This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
File:                     -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json)
Hash identifier:          Ow5yuJn4ArtjQooBzU5F2YS4AuZi7D02M1kHbRfFXfQ=
Subject key identifier:   55:B0:B7:25:B7:E3:CB:AF:9D:3D:35:3D:8B:65:5E:97:27:54:62:A0
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Certificate issuer:       /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
Manifest number:          0217
Signing time:             Tue 27 Jan 2026 01:31:02 +0000
Manifest this update:     Tue 27 Jan 2026 01:31:02 +0000
Manifest next update:     Tue 03 Feb 2026 01:31:02 +0000
Files and hashes:         1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: ptjXKMXD0DviVOsySsaR8Iy6VAdsKqeDCgnxSkw4D3Q=)
                          2: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: ftIkLDDMGwCQRtXIOQIkbcVqJAF5OWBHQPg/Mtm9NhM=)
                          3: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: QINk3E1nw1E0SQ1IAaOysVdywjs2/haOG/J5DYDItzc=)
                          4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: AD9qVo/dM6pGPhLPe3MxIhjrlZM+iJ6Ior0TsYh1fCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
                          rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 01:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
        Validity
            Not Before: Jan 27 01:31:02 2026 GMT
            Not After : Feb  3 01:31:02 2026 GMT
        Subject: CN=69781556-aed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:9b:7e:35:00:90:6b:b1:15:72:99:10:b4:
                    14:cd:11:46:21:ec:0c:46:ac:90:a1:7a:a0:b5:07:
                    fe:3f:0f:65:c4:fb:e9:5b:cb:69:9d:6d:5a:cc:d4:
                    a9:f7:9e:d9:37:34:f6:4e:e3:2d:d0:ee:5e:db:6a:
                    d4:cd:bd:a0:fe:45:d5:b8:04:4a:be:e2:24:b3:3a:
                    b1:64:f8:c9:9b:31:cf:07:e6:c3:00:8f:e0:af:fb:
                    09:f0:2b:41:79:f0:51:e4:76:de:0a:ab:e7:62:ba:
                    41:a8:37:4b:eb:34:55:87:66:7b:ae:36:8f:6c:a4:
                    94:dd:67:1b:2c:3c:84:47:b5:7c:41:07:1c:82:18:
                    14:e3:0a:07:b6:3c:58:8b:5c:b7:89:43:0e:98:26:
                    ac:60:61:0c:64:10:ce:44:8b:1f:17:a3:77:6e:43:
                    29:ff:00:15:f8:ee:88:4e:36:4b:e8:ea:4d:1b:99:
                    c0:d9:6a:64:57:71:13:db:b1:80:0c:25:21:fa:f8:
                    ea:f5:f4:ca:dc:5b:e5:97:13:00:e5:85:d1:b8:39:
                    d3:c0:49:31:9a:5c:04:a8:41:ba:ff:f2:1e:6b:8d:
                    cf:af:77:ca:42:71:3c:61:66:d1:f5:4f:53:a9:13:
                    f9:0d:c0:72:f8:1e:bf:80:26:8b:c2:3c:22:61:cc:
                    a0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B0:B7:25:B7:E3:CB:AF:9D:3D:35:3D:8B:65:5E:97:27:54:62:A0
            X509v3 Authority Key Identifier:
                keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:3b:98:c6:7e:2a:13:da:41:8e:b5:7d:0b:3e:dd:7f:8f:
         11:66:66:e4:f0:7c:be:e3:fd:29:d7:de:f2:0e:72:17:b9:50:
         70:e6:ea:f3:29:66:99:97:cd:21:ae:29:b3:33:0d:cb:8f:e4:
         32:80:94:54:43:db:59:a2:be:47:0c:ab:23:e9:b3:fb:77:98:
         e7:42:b0:03:2b:87:4d:bb:c6:39:08:ec:c7:a9:20:f9:69:de:
         ce:fc:b3:c8:88:d2:ef:b0:72:1c:2e:69:8f:5e:db:20:84:de:
         7c:fc:28:ac:ee:80:0f:25:c3:63:60:f6:99:13:81:f7:df:d7:
         a2:9a:99:24:28:c8:8f:1d:74:78:0a:2f:55:dc:21:c1:b8:5b:
         ae:e9:ac:ce:73:87:c3:36:c2:0e:39:9c:5b:38:6e:ea:06:74:
         e4:7e:41:be:4b:aa:82:3f:e1:0c:44:fc:1c:21:74:9f:5b:be:
         ce:54:7f:04:ae:da:98:36:12:b2:2a:e6:5f:4d:78:a0:f3:70:
         99:3e:a5:13:19:63:ae:4a:57:aa:f0:4d:e1:2d:63:3b:e1:c1:
         b8:14:ba:47:6a:d8:a5:21:ce:a5:38:16:e7:eb:6e:92:80:c6:
         55:be:11:ef:6b:dd:7d:3c:83:dc:7d:a2:b3:9a:d5:09:12:81:
         a5:e5:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:50:59 2026 by rpki-client