This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File:                     wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier:          zJC8UnSLVZ0WKgwRa6DZRRTXp2BK8hYX4q7YSe3anV8=
Subject key identifier:   B5:B9:5C:E9:C5:7C:B0:85:E6:9C:CF:0A:37:5D:D1:B9:35:8C:0F:E9
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer:       /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial:       082B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number:          0825
Signing time:             Sat 24 Jan 2026 20:17:59 +0000
Manifest this update:     Sat 24 Jan 2026 20:17:59 +0000
Manifest next update:     Sat 31 Jan 2026 20:17:59 +0000
Files and hashes:         1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: O90LX0N/ZWcz67dOsh+KYDzEajHs21IHCJz/p1+Sl7E=)
                          2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: j533qWfQDQ1HymyH0hgMDgvytaiHKZxrVSfT2G+RT2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
        Validity
            Not Before: Jan 24 20:17:59 2026 GMT
            Not After : Jan 31 20:17:59 2026 GMT
        Subject: CN=697528f7-af80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:79:34:2f:8b:f2:78:f8:34:c5:22:8f:a7:
                    9d:5a:06:49:b5:29:cf:53:6a:01:f2:88:14:21:79:
                    e7:23:71:e8:93:a7:04:10:af:d8:82:5e:1e:c6:42:
                    7d:01:81:8e:95:c2:fc:d3:3e:9d:11:16:fd:39:3f:
                    77:a9:53:84:3c:a6:a2:1b:22:0b:ac:0e:57:61:b5:
                    39:57:2d:9f:dd:9b:84:64:94:6e:52:7a:48:d4:88:
                    1b:6b:a3:ed:93:ce:90:09:d5:22:62:ba:38:3f:cd:
                    6b:88:d9:4c:28:44:78:74:1f:91:53:96:09:7d:85:
                    f0:5d:a2:79:95:6c:6c:b0:a7:4e:52:0e:d6:d7:64:
                    13:07:95:a8:12:e6:84:11:7f:98:e3:5c:8c:9b:fe:
                    4d:57:4e:57:18:1a:a2:fe:4f:bf:a4:75:16:1f:ac:
                    48:d8:5e:e1:39:86:92:8b:4f:88:b2:0b:12:61:11:
                    69:e2:c0:d6:ea:8a:40:78:34:a9:15:d2:f1:33:6c:
                    65:91:ad:64:8f:05:73:9f:0a:04:b3:26:ce:01:42:
                    0d:84:04:1f:f0:9f:15:45:25:c7:8d:60:66:64:bc:
                    da:4c:cf:c5:9e:93:a4:e1:bf:64:2b:39:1d:fa:1a:
                    ef:29:c5:17:62:c3:4a:78:42:00:86:af:fd:ea:1c:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B9:5C:E9:C5:7C:B0:85:E6:9C:CF:0A:37:5D:D1:B9:35:8C:0F:E9
            X509v3 Authority Key Identifier:
                keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:1c:03:3b:70:1d:54:44:72:08:c6:66:99:b0:c0:b2:75:
         30:dd:3c:12:36:3d:70:85:25:81:cc:2a:ec:ea:03:0c:24:94:
         a5:57:e8:95:46:4c:ac:af:c6:64:b6:9d:1d:49:8b:6d:1f:0a:
         a0:22:80:a7:ae:eb:8a:07:a1:a6:d9:e8:36:ea:25:56:51:ed:
         a9:2f:25:17:df:30:93:2d:99:a3:78:ea:33:20:ff:aa:35:36:
         e4:df:69:39:d6:af:2d:31:77:34:a8:5a:78:5a:a4:af:2a:fb:
         71:df:22:88:2a:c7:ae:9f:ab:9a:96:ee:37:ef:ea:cd:93:15:
         cf:39:6c:af:f9:5d:e6:32:ca:ae:3a:ef:f4:04:8f:95:47:cd:
         79:cc:22:9d:5f:2c:5b:9d:da:40:ba:0a:28:ce:36:21:4c:88:
         70:c0:ea:e7:28:95:9a:83:da:6d:1c:b4:94:2a:94:0d:73:65:
         96:f4:1c:ed:59:9d:43:dd:cb:69:d4:79:42:ad:31:c6:ca:c0:
         28:8a:cf:4d:ef:31:32:fb:0c:80:64:a2:9e:34:e6:df:e3:40:
         c5:20:2f:ba:21:9a:42:f4:13:d6:ae:ad:4a:66:6f:86:22:74:
         50:2c:2e:f7:1b:c5:ba:64:4b:06:3d:b2:58:90:38:9c:82:49:
         97:17:96:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx
OUIwNjI1MEQwHhcNMjYwMTI0MjAxNzU5WhcNMjYwMTMxMjAxNzU5WjAYMRYwFAYD
VQQDDA02OTc1MjhmNy1hZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Al5NC+L8nj4NMUij6edWgZJtSnPU2oB8ogUIXnnI3Hok6cEEK/Ygl4exkJ9
AYGOlcL80z6dERb9OT93qVOEPKaiGyILrA5XYbU5Vy2f3ZuEZJRuUnpI1Igba6Pt
k86QCdUiYro4P81riNlMKER4dB+RU5YJfYXwXaJ5lWxssKdOUg7W12QTB5WoEuaE
EX+Y41yMm/5NV05XGBqi/k+/pHUWH6xI2F7hOYaSi0+IsgsSYRFp4sDW6opAeDSp
FdLxM2xlka1kjwVznwoEsybOAUINhAQf8J8VRSXHjWBmZLzaTM/FnpOk4b9kKzkd
+hrvKcUXYsNKeEIAhq/96hwwdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW5XOnF
fLCF5pzPCjdd0bk1jA/pMB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy
RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK
Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUtBwDO3AdVERyCMZmmbDAsnUw3TwSNj1whSWBzCrs6gMMJJSlV+iV
Rkysr8Zktp0dSYttHwqgIoCnruuKB6Gm2eg26iVWUe2pLyUX3zCTLZmjeOozIP+q
NTbk32k51q8tMXc0qFp4WqSvKvtx3yKIKseun6ualu437+rNkxXPOWyv+V3mMsqu
Ou/0BI+VR815zCKdXyxbndpAugoozjYhTIhwwOrnKJWag9ptHLSUKpQNc2WW9Bzt
WZ1D3ctp1HlCrTHGysAois9N7zEy+wyAZKKeNObf40DFIC+6IZpC9BPWrq1KZm+G
InRQLC73G8W6ZEsGPbJYkDicgkmXF5a+
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:34:20 2026 by rpki-client