This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
File:                     wvuur6_7tA2qpRworxHolYOxPwo.mft (raw, json)
Hash identifier:          b/oGSbS4IsNdhL6hIR8csCnXbNqbetTtcAgejF1ZZJs=
Subject key identifier:   52:AE:FF:C6:EF:C8:F7:62:3D:8E:90:44:CE:1C:03:56:98:00:02:5F
Authority key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
Certificate issuer:       /CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
Manifest number:          D8
Signing time:             Sun 11 Jan 2026 04:49:30 +0000
Manifest this update:     Sun 11 Jan 2026 04:49:30 +0000
Manifest next update:     Sun 18 Jan 2026 04:49:30 +0000
Files and hashes:         1: wvuur6_7tA2qpRworxHolYOxPwo.crl (hash: BVB1U1QGWL9wadR4cZNiOBhAzDK/IgbpjnznqZs+Yl8=)
                          2: A263DD4CA25511EF90E9CA2AC4F9AE02.roa (hash: ecS+aDoIKoDnNRBWYgcdOS4F+XfGqAG3qfH10LoSK6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl
                          rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 04:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE, serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
        Validity
            Not Before: Jan 11 04:49:30 2026 GMT
            Not After : Jan 18 04:49:30 2026 GMT
        Subject: CN=69632bda-0464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:6f:8a:8e:68:4f:a5:8c:18:ef:fc:bf:18:
                    cd:f5:dc:57:4e:d9:5a:2c:5f:b1:69:6a:5e:7a:39:
                    f4:41:02:68:e4:44:d3:27:e6:ac:3d:c9:1f:6b:2f:
                    5c:df:7d:81:4e:66:c9:d8:97:c6:2d:16:cc:5d:e6:
                    f1:bf:85:d6:27:6a:5e:b2:f5:06:f7:71:97:4d:a7:
                    b6:af:d4:35:6a:c8:48:cf:08:c4:52:5a:c2:52:af:
                    37:de:26:70:3a:fe:63:13:0a:b9:72:87:60:c1:26:
                    c0:b3:c1:81:cd:fd:58:63:85:f5:79:34:6d:24:8b:
                    dd:62:bd:2b:d8:a6:a8:9c:07:3e:01:41:3c:62:b1:
                    15:23:05:f6:c8:8b:c5:9d:88:dc:e4:45:66:f1:5a:
                    a5:8f:16:94:73:d7:0b:5b:10:70:4d:f4:c7:1d:23:
                    16:86:1e:4c:f9:59:8b:fa:28:13:ee:5b:6e:3a:59:
                    4c:e0:2a:f9:dd:dd:53:31:53:f8:7d:88:4b:da:a4:
                    92:27:1f:97:b0:92:0b:9b:bc:b7:e0:5e:16:24:f3:
                    78:7c:01:55:9b:9d:2b:53:16:aa:0c:42:0b:16:45:
                    6c:0a:fe:19:76:82:88:eb:1b:88:ba:5e:1b:c7:2d:
                    c9:3a:bd:ef:6f:bc:f5:54:4e:3d:3e:cc:3b:e8:43:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:FF:C6:EF:C8:F7:62:3D:8E:90:44:CE:1C:03:56:98:00:02:5F
            X509v3 Authority Key Identifier:
                keyid:C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:98:67:d3:40:58:fe:95:9f:f8:84:f4:af:9e:1d:c7:2f:
         96:fe:0f:ea:d1:97:58:50:05:db:0d:67:78:37:7e:51:31:0c:
         15:43:55:dc:28:7b:a1:a9:f3:21:57:c9:a4:bb:34:81:50:e1:
         b5:77:1a:86:51:2b:42:2d:d2:99:ab:f2:86:d4:4a:c0:07:f3:
         eb:36:fb:46:d5:f0:dd:74:64:c5:a8:03:53:63:8c:7b:1d:70:
         93:93:99:c8:76:4b:48:63:08:d1:66:b4:54:89:2e:67:7d:13:
         af:f5:a6:25:fd:42:34:8b:b0:1c:cc:69:3e:37:96:d1:b2:ed:
         8c:72:50:be:94:ff:b2:32:4b:b9:d5:40:f4:79:32:30:4c:9e:
         73:89:f2:3e:33:a8:89:7b:0c:bf:77:90:07:f3:6b:d7:28:96:
         a0:1e:da:d0:2e:45:e7:2e:fb:ac:1b:f3:0d:00:3d:0e:5e:7f:
         bc:0e:01:0c:1f:e5:c8:c2:7f:54:97:68:79:0b:c6:cf:15:c2:
         33:1e:8e:d1:31:ea:9c:04:ed:73:1e:a1:fc:71:ad:7c:fb:53:
         48:c5:9b:5c:84:85:68:f8:97:fc:e0:90:9c:fd:f0:ca:b5:04:
         20:70:07:26:c7:a8:70:5d:73:07:91:d1:8b:e3:ba:80:13:05:
         48:06:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:06:57 2026 by rpki-client