This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File:                     WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier:          c4RBoHmVWugWM3h2tCoeE50Zn93C905aLzXMHjfE9hk=
Subject key identifier:   D0:BF:34:7A:C2:1F:5D:C9:4A:1F:E6:A5:38:90:DA:91:10:13:08:83
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer:       /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number:          04D7
Signing time:             Thu 05 Feb 2026 09:29:51 +0000
Manifest this update:     Thu 05 Feb 2026 09:29:51 +0000
Manifest next update:     Thu 12 Feb 2026 09:29:51 +0000
Files and hashes:         1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: lREIEWhkZCf9eJGjJ3F1w1Y8oWoCJXvn3X9spaws+NM=)
                          2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: ngVDpB9EeVUj1wtwuXlGNZD63XjFCao61CO9K4ARPTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
                          rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 09:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
        Validity
            Not Before: Feb  5 09:29:51 2026 GMT
            Not After : Feb 12 09:29:51 2026 GMT
        Subject: CN=6984630f-8280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:68:70:d7:24:97:ef:c3:ec:23:dd:6d:e9:
                    a0:07:54:d7:d3:cc:02:e5:62:35:a9:20:a5:f1:95:
                    8d:6a:9c:1d:7b:1a:ee:03:bd:a8:05:c3:55:f8:57:
                    9c:4d:c2:48:7b:63:b1:49:e9:7e:7c:90:e0:b2:26:
                    b7:5b:a8:01:b2:b4:0d:59:e5:82:c3:0e:2b:04:4e:
                    9a:96:48:72:11:fb:ab:1c:6b:e5:46:e4:5c:69:dc:
                    2f:0d:af:9d:71:b4:33:24:3a:65:8a:b5:3b:31:b1:
                    a3:09:5e:78:75:b4:0b:2f:61:39:90:1b:df:09:d6:
                    19:cd:f2:9b:33:27:a5:ba:75:5f:89:71:bd:eb:cf:
                    b0:11:aa:ef:99:80:ad:31:af:8c:0d:dc:05:84:c3:
                    1d:be:f5:b5:9a:61:2b:66:c5:fc:1c:b0:61:bd:a1:
                    b1:92:67:ef:41:d4:1b:34:e3:ad:80:d8:67:9a:47:
                    2e:9c:be:16:45:46:0f:fa:b5:8c:8e:4d:f8:92:74:
                    5f:d4:46:97:11:03:84:59:75:21:21:f9:b2:a3:a6:
                    7c:e7:d3:01:98:c0:97:e3:dd:b8:da:b2:cc:16:c1:
                    f3:0a:c9:45:10:a6:ab:dd:d6:0b:e8:d9:0b:b2:22:
                    a6:70:01:42:05:12:20:31:ad:7f:ec:cc:2b:9b:de:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BF:34:7A:C2:1F:5D:C9:4A:1F:E6:A5:38:90:DA:91:10:13:08:83
            X509v3 Authority Key Identifier:
                keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:25:84:74:2a:f5:d0:6b:15:ce:40:9d:cb:74:e2:08:88:
         9f:f6:33:50:ea:e3:fe:86:8a:9e:7f:7e:07:dc:ac:30:70:f8:
         92:87:d7:34:ae:cd:b5:4d:73:70:99:5a:8a:76:f1:66:a5:2f:
         e2:be:df:5c:e7:bc:5a:a0:cc:dd:b6:95:aa:18:27:66:13:0f:
         02:7f:4d:d2:2e:b5:a4:43:4b:f6:ae:e4:4e:c9:00:c0:d5:db:
         eb:6f:e2:4f:ba:b2:4f:46:f1:41:02:d0:47:c8:02:b9:22:a4:
         d1:3b:10:bf:ce:e6:42:35:5c:3c:1f:ef:30:ee:a1:af:e1:61:
         25:3f:44:f8:2b:37:ad:51:a8:71:a5:11:21:c7:4e:7b:30:55:
         f5:86:a9:96:fd:91:10:74:ee:45:fa:c7:dd:9f:ff:e9:a5:94:
         23:22:29:03:cb:65:05:5a:19:49:76:f3:38:25:ec:90:e9:3e:
         9f:6e:83:1a:bb:b4:21:e3:39:72:e0:66:69:e1:f2:34:fa:ad:
         19:1a:80:47:e4:20:1a:18:19:a3:53:e8:e0:16:a0:60:7b:34:
         8f:10:e9:7e:7a:ef:4b:92:b8:a3:d8:df:ed:b4:bb:93:9d:8e:
         b5:71:0f:6c:5e:8b:3a:7c:55:d3:8f:43:7b:e5:73:62:32:f1:
         34:2c:60:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF
NjgyNDlERUIwHhcNMjYwMjA1MDkyOTUxWhcNMjYwMjEyMDkyOTUxWjAYMRYwFAYD
VQQDDA02OTg0NjMwZi04MjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWNocNckl+/D7CPdbemgB1TX08wC5WI1qSCl8ZWNapwdexruA72oBcNV+Fec
TcJIe2OxSel+fJDgsia3W6gBsrQNWeWCww4rBE6alkhyEfurHGvlRuRcadwvDa+d
cbQzJDplirU7MbGjCV54dbQLL2E5kBvfCdYZzfKbMyelunVfiXG968+wEarvmYCt
Ma+MDdwFhMMdvvW1mmErZsX8HLBhvaGxkmfvQdQbNOOtgNhnmkcunL4WRUYP+rWM
jk34knRf1EaXEQOEWXUhIfmyo6Z859MBmMCX49242rLMFsHzCslFEKar3dYL6NkL
siKmcAFCBRIgMa1/7Mwrm95K7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC/NHrC
H13JSh/mpTiQ2pEQEwiDMB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy
NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4
UUFYemNaajlIaUxtZ2tuZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEwiWEdCr10GsVzkCdy3TiCIif9jNQ6uP+hoqef34H3KwwcPiSh9c0
rs21TXNwmVqKdvFmpS/ivt9c57xaoMzdtpWqGCdmEw8Cf03SLrWkQ0v2ruROyQDA
1dvrb+JPurJPRvFBAtBHyAK5IqTROxC/zuZCNVw8H+8w7qGv4WElP0T4KzetUahx
pREhx057MFX1hqmW/ZEQdO5F+sfdn//ppZQjIikDy2UFWhlJdvM4JeyQ6T6fboMa
u7Qh4zly4GZp4fI0+q0ZGoBH5CAaGBmjU+jgFqBgezSPEOl+eu9Lkrij2N/ttLuT
nY61cQ9sXos6fFXTj0N75XNiMvE0LGAD
-----END CERTIFICATE-----
Generated at Thu Feb 5 23:24:40 2026 by rpki-client