This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
File:                     wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json)
Hash identifier:          EJ0ymb966HY1q8cREyyyUf6Jrm07IOBbkQ/qV55G8nk=
Subject key identifier:   1E:56:98:51:54:47:7D:02:F8:C4:3F:C9:33:4B:65:91:AA:4A:1B:69
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Certificate issuer:       /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial:       09B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
Manifest number:          098D
Signing time:             Sat 24 Jan 2026 19:27:56 +0000
Manifest this update:     Sat 24 Jan 2026 19:27:56 +0000
Manifest next update:     Sat 31 Jan 2026 19:27:56 +0000
Files and hashes:         1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: OKj3WRZNgoDbYr61wZ59HpLLWM+qpOnTBML38O8Jm6Y=)
                          2: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=)
                          3: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=)
                          4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=)
                          5: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=)
                          6: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=)
                          7: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2481 (0x9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
        Validity
            Not Before: Jan 24 19:27:56 2026 GMT
            Not After : Jan 31 19:27:56 2026 GMT
        Subject: CN=69751d3c-faaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:ae:ac:49:90:c9:d1:0e:d0:ed:0d:12:ae:
                    27:d8:c8:48:a0:7e:3c:4e:49:f4:68:04:a7:49:1e:
                    fa:0b:f9:e7:63:32:e6:26:99:ec:5b:2d:32:2e:30:
                    3a:77:b2:fb:b0:ec:e5:1b:a7:28:f2:85:6c:2d:8d:
                    bf:dc:ec:a4:ca:93:b9:ba:23:9e:82:8e:34:37:19:
                    5d:39:71:a5:fb:93:ff:b7:85:1d:08:ce:0b:c8:6e:
                    1e:28:0a:f4:8e:e0:9c:f5:bf:40:fe:dc:08:ff:89:
                    da:a3:0e:a0:be:f3:1e:1e:e7:9c:d7:05:95:69:73:
                    9b:19:36:8b:aa:af:ff:8e:11:e8:66:27:da:83:a5:
                    c4:de:23:32:27:83:92:fe:54:a6:15:d3:d5:21:71:
                    b6:26:d9:45:27:44:bd:25:76:f7:31:99:8e:5f:5a:
                    8d:ff:53:39:c1:17:6e:06:db:7d:12:54:8c:ee:ca:
                    fd:3b:66:3d:68:5f:e3:3d:69:3a:5b:cc:fd:bd:b0:
                    07:97:50:15:2a:bf:91:db:d7:0c:df:69:5f:34:91:
                    d0:82:1e:e4:b4:aa:d6:9a:23:af:d5:00:7d:74:9c:
                    44:00:b6:7e:a5:9e:37:f4:3c:ed:56:38:9b:7e:77:
                    0b:5a:04:06:97:f6:23:7b:38:a3:f6:52:93:8b:83:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:56:98:51:54:47:7D:02:F8:C4:3F:C9:33:4B:65:91:AA:4A:1B:69
            X509v3 Authority Key Identifier:
                keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:25:34:47:83:c2:ad:a9:34:36:28:94:32:44:f8:25:bf:
         5d:eb:97:bc:6d:b4:57:0e:9f:5a:af:be:49:58:86:21:b6:aa:
         2e:fd:ae:37:a0:2e:fc:39:91:1d:90:64:61:cd:fe:bc:fa:e8:
         04:41:e3:e8:07:fe:bd:54:95:c3:dd:c4:00:d3:a5:5b:e1:b0:
         7c:2e:a5:46:02:f9:d3:fd:bf:7b:58:d4:b6:54:db:50:b9:4c:
         46:56:5b:d9:ef:52:18:67:5e:3f:42:f5:8b:e2:d9:44:31:58:
         85:81:f2:74:89:aa:bd:78:c2:0d:39:51:df:77:9e:55:c5:16:
         4e:71:1f:d2:18:ef:ca:73:a7:26:0e:13:51:f1:71:3b:08:25:
         18:24:ca:28:07:60:01:88:fa:32:8a:1b:2f:c5:bc:01:f3:4f:
         da:cb:cb:f1:57:21:df:e6:4a:c6:e2:20:1c:e0:c4:c4:c8:b5:
         10:67:3f:f5:61:42:c0:40:fc:ef:fd:0a:88:a1:c3:f6:7a:91:
         89:ea:11:d9:64:68:3c:84:6e:c5:98:ba:fe:1f:e4:f1:d1:84:
         42:b4:2f:f1:53:a6:ed:6a:7f:93:dc:b1:66:de:8c:77:77:90:
         a5:4f:56:a3:30:2e:56:f2:ab:1c:ed:56:21:6a:51:ca:46:d9:
         70:ec:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:40:42 2026 by rpki-client