This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
File:                     wtbHmmd8l-xwBjE76RZ-DeZspFI.mft (raw, json)
Hash identifier:          jWA/oroGNDQ0lTXxUiQD0N9G4t2PrRWok9Pyx3I+zTQ=
Subject key identifier:   80:8D:65:F7:86:B0:1D:84:33:08:42:91:2B:B5:E4:A8:BD:7B:1B:32
Authority key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
Certificate issuer:       /CN=A9192F5B/serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
Manifest number:          2F
Signing time:             Sat 17 Jan 2026 06:39:16 +0000
Manifest this update:     Sat 17 Jan 2026 06:39:15 +0000
Manifest next update:     Sat 24 Jan 2026 06:39:15 +0000
Files and hashes:         1: wtbHmmd8l-xwBjE76RZ-DeZspFI.crl (hash: ltbfUJ3jeQoWSZ37WzWPF3E/tsudIf82E9wTmNYdreU=)
                          2: 283AD1AEF15C11F092AE22215F6F56BC.roa (hash: HSCt9NcLYYzlzzjXCvsEsT6Lof/UjxarzXKK9dxk5ik=)
                          3: 4619B082F15C11F0A6B34B2B5F6F56BC.roa (hash: IfWG1R1Je9GzJGjcffqAQ0R1P1J1fs4cLH2QCvIzFkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
        Validity
            Not Before: Jan 17 06:39:15 2026 GMT
            Not After : Jan 24 06:39:15 2026 GMT
        Subject: CN=696b2e93-3a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:f9:be:d7:ff:37:a9:40:70:fc:f7:47:88:
                    d6:f3:b7:f6:96:cc:77:00:ae:97:1e:c2:b2:dc:02:
                    49:41:62:cf:57:68:d3:eb:f3:80:a1:78:22:1a:19:
                    19:97:11:c6:8a:fa:d2:37:05:1e:b8:25:8f:9a:75:
                    a0:51:db:36:7b:23:c8:9f:09:16:7c:d0:ac:80:ab:
                    4e:a4:be:cf:21:87:52:6c:a2:fd:6c:5b:bd:d2:f6:
                    07:08:a3:60:e7:72:67:65:b6:3c:19:4a:61:4a:aa:
                    2a:9e:ea:aa:03:ff:81:8c:de:7c:17:7b:72:78:0d:
                    d4:f5:47:08:dc:2d:26:75:e1:14:0c:84:12:39:90:
                    49:b4:d0:d4:f4:ef:35:f3:b2:1e:3b:4e:23:2b:83:
                    b5:48:be:d3:94:a5:68:9d:dc:96:d7:b0:3c:63:25:
                    08:70:f1:c6:82:f0:69:7c:72:2b:90:0b:ab:bf:47:
                    24:8a:8e:46:91:cc:cb:10:42:13:6f:41:35:53:57:
                    83:8f:c5:a6:2e:7d:d8:ea:f8:ec:c4:1a:36:bf:d1:
                    07:c5:1f:b5:c5:cc:7c:05:f4:5b:d6:ee:a3:e0:8c:
                    a9:ca:de:6d:12:94:2d:55:5f:c4:f0:86:f1:9b:cf:
                    93:b1:5f:e2:6c:39:4a:11:f7:1f:ce:14:db:cb:f3:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8D:65:F7:86:B0:1D:84:33:08:42:91:2B:B5:E4:A8:BD:7B:1B:32
            X509v3 Authority Key Identifier:
