This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File:                     WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier:          wPyxZmgkY666O/j/Et/h4Gnwshdms64Aby9j0LNgPh0=
Subject key identifier:   ED:DC:76:E0:36:A7:BA:70:5E:8B:05:A9:4C:04:F0:AE:4E:C8:A0:DB
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer:       /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial:       34FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number:          34FA
Signing time:             Fri 16 Jan 2026 14:49:44 +0000
Manifest this update:     Fri 16 Jan 2026 14:49:43 +0000
Manifest next update:     Fri 23 Jan 2026 14:49:43 +0000
Files and hashes:         1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: SRUV4UsnvjqArK6KQctam0P9ZTNEaURiCD1PbbPU3nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13562 (0x34fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
        Validity
            Not Before: Jan 16 14:49:43 2026 GMT
            Not After : Jan 23 14:49:43 2026 GMT
        Subject: CN=696a5008-b5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:2b:af:da:de:50:2a:e1:9f:7a:c3:88:76:
                    5e:88:e0:0b:2b:92:1e:b1:96:b2:a7:4a:c1:a2:37:
                    f0:b9:5a:87:d7:ed:a7:73:a0:c8:d3:40:59:8f:98:
                    b8:24:c1:60:c4:d8:a8:04:89:d6:d3:18:e2:aa:19:
                    6b:2c:44:cd:dc:76:e1:1d:a8:20:24:67:f2:9a:c5:
                    a9:31:18:39:f1:c4:18:67:db:98:42:43:f6:5f:99:
                    99:1a:55:6e:2b:f0:0b:18:de:75:c2:25:b0:25:73:
                    9d:e9:42:3b:e3:5e:61:e2:6d:66:09:ee:8c:19:a2:
                    0d:14:ed:b0:60:c3:5b:27:b0:d8:45:37:b1:32:85:
                    63:73:78:0f:4d:4d:ca:cd:62:06:eb:9b:3d:e5:8d:
                    ff:98:cd:c1:e1:f0:72:29:bc:74:22:51:0e:9b:6d:
                    12:e4:46:f5:6c:5d:e7:d0:5b:b1:e1:14:85:cc:0f:
                    da:85:76:e7:39:24:cd:29:6b:9e:f6:5b:a0:c7:ef:
                    39:e9:62:e7:21:c2:af:95:23:f2:8a:5a:85:1a:21:
                    81:18:c9:69:66:51:05:c5:ed:5b:b2:22:64:f5:da:
                    58:62:c1:3d:ed:64:ec:0c:e0:67:7f:ca:c3:a4:f2:
                    ae:5b:89:b9:77:06:97:21:85:cc:ab:5d:e0:ea:64:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:76:E0:36:A7:BA:70:5E:8B:05:A9:4C:04:F0:AE:4E:C8:A0:DB
            X509v3 Authority Key Identifier:
                keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d4:58:9c:d6:4c:79:f5:cd:8d:38:92:7b:b2:c6:c3:55:e6:
         3a:65:38:a7:29:79:e9:e5:7f:70:cd:50:2f:6f:a4:19:ff:90:
         a5:c7:ba:93:d7:70:27:56:98:6b:31:e9:ea:af:a4:01:f2:b8:
         f0:6e:e3:33:11:47:79:30:c2:3e:df:a5:b4:9d:4b:30:6d:32:
         e9:bc:9c:aa:4a:a4:2d:43:b3:be:20:e7:7d:ce:d5:8c:ed:2e:
         f1:51:b2:98:a0:5f:a0:b4:0d:45:82:2d:d6:73:d5:86:fb:7c:
         e8:d1:cb:71:23:95:4c:72:4a:45:51:62:32:72:95:78:e0:88:
         c1:f3:e3:d1:81:6d:14:85:ce:b8:06:e1:e4:c8:5e:84:98:16:
         d4:57:fa:63:78:12:85:f6:28:16:d3:e7:91:3f:6b:98:37:08:
         28:23:43:68:2f:92:09:73:59:83:18:1c:12:07:bd:21:ac:f9:
         9c:6e:cd:9b:43:7b:20:86:0a:b8:80:c6:46:97:d7:1b:82:ea:
         15:3a:c2:4f:fa:88:e5:58:82:24:3a:42:b8:14:90:a5:7b:83:
         0e:9e:a9:bd:6a:18:47:95:81:0d:a1:07:8a:b0:18:d3:84:64:
         99:c3:ed:a6:8e:c0:00:be:13:e8:fd:10:1c:f8:21:fa:2f:8a:
         c1:b7:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:09:38 2026 by rpki-client