This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File:                     WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier:          L8hykTzDl/fdfmwpNm2HN3ZGF7Z45JHmpP7TWofFDqo=
Subject key identifier:   2B:7C:1C:E2:7E:F2:EE:92:0A:AE:6E:CB:E7:7D:AF:61:79:8D:05:B6
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer:       /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number:          0215
Signing time:             Fri 23 Jan 2026 01:25:45 +0000
Manifest this update:     Fri 23 Jan 2026 01:25:45 +0000
Manifest next update:     Fri 30 Jan 2026 01:25:45 +0000
Files and hashes:         1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: pAG5TRZdDa4by2qMhu8hdtfEET742HJ+H3f98Cc0cTM=)
                          2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: c6BodR5dfNjZNrckNbO0cz92rFo/n6093hWBqJQxy5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
                          rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 01:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
        Validity
            Not Before: Jan 23 01:25:45 2026 GMT
            Not After : Jan 30 01:25:45 2026 GMT
        Subject: CN=6972ce19-e8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:26:31:13:37:06:49:61:31:8a:19:17:c3:
                    52:38:ce:f7:93:8e:4a:29:ec:23:d9:81:8a:bc:60:
                    aa:e6:77:56:60:7e:a8:79:4f:52:c9:13:c3:94:42:
                    12:c4:35:cf:7c:2a:86:c0:c3:80:da:2d:d1:8d:00:
                    71:96:d6:38:e9:be:b8:a2:53:e0:7d:01:99:4a:1f:
                    d2:c9:b8:c4:cb:39:41:da:77:55:e3:19:17:1b:9d:
                    9f:5b:42:0d:5d:74:cd:55:15:6e:98:3d:47:2e:bd:
                    be:bc:5d:5e:2c:68:cb:f9:37:37:79:7c:95:20:ef:
                    a0:8f:10:cc:5e:21:42:41:5b:85:f2:84:f8:e2:20:
                    22:b4:80:62:e0:42:da:0c:c2:c4:d9:9a:5f:67:1c:
                    0a:c4:41:70:ea:c9:1a:69:bc:b4:10:88:07:a9:29:
                    62:99:8b:90:e6:b8:58:de:8c:0c:2f:60:eb:95:71:
                    ef:0c:50:4d:85:8e:9e:6e:8a:6e:24:37:f8:93:5e:
                    41:82:b9:d7:ce:b5:ba:2d:49:57:b4:73:84:f6:23:
                    6b:eb:0b:fc:5b:07:a6:84:1c:e8:d9:05:f4:cc:84:
                    1e:59:e5:b7:76:44:6e:ae:28:1e:89:3d:ed:b2:fd:
                    9d:ef:a4:d6:17:1f:8b:16:30:bc:32:ad:4c:67:f6:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7C:1C:E2:7E:F2:EE:92:0A:AE:6E:CB:E7:7D:AF:61:79:8D:05:B6
            X509v3 Authority Key Identifier:
                keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:53:84:6a:99:20:ba:2d:dd:4c:fd:ee:0a:9d:5b:22:4e:
         03:b8:c3:39:30:da:30:fa:49:20:82:6d:2e:8d:ac:9f:84:5a:
         be:81:68:f6:55:89:62:f7:55:93:4e:08:56:aa:3c:4b:ea:ed:
         3b:63:01:a4:80:c1:20:c1:b4:0f:5f:22:6e:d5:0b:40:19:7a:
         07:15:db:58:33:16:c3:3b:c8:c2:3f:08:03:43:1f:a3:9e:d4:
         08:5d:58:97:2b:91:c3:3d:f9:6a:ef:58:44:b9:e4:b8:a5:60:
         d3:a6:2a:4b:91:43:cc:c1:d5:04:9a:38:ba:cc:c9:df:aa:3d:
         ee:21:34:ec:f4:14:3c:8f:a7:92:90:31:42:69:ce:1b:26:27:
         30:3a:e7:f1:fe:e4:02:f3:ce:96:b2:8e:88:31:b8:34:be:34:
         20:f5:95:af:77:2c:73:26:d4:0e:7c:5d:a7:97:61:f2:6e:20:
         36:e0:e2:7a:27:04:ff:ab:d7:a1:fe:4a:54:b7:09:07:ff:d1:
         3e:58:f4:59:ea:06:f1:9d:49:71:f6:e6:ad:31:bd:49:c6:53:
         d1:05:8d:07:20:79:bb:a0:59:c6:03:ff:aa:04:88:99:4b:73:
         58:7d:23:fc:b8:14:d7:c3:0d:01:04:61:a4:a6:3a:c0:ae:36:
         0c:86:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:43 2026 by rpki-client