                keyid:C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:de:67:6f:f5:58:17:04:f6:4f:d4:34:32:bd:b3:00:10:
         8a:b3:b3:d1:66:85:dc:69:65:f7:db:65:77:87:29:b1:ba:0a:
         6f:a1:b2:9b:44:19:49:24:90:c8:b9:fb:1a:ce:78:b3:77:22:
         33:0e:b5:9a:ff:be:cc:60:17:79:58:da:33:79:b6:ec:28:a6:
         bd:03:be:a5:ff:aa:1a:19:5f:68:ca:4a:5f:12:67:1e:c1:50:
         52:5b:69:dc:8a:c6:0f:71:f4:e8:72:2c:f1:8c:77:7a:1a:84:
         19:e9:96:cf:c6:13:04:05:50:e4:8f:5e:92:dd:97:fe:55:c5:
         68:48:61:20:6d:d7:9c:48:29:31:9b:ef:7b:c4:55:e8:a7:8b:
         19:5b:33:c3:b3:51:a4:7e:c1:8b:1a:de:0c:93:fe:bc:3d:67:
         94:a5:39:e0:e7:b9:35:c4:5e:6a:44:81:9a:09:3f:34:03:d8:
         53:06:34:70:5f:5d:93:92:f2:90:ce:b7:5c:a2:9e:f8:37:7e:
         1d:fe:a5:d7:ad:b7:24:cb:b2:a1:c3:80:7f:af:f0:d6:aa:71:
         69:3b:9d:c3:99:0f:51:e1:d3:f5:05:2e:80:37:00:c3:37:fa:
         1f:75:30:bb:93:20:ce:9a:16:88:a0:8f:a9:10:a8:0e:1e:25:
         a2:2f:88:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MkY1QjExMC8GA1UEBRMoQzJENkM3OUE2NzdDOTdFQzcwMDYzMTNCRTkxNjdFMERF
NjZDQTQ1MjAeFw0yNjAxMTcwNjM5MTVaFw0yNjAxMjQwNjM5MTVaMBgxFjAUBgNV
BAMMDTY5NmIyZTkzLTNhMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxE/m+1/83qUBw/PdHiNbzt/aWzHcArpcewrLcAklBYs9XaNPr84CheCIaGRmX
EcaK+tI3BR64JY+adaBR2zZ7I8ifCRZ80KyAq06kvs8hh1Jsov1sW73S9gcIo2Dn
cmdltjwZSmFKqiqe6qoD/4GM3nwXe3J4DdT1RwjcLSZ14RQMhBI5kEm00NT07zXz
sh47TiMrg7VIvtOUpWid3JbXsDxjJQhw8caC8Gl8ciuQC6u/RySKjkaRzMsQQhNv
QTVTV4OPxaYufdjq+OzEGja/0QfFH7XFzHwF9FvW7qPgjKnK3m0SlC1VX8TwhvGb
z5OxX+JsOUoR9x/OFNvL8zT1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgI1l94aw
HYQzCEKRK7XkqL17GzIwHwYDVR0jBBgwFoAUwtbHmmd8l+xwBjE76RZ+DeZspFIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0NEQUJGMTgyQjRC
MTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14d0JqRTc2UlotRGVac3BG
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd3RiSG1tZDhsLXh3QmpFNzZSWi1EZVpzcEZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
RjVCL0NEQUJGMTgyQjRCMTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14
d0JqRTc2UlotRGVac3BGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHFr3mdv9VgXBPZP1DQyvbMAEIqzs9FmhdxpZffbZXeHKbG6Cm+hsptE
GUkkkMi5+xrOeLN3IjMOtZr/vsxgF3lY2jN5tuwopr0DvqX/qhoZX2jKSl8SZx7B
UFJbadyKxg9x9OhyLPGMd3oahBnpls/GEwQFUOSPXpLdl/5VxWhIYSBt15xIKTGb
73vEVeinixlbM8OzUaR+wYsa3gyT/rw9Z5SlOeDnuTXEXmpEgZoJPzQD2FMGNHBf
XZOS8pDOt1yinvg3fh3+pdettyTLsqHDgH+v8NaqcWk7ncOZD1Hh0/UFLoA3AMM3
+h91MLuTIM6aFoigj6kQqA4eJaIviG4=
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:56 2026 by rpki-client