This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
File:                     WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json)
Hash identifier:          1oFR7TnGSIZdaDzfAMDqURNWZxxxLKV60A3ojLiheAw=
Subject key identifier:   F9:E3:73:BD:94:52:B0:40:E7:C1:05:78:8A:2A:5C:6B:60:F1:9B:19
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Certificate issuer:       /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
Manifest number:          01E5
Signing time:             Sun 11 Jan 2026 02:04:04 +0000
Manifest this update:     Sun 11 Jan 2026 02:04:04 +0000
Manifest next update:     Sun 18 Jan 2026 02:04:04 +0000
Files and hashes:         1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: C/cUAJ4HRHvyI2Cc6mvxuden2rlEfuD82H8uh1toslc=)
                          2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: muoRT5YVa+lZ9dmEo5amL/VfGYBrEqrfaPqq9DzwYGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
                          rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 02:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
        Validity
            Not Before: Jan 11 02:04:04 2026 GMT
            Not After : Jan 18 02:04:04 2026 GMT
        Subject: CN=69630514-7784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:71:cd:8d:32:6e:21:42:4b:92:39:e3:28:
                    5e:05:42:8e:0a:04:e0:d5:6d:05:a4:12:da:4c:4c:
                    54:4f:11:c1:ac:25:cc:7d:38:94:58:7a:f8:b4:60:
                    3a:30:19:88:9a:1d:ed:ca:a1:ce:c8:e7:d6:01:e5:
                    59:55:33:e0:c2:c1:56:bc:d9:40:7c:e6:9c:38:05:
                    1f:d8:f9:8d:21:07:7b:bf:bb:cc:08:d8:39:98:ec:
                    9d:32:2a:91:8d:db:27:be:4f:be:90:ab:1c:86:19:
                    db:eb:f1:dc:2c:3c:fb:a2:4e:fc:63:93:e6:29:85:
                    7d:2f:bb:23:29:7b:f2:db:a6:1f:05:fb:a5:6a:11:
                    f3:d5:f6:cf:e4:f8:2f:b7:b8:b3:fa:b0:52:db:bd:
                    d6:d6:2d:74:bd:e5:7a:ec:4d:5c:12:00:d0:1d:92:
                    f7:0a:55:e7:33:8d:bd:ae:76:c5:69:94:65:29:8f:
                    10:0c:38:3d:06:43:02:d8:4b:87:30:4b:7f:fe:22:
                    32:d9:64:6f:8f:00:da:50:a4:e2:ac:04:78:79:e8:
                    16:87:44:2e:ba:b3:eb:b5:cb:77:db:fd:a2:6e:55:
                    59:53:65:f7:cb:db:18:89:61:70:7a:7f:b7:4a:1e:
                    48:24:3b:e5:37:b3:ed:f4:75:88:13:27:ab:bd:bd:
                    8b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E3:73:BD:94:52:B0:40:E7:C1:05:78:8A:2A:5C:6B:60:F1:9B:19
            X509v3 Authority Key Identifier:
                keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:da:80:23:82:31:94:a7:7b:a9:6b:b2:e8:e6:e5:74:0e:de:
         5b:0a:f8:b4:97:9a:fa:77:54:4b:e4:53:14:86:2f:44:be:15:
         51:d4:62:1c:49:4c:00:29:2b:59:45:db:2d:c7:a8:0e:e6:9c:
         7c:92:c6:36:72:6a:35:37:05:11:92:27:9e:ec:b3:e3:31:f6:
         36:68:0e:89:68:5e:1f:29:31:b7:13:da:9c:ec:c3:25:cd:6c:
         05:d1:b1:dd:bc:e6:16:93:ad:43:c7:ed:8f:41:a4:20:28:74:
         cc:a8:24:6f:7e:5a:36:35:1c:c4:1d:63:cf:b4:60:7e:ea:39:
         f1:c5:7d:a6:47:87:24:a3:2d:d1:fd:8e:c8:e0:20:97:99:20:
         bb:db:da:3a:d9:24:37:37:14:2c:72:51:b9:ab:69:46:42:14:
         52:74:00:6a:86:d0:d5:79:ad:16:31:5a:06:0d:fe:ee:97:2e:
         23:2d:81:c4:21:25:a1:5d:09:59:8e:85:cd:e6:d5:94:f6:aa:
         b3:a0:2a:de:67:df:32:b3:49:9d:42:eb:3a:2d:1c:c7:c4:d9:
         ce:48:52:70:a2:f0:eb:48:17:93:7e:aa:99:4f:e3:58:20:50:
         ba:76:0a:37:29:db:e8:b5:bb:2a:05:68:08:2f:81:4b:ba:5f:
         38:0c:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:02:33 2026 by rpki-client