This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File:                     WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier:          Tj2nVggnBcpxdRcaMVHZqjzfNlIbagfXd0xwk0xVRus=
Subject key identifier:   40:50:40:F2:C5:E0:E0:01:84:E2:E7:97:C0:E9:0E:67:DC:30:4C:7F
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       04C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number:          04C0
Signing time:             Fri 16 Jan 2026 23:02:16 +0000
Manifest this update:     Fri 16 Jan 2026 23:02:15 +0000
Manifest next update:     Fri 23 Jan 2026 23:02:15 +0000
Files and hashes:         1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: EGfZgloHCup7IO2qD3YDl792zgyHPhe/16KmagRH1bo=)
                          2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: 2lmYWPmtkpX5U2TSsTv0Wvb1kSjM29hvmImbaYnFZwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 23:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219 (0x4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: Jan 16 23:02:15 2026 GMT
            Not After : Jan 23 23:02:15 2026 GMT
        Subject: CN=696ac377-1889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:5d:7c:21:42:68:fc:14:ea:2c:f9:b8:60:
                    db:ed:e7:e6:1c:f6:63:27:dc:a7:25:6e:fe:13:e3:
                    bf:62:fd:13:e0:25:05:1b:3a:70:ad:0e:d4:f0:be:
                    0d:af:c5:76:21:e8:3a:56:6b:be:3a:af:c0:63:57:
                    af:31:3c:5b:89:34:48:d8:cd:04:ec:fc:c6:f3:18:
                    d8:a5:2d:b1:94:2b:ad:aa:fb:f4:b9:2c:e1:d4:ff:
                    2c:d7:c0:58:7b:fb:43:59:bb:d0:a6:23:99:89:6b:
                    64:57:aa:b1:ae:b6:37:3a:92:b0:7a:1f:d3:2a:db:
                    55:35:f5:fb:b4:10:d9:d2:72:69:e7:e7:f3:39:a1:
                    ea:c6:27:12:fc:5c:fd:ec:df:b3:3f:f9:4e:38:0f:
                    e1:62:22:77:f1:5c:d2:62:9a:a1:91:da:e5:5b:97:
                    d6:23:33:ed:55:0e:b5:38:a3:66:74:be:33:2c:04:
                    db:5b:1b:1f:32:d8:ec:7b:a4:2c:25:58:eb:f1:5a:
                    3b:25:84:11:42:e1:1e:64:17:3b:8c:4e:d7:77:d2:
                    7a:a8:2d:ec:b2:f7:ee:09:95:c4:db:87:63:d7:ba:
                    97:94:2e:ff:41:d5:76:50:81:ac:36:e9:79:a6:6a:
                    31:e0:8a:cd:7b:aa:34:9a:88:7f:be:52:90:7f:52:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:50:40:F2:C5:E0:E0:01:84:E2:E7:97:C0:E9:0E:67:DC:30:4C:7F
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:48:03:02:6d:6e:49:08:95:f4:eb:07:bc:5b:01:fe:b1:5d:
         99:78:f0:0f:7f:0e:d7:b8:8b:58:23:91:88:ac:e0:0a:45:97:
         b7:f6:e7:fe:58:8d:a5:6c:38:c7:f6:ca:bd:12:bb:36:9f:64:
         bf:20:73:56:7e:ce:fc:82:4d:f1:8d:9a:d1:87:66:a0:25:dc:
         43:b9:8c:0d:a3:7e:56:61:5e:ce:98:e7:8e:e7:4c:10:a2:09:
         4b:c6:fe:d9:b4:23:53:76:aa:ce:e6:e2:cd:9b:52:73:65:0f:
         fb:56:c6:00:08:14:cc:a1:6f:8f:b7:a1:9f:3c:ce:bd:e6:0f:
         ba:3e:7a:93:dc:e8:79:ee:e5:26:2d:a0:7d:bd:32:76:a5:e9:
         07:38:10:fb:26:e9:f0:39:4e:fc:de:1f:87:9f:9a:46:6c:6c:
         ea:dd:d4:96:f7:6b:b1:78:80:98:b6:64:c3:40:00:e3:af:e3:
         24:77:71:b6:bd:a3:0f:db:2f:1e:b1:b8:86:95:f2:5c:a1:de:
         9a:3b:7f:1b:94:b4:0f:b7:83:93:4a:5d:ea:4b:07:ab:61:e7:
         fc:12:c6:c3:3d:81:be:6d:d4:da:f5:7c:1e:2f:f0:53:6f:40:
         a3:92:36:68:e2:b0:58:9e:14:40:36:1a:88:d6:96:d2:35:d5:
         b6:fc:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:26:48 2026 by rpki-client