This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
File:                     RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json)
Hash identifier:          JfP102SebDTsbpThv5JqA5ec2w30dbKcr2hEWsjiqi8=
Subject key identifier:   D0:77:C3:FE:A8:58:A4:E6:03:94:98:2A:FF:A9:74:D1:DD:79:1C:9D
Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75
Certificate issuer:       /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
Certificate serial:       033B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
Manifest number:          0335
Signing time:             Sun 11 Jan 2026 00:13:13 +0000
Manifest this update:     Sun 11 Jan 2026 00:13:13 +0000
Manifest next update:     Sun 18 Jan 2026 00:13:13 +0000
Files and hashes:         1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: gXasCkBth8paWtNJvM18GaVKQpqaOIQg/QXZmp3AZuw=)
                          2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: Q4rmj8ZW9q3ZMhMYZknk/X38qXU9tpt3Fwr+6cA845w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl
                          rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 00:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
        Validity
            Not Before: Jan 11 00:13:13 2026 GMT
            Not After : Jan 18 00:13:13 2026 GMT
        Subject: CN=6962eb19-84c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:52:8a:18:57:26:26:cf:7b:34:f5:39:ee:
                    a8:04:08:c5:a1:f5:a2:59:96:66:6a:5f:54:65:72:
                    54:50:3c:c2:43:bc:0c:83:d0:67:a7:d3:ff:1c:a8:
                    a4:b1:c0:5c:99:c3:96:4b:d0:a4:84:86:9f:30:97:
                    9d:fa:0e:d4:51:43:eb:08:aa:2b:7f:43:5c:13:62:
                    c0:eb:f5:3c:66:fb:9d:97:eb:48:35:a4:bb:d2:fc:
                    48:4c:bf:5b:0b:cb:ac:0c:2f:2c:c0:43:c8:c1:81:
                    d9:ea:6b:33:49:28:cf:ce:99:b2:34:5e:9b:a3:e6:
                    84:0c:f2:04:22:23:b5:82:01:fc:b4:65:d0:bf:a9:
                    cd:78:76:0d:ca:c2:3e:8e:0f:71:99:bd:18:98:96:
                    81:a0:d2:cb:ab:c4:96:27:57:a7:14:ae:9e:e1:46:
                    54:ae:ae:6a:2e:34:69:c7:14:db:c8:f2:fd:b9:c4:
                    39:6f:4b:ce:45:b9:63:35:2e:1c:03:1c:f4:38:4a:
                    a8:bc:79:26:60:8f:d2:4e:a5:b7:c1:a0:ac:c2:0c:
                    a9:6e:b4:48:33:ce:e8:6a:c8:e9:7d:6b:d4:1c:db:
                    f4:00:10:db:f8:3f:a1:89:d0:42:9e:18:c6:7a:51:
                    eb:84:b9:e2:e1:62:fe:36:4e:f0:7e:a4:c0:17:9e:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:C3:FE:A8:58:A4:E6:03:94:98:2A:FF:A9:74:D1:DD:79:1C:9D
            X509v3 Authority Key Identifier:
                keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4d:33:98:a7:24:d1:fd:42:2f:6d:89:62:41:ec:3b:fe:b4:
         09:44:68:85:53:7b:6e:67:fe:e5:41:a1:b8:4e:af:dc:2b:a0:
         fa:1d:e9:7a:cf:c4:98:9b:00:84:3e:69:de:3d:61:ad:5e:33:
         80:d5:bc:54:9d:31:6d:a5:11:2a:85:d6:92:42:35:4d:3e:e8:
         5c:1c:bd:7d:04:37:45:69:69:c3:15:ce:4b:82:bd:50:49:d3:
         e6:a9:1c:0b:be:8a:60:d0:97:c6:95:f2:02:e0:4f:7f:96:d9:
         d0:05:36:9b:57:52:97:9f:db:36:72:1c:19:9d:7d:92:8a:13:
         c7:ca:47:d8:d0:6a:ff:e6:69:5a:78:ac:be:76:9e:22:2e:7c:
         75:97:7c:de:8a:4a:0b:eb:a6:92:11:da:6e:5e:53:e3:64:ec:
         fb:fd:a5:95:97:4a:df:cf:8c:ff:4f:a5:a3:fa:ac:fe:95:51:
         c3:42:b5:8e:e6:69:35:3d:8f:fe:50:87:22:af:0a:66:02:71:
         68:fd:5d:02:c1:f8:98:46:36:a3:eb:87:ef:dd:e9:69:b8:b1:
         ed:0a:eb:56:8c:26:9c:ef:df:60:01:34:45:84:38:80:00:46:
         89:f4:8d:1b:61:3a:26:16:12:c4:b6:95:62:74:d9:0d:7e:bb:
         68:a3:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:40:49 2026 by rpki-client