This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
File:                     mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json)
Hash identifier:          XdQzCbrdmwntu28k5ktUtq7s1Pe5I/aCzxxhSqMdV1I=
Subject key identifier:   D6:E3:9A:13:D7:91:47:D0:C9:3B:41:D3:FC:55:27:B8:F2:A4:91:1A
Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Certificate issuer:       /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Certificate serial:       05EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
Manifest number:          05E3
Signing time:             Sat 10 Jan 2026 22:15:21 +0000
Manifest this update:     Sat 10 Jan 2026 22:15:21 +0000
Manifest next update:     Sat 17 Jan 2026 22:15:21 +0000
Files and hashes:         1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: whHgwe4UZs2MDz4giJOyVXPh8UicOWNO1wWmCOFUG18=)
                          2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 22:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
        Validity
            Not Before: Jan 10 22:15:21 2026 GMT
            Not After : Jan 17 22:15:21 2026 GMT
        Subject: CN=6962cf79-cc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:65:9e:8b:c3:72:04:f6:ec:b4:c6:3a:55:
                    33:f1:95:bf:df:61:c3:44:68:da:ec:09:b4:f8:ad:
                    1a:a1:2c:3f:7b:b0:e9:3b:c1:11:d1:01:18:da:4a:
                    a0:6b:dc:d7:7b:ef:6d:c7:cc:f9:b6:3d:90:c7:c8:
                    e8:28:ca:8d:15:85:64:74:92:9c:b2:b3:9a:ec:f6:
                    63:42:c7:ea:22:8f:2f:f1:41:99:de:a6:2c:53:ce:
                    d0:be:13:be:d4:33:a9:f0:95:53:6c:b5:83:a1:79:
                    bb:fc:6c:22:46:54:71:6c:e6:c2:08:37:d9:6a:2c:
                    62:e6:81:cd:4f:ac:4c:04:79:45:b4:e6:38:fc:54:
                    c0:f2:e7:a8:16:f2:36:4d:38:91:23:40:ae:75:fc:
                    d0:5d:f2:c0:3c:00:68:e7:cb:11:f5:f8:db:eb:34:
                    8c:29:c8:df:9e:07:10:9c:4d:d2:fc:d9:b3:5a:0e:
                    ae:2e:06:ee:79:8d:52:4f:71:a4:aa:b9:f0:04:cb:
                    b7:8c:5d:9a:d5:68:13:60:28:f3:80:88:49:a5:b4:
                    6f:b0:bb:57:fc:95:75:75:bc:2c:cb:63:af:f6:4b:
                    27:df:5f:93:00:91:3a:38:14:1b:3d:71:55:34:8b:
                    58:34:93:fe:8e:aa:88:c6:14:56:06:9f:05:d7:31:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E3:9A:13:D7:91:47:D0:C9:3B:41:D3:FC:55:27:B8:F2:A4:91:1A
            X509v3 Authority Key Identifier:
                keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:1b:a5:63:e4:98:3e:d2:59:21:f3:b7:3f:3e:b0:16:d2:
         ac:9a:3f:c2:ed:6c:8d:98:df:5f:dd:bc:ad:e6:fd:e5:1e:5c:
         ef:84:c5:d0:40:e7:07:d2:2c:72:98:34:21:87:42:d9:b7:4f:
         84:e9:ed:1b:a0:3f:e3:9e:6e:28:76:2d:5b:0e:33:77:0e:de:
         31:fa:0b:0a:98:f8:aa:0e:86:76:a1:08:38:c2:c9:92:26:54:
         87:46:95:2c:68:f3:a7:93:53:5f:27:b9:cf:5b:76:f5:9d:df:
         75:86:d8:4b:48:34:ac:08:0b:b4:00:2f:2b:7c:2c:29:59:a4:
         5f:da:4c:14:14:21:f3:62:58:0a:7e:9c:95:d3:8f:0c:2c:05:
         88:c4:14:a4:8b:bf:01:cc:41:47:17:e1:a7:f9:b7:b7:0a:2f:
         ba:b2:58:56:c4:01:7c:ee:01:23:75:64:91:59:46:c1:b5:a0:
         db:41:75:09:90:b3:c1:f7:10:24:d4:3e:e9:07:df:f4:05:76:
         7d:df:9d:0c:86:bf:8b:8f:00:32:89:6b:ec:a3:ee:05:ad:90:
         ca:ac:36:9f:bb:cd:b4:bc:ac:a5:61:3d:ee:9a:0b:12:a7:04:
         d9:1a:23:04:6b:6e:2e:9a:f7:2f:88:3f:a9:5c:37:75:95:d9:
         ea:ec:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:16:51 2026 by rpki-client