This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
File:                     wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json)
Hash identifier:          4XkE7tAzfh2pIwZwxcttIHcJXcBEZSvRUfqgRSUOhjA=
Subject key identifier:   9B:1B:F6:B5:76:12:04:8B:EA:0D:73:1E:11:5A:56:0E:12:77:A3:14
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Certificate issuer:       /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial:       07AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
Manifest number:          07A9
Signing time:             Thu 08 Jan 2026 20:52:25 +0000
Manifest this update:     Thu 08 Jan 2026 20:52:24 +0000
Manifest next update:     Thu 15 Jan 2026 20:52:24 +0000
Files and hashes:         1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: DIyWlX9c9Szfp/8w76LoXT0oR8vpIAFONMMjslVERNY=)
                          2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
                          rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 20:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1967 (0x7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D
        Validity
            Not Before: Jan  8 20:52:24 2026 GMT
            Not After : Jan 15 20:52:24 2026 GMT
        Subject: CN=69601908-1662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:22:39:59:a0:82:e0:13:38:31:04:77:66:
                    8f:65:11:c3:df:00:ba:46:b4:a0:d0:ad:b0:0c:61:
                    a6:b6:56:e6:a0:96:48:8b:a1:ee:68:e0:22:92:49:
                    f5:0e:bb:09:a0:2e:4b:a9:09:59:31:94:1a:5c:8c:
                    21:a7:ba:a0:5a:d9:d8:e4:87:14:ed:87:38:31:d0:
                    da:df:2e:99:a1:1a:d8:24:f6:f2:59:0e:18:25:02:
                    02:16:53:1c:47:cf:bb:ea:3d:5d:c3:54:d5:6e:b0:
                    78:ea:52:b9:b9:47:da:92:d7:2a:97:8b:f9:73:da:
                    4e:b4:23:45:d8:c3:e8:bd:c4:a5:1d:6e:5d:e6:11:
                    02:88:d4:6b:07:e9:62:f5:fb:20:fd:f0:73:e8:49:
                    ca:85:85:30:ec:de:20:e4:4f:07:89:9f:54:8b:68:
                    79:ee:f0:40:8c:d7:a2:3c:ed:4f:6f:8d:59:0d:2b:
                    e7:bf:e4:9b:9d:fb:81:bc:31:f9:e9:e8:84:c7:31:
                    f8:eb:54:48:7a:3b:ee:a0:ce:1d:4f:fe:13:0a:af:
                    ff:b4:dd:5e:5f:03:cf:90:e8:cd:34:a0:66:c3:6f:
                    16:76:ec:74:5f:a3:46:bb:7c:26:39:f2:e1:35:52:
                    7e:47:5b:e5:43:31:6f:e3:dd:9f:30:f2:f2:89:c7:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:F6:B5:76:12:04:8B:EA:0D:73:1E:11:5A:56:0E:12:77:A3:14
            X509v3 Authority Key Identifier:
                keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:c3:29:0c:03:bf:30:e4:81:c2:00:01:d2:e3:4d:b1:fc:
         0d:24:47:65:ae:5e:f6:4d:84:33:27:09:eb:22:d7:29:e9:18:
         34:a5:a0:6a:b9:30:df:23:c1:26:10:ec:d2:2c:cf:9c:c9:e7:
         65:25:0f:4f:71:b3:4c:ca:c7:5e:78:8a:a6:ad:14:0c:9f:a5:
         54:79:2e:d5:68:2b:62:7c:15:ba:65:37:24:8a:8d:77:b5:07:
         90:6c:ea:0d:a4:5a:0a:a3:a0:c7:a1:32:df:0f:d4:00:bb:3e:
         0d:1a:73:79:8d:52:c6:4e:a1:2c:59:a8:d8:d0:69:10:07:22:
         0e:19:6c:3e:61:1e:18:d8:a7:f5:10:36:62:0a:f7:89:a0:3a:
         44:7b:04:10:9c:03:f1:2b:e8:ec:2f:33:9d:36:b9:11:c2:d7:
         df:d1:a8:9d:8b:8f:53:66:ca:c4:01:8b:f7:0f:4d:b0:fb:db:
         3a:39:9f:6e:ce:51:d2:72:47:97:36:f1:ad:14:08:5f:63:88:
         e9:45:c2:d4:81:49:79:ad:2d:37:b3:d6:56:7c:6f:68:f8:ed:
         fc:e1:cf:01:f3:3f:2c:3c:76:ff:26:1a:e6:ea:b9:8d:25:6c:
         75:b5:57:b2:04:aa:51:b8:9c:23:df:16:38:0a:43:82:8a:10:
         d9:35:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 08:01:47 2026 by rpki-client