This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
File:                     wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json)
Hash identifier:          A5NlEYFy67l3FdUbuZhMTKlnzbKhxJfEazegnw9enGs=
Subject key identifier:   B7:70:56:79:AA:2F:09:FA:AA:10:99:74:57:67:13:25:42:8D:74:82
Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
Certificate issuer:       /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Certificate serial:       08DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
Manifest number:          08D5
Signing time:             Sat 10 Jan 2026 19:49:36 +0000
Manifest this update:     Sat 10 Jan 2026 19:49:36 +0000
Manifest next update:     Sat 17 Jan 2026 19:49:36 +0000
Files and hashes:         1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: d5Zpb6Eq0uAu+79H7dAqdJwR2P6oj7H7VxTVZL/lvaw=)
                          2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 5xxVenqDrTtB+LAX8MyCpAEyaZJVl5DXQjRG3qyTajU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
                          rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 19:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
        Validity
            Not Before: Jan 10 19:49:36 2026 GMT
            Not After : Jan 17 19:49:36 2026 GMT
        Subject: CN=6962ad50-4ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:7d:d8:39:df:bc:28:7b:f0:09:21:30:d2:
                    76:40:89:88:0c:0b:5b:c8:4a:4f:56:3a:50:3c:09:
                    87:62:04:53:36:f6:90:c0:95:00:24:4f:ac:8b:14:
                    41:2a:9e:8b:1c:d4:76:23:70:fe:a4:fa:6e:55:d8:
                    68:78:1c:ac:38:db:94:c0:e2:b5:77:a8:b7:ff:52:
                    85:bc:70:43:b9:64:1a:7a:27:89:1b:ff:1e:98:30:
                    7c:32:d3:9d:50:a7:11:8e:59:5e:0a:73:4b:a0:d0:
                    64:23:57:21:a0:d4:72:cd:af:b1:c9:48:4d:a0:a0:
                    c3:1f:b0:a0:1f:f0:8a:95:54:7d:b7:70:8b:a1:c5:
                    1f:6c:40:fc:56:02:47:30:e4:ab:a7:bc:b1:53:af:
                    79:ce:6c:85:58:50:b1:04:c1:45:93:3d:0c:07:64:
                    06:50:0d:79:4c:f7:83:07:ec:53:4c:d6:e5:69:e5:
                    b5:d9:7d:46:05:fd:de:b7:f0:1d:65:e8:a9:aa:5d:
                    2b:0c:da:30:06:3e:6a:df:3c:d0:af:ae:58:0e:ec:
                    41:d2:80:8c:bc:e7:e5:d6:2a:96:92:04:48:79:00:
                    ae:05:b5:4e:f6:72:2e:87:18:1e:c6:7f:a3:30:a4:
                    49:00:a5:b7:75:c7:8a:64:0e:e9:5f:8d:33:07:14:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:70:56:79:AA:2F:09:FA:AA:10:99:74:57:67:13:25:42:8D:74:82
            X509v3 Authority Key Identifier:
                keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a3:fc:f3:c4:51:1f:eb:d7:f4:fe:f7:12:c3:be:8f:fd:9f:
         79:61:1e:aa:50:a7:3b:33:f0:31:d2:e1:de:03:5c:d1:b4:89:
         14:d7:96:30:0d:31:50:d7:0a:24:e5:73:10:e0:ae:85:27:06:
         41:59:20:36:88:eb:48:43:0b:65:88:43:ab:cf:73:77:0c:7f:
         2e:44:71:74:0f:b5:59:9f:ed:5b:53:5e:35:cc:c0:fd:10:8d:
         17:44:1f:12:1a:b7:1d:1d:0b:e9:fa:2f:ef:cf:5a:b9:1d:d2:
         f9:5f:9c:c0:a1:b2:af:9f:fb:66:d7:01:4c:71:88:16:35:4a:
         b9:7e:86:6e:72:02:52:49:64:3d:ad:2f:ba:2d:39:16:71:9d:
         3a:d7:fd:73:5e:99:b4:49:70:7d:09:8c:a9:1d:8f:19:3d:92:
         35:07:48:16:6e:64:7e:6d:32:7e:d4:19:3c:f9:60:f6:ea:1e:
         ea:fc:1b:d1:70:7b:8a:de:bd:b0:e7:3e:b5:8c:a7:1f:80:85:
         09:2a:0d:dd:bf:38:d1:2b:1e:7d:c4:40:46:f1:f5:25:18:cb:
         e2:f4:f3:e2:91:43:4a:37:67:a5:44:f2:21:a4:bf:f7:d0:de:
         2d:59:1b:e6:50:7c:bf:ee:38:a3:fd:6c:2a:71:6e:95:21:fe:
         b0:d6:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:48:45 2026 by rpki-client