This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File:                     Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier:          gTYHKSYtY7DJpBkIdJfV/Q1QrZ4Y2IPrHExvbrFFwtA=
Subject key identifier:   D1:1A:23:20:CF:91:41:14:EC:25:40:8C:A6:7F:E3:21:5E:87:92:36
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       10E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number:          1085
Signing time:             Sat 31 Jan 2026 17:06:38 +0000
Manifest this update:     Sat 31 Jan 2026 17:06:38 +0000
Manifest next update:     Sat 07 Feb 2026 17:06:38 +0000
Files and hashes:         1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: we1C3p94vT8dAxdeiBMEPG3igRMWJwzhAwbOTlYCNpw=)
                          2: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: zMozM34kF4fkjssWZFKOWwbNxC8ctpO0n/S6xmrGp2U=)
                          3: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: FCS4+GL7rUUdkFrPp6f659LL++EemtPAULuJfkO/esc=)
                          4: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: hOh5ZVZ+qFHQ5JWAOKeMOjW8ikSLX180HH4vgbhOg/c=)
                          5: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: 9E3TgDbI6+GnKMrsNMcyKe+QTJ6ByggMBzDm7xSwD4c=)
                          6: 884A03F4447111EC83674068C4F9AE02.roa (hash: s7v3d/BTSW73Xtn7csGrhdpLigXtwYTrO1GpRuSnwkw=)
                          7: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: DMn88YNhtANf7oJNpEm/YcL69wX9rnoBHpOTc6fAMAs=)
                          8: CC320712ACE011EAB535D034C4F9AE02.roa (hash: zMOHMtYvfaZCDF6LwsEB8Dwbb4ZwRXv/YDIZ3yaOB+U=)
                          9: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: q9NbetQ6RooEPqs7Z6/euz24xz0gLtevk3mcKB1IVZM=)
                          10: 9D164714168511EAB282BB44C4F9AE02.roa (hash: UC9oT442f5r3Ad6bt4fyBW43wCVQtsSkEeag4T2t06g=)
                          11: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: MolD5bumMcf6jScQ4RC9hIXMaBQfB4E5sD8Ir6nVXrw=)
                          12: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: 0pajmOLzTfRxXN+jwLdgr/HPuMFyL3nbTNRtA04jmts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 17:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4320 (0x10e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Jan 31 17:06:38 2026 GMT
            Not After : Feb  7 17:06:38 2026 GMT
        Subject: CN=697e369e-4662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:61:67:ee:69:c5:e4:bb:da:f3:c1:43:47:
                    c8:f4:80:b9:6d:81:d7:30:87:3a:f0:ca:6e:92:d0:
                    5e:f6:be:7c:af:93:cf:a9:3b:e0:97:f6:db:5d:9c:
                    5b:f1:81:0c:d1:45:f4:82:73:26:fc:d4:ae:e0:e0:
                    be:ed:e4:b1:b5:63:14:ed:0f:99:cd:d3:86:01:fc:
                    1d:29:bd:51:8b:ca:57:84:a7:be:68:8b:0c:a3:39:
                    f5:27:f6:5d:0d:3f:0b:6e:8d:4b:a4:62:49:21:84:
                    79:7a:76:ab:bd:f8:a2:f5:96:f3:c5:cf:86:7c:9c:
                    62:64:ed:3e:02:ae:69:39:c7:71:dd:4c:b6:0b:2f:
                    42:a0:1a:d8:d2:b1:35:e4:b1:4c:ca:22:7e:81:b3:
                    64:83:db:a3:d3:a8:35:6c:f9:dd:05:3d:55:a1:33:
                    2a:bb:20:65:ac:d2:3c:ce:85:56:a3:80:4b:35:6f:
                    ee:ea:9d:9d:8e:22:d9:2f:b9:59:bf:86:7d:8e:d7:
                    80:cb:c9:82:60:b3:dc:ef:0b:b8:c0:4d:5a:22:74:
                    70:9a:88:d1:fb:67:96:74:98:0c:13:60:f8:c8:67:
                    d1:07:0e:8e:ac:24:01:d3:ce:5f:d1:6e:9c:e3:1e:
                    0d:3b:4d:21:44:f0:b4:e7:a3:36:e0:76:cb:34:0a:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1A:23:20:CF:91:41:14:EC:25:40:8C:A6:7F:E3:21:5E:87:92:36
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0d:c3:1b:a5:aa:f5:7c:6e:f3:1c:b4:bf:e8:b6:42:c2:46:
         2d:3b:f5:72:cb:e7:98:45:53:ed:4b:08:3f:82:f7:2e:92:19:
         51:c0:2c:41:bd:76:d7:09:ec:65:bd:ee:2c:b3:ed:e0:3c:59:
         00:5f:79:47:74:1f:db:3c:65:24:ab:07:35:9b:86:c7:39:a2:
         ba:2d:c6:8f:e8:7b:90:48:3d:95:7b:5c:c1:2c:5b:55:46:17:
         12:f0:49:8a:4e:4a:3c:db:9b:2c:61:c0:92:05:2d:cc:94:15:
         4f:d5:e5:8b:15:57:c2:a1:3a:c8:b6:dc:25:b6:c8:1f:46:6a:
         35:e3:e4:10:47:22:cb:e7:46:44:23:c8:f2:46:7c:ac:74:1d:
         51:ec:fa:8d:2a:59:d8:68:9a:e5:b3:b9:c2:68:d8:6b:63:2d:
         03:75:0b:25:35:8f:43:48:7c:87:81:31:fd:83:39:9a:9b:29:
         d6:d9:f0:fa:1f:b6:e9:bd:82:5a:e5:da:35:ca:4a:d2:aa:6b:
         5c:42:d5:a0:5c:18:24:a9:cf:89:63:38:a7:d0:c9:1d:2c:81:
         10:b2:72:6e:c5:3a:ec:74:3b:b8:3d:08:c0:f1:59:8c:4b:28:
         5d:e9:99:31:02:70:cb:5f:ca:43:a2:b4:ef:db:09:43:58:49:
         c7:4e:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 03:47:40 2026 by rpki-client