:9b:59:c6:3a:62:d5:
         1b:77:e5:a9:5b:d6:2e:39:ca:78:da:b5:85:e8:24:29:22:7c:
         51:45:de:da:62:88:b5:66:37:74:7b:8b:97:af:40:8e:8b:0c:
         a8:bf:ce:aa:99:9e:47:93:a9:9f:2d:d0:c0:b2:27:9a:74:c3:
         5e:f6:e2:fe:3d:ae:eb:6a:e3:f7:64:79:8c:a2:a2:54:9e:86:
         f7:af:8f:43:ae:1a:d7:92:ff:f9:05:5e:65:95:58:83:e2:42:
         55:12:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:55:37 2026 by rpki-client