This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
File:                     wuV00hDNcViHNr83nUfNEUasN7I.mft (raw, json)
Hash identifier:          KDDEnJUgQ0QUfaK9qAqA/H/oqK8wzutq5+PSHsQeSuM=
Subject key identifier:   FC:67:50:1A:3B:C1:5B:54:E4:20:F0:D2:0B:3E:A7:B9:82:31:8D:A1
Authority key identifier: C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
Certificate issuer:       /CN=A91A9720/serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
Manifest number:          08
Signing time:             Mon 05 Jan 2026 06:58:52 +0000
Manifest this update:     Mon 05 Jan 2026 06:58:51 +0000
Manifest next update:     Mon 12 Jan 2026 06:58:51 +0000
Files and hashes:         1: wuV00hDNcViHNr83nUfNEUasN7I.crl (hash: uFuTiZxcketzylcYiZiOY/62my1KZbQKhRZ/kilPAh0=)
                          2: 48A87092E55C11F0AC7781DC396F56BC.roa (hash: cOTVbOzJpvCxSelRScfWVMeegrX9N3Z0kUbsAzIuCrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
                          rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 06:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9720, serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
        Validity
            Not Before: Jan  5 06:58:51 2026 GMT
            Not After : Jan 12 06:58:51 2026 GMT
        Subject: CN=695b612c-43bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:bc:d7:da:05:53:25:47:28:8d:86:f4:dd:
                    45:e4:4d:22:34:63:56:e7:6f:f3:69:22:a2:0b:15:
                    83:41:1e:a5:37:32:ba:74:36:98:4c:ad:33:fb:ad:
                    7c:a8:2b:51:14:45:bc:a5:fb:73:19:ec:36:9c:a9:
                    00:f4:45:92:a6:d5:b6:af:1c:2d:d8:bc:e0:42:73:
                    e3:9b:38:2d:c6:ec:4a:20:2f:5c:ad:eb:37:e1:63:
                    6a:d7:b1:c1:f0:bf:3f:ba:a2:4e:75:fd:c6:44:99:
                    d4:96:39:e5:cb:01:fe:b7:73:2e:d7:31:2f:e7:c7:
                    6e:bf:3f:ef:69:de:a4:f5:fc:26:92:ff:43:e0:b2:
                    5c:b3:6f:d5:3f:d3:22:60:1c:a3:1d:d0:43:49:c2:
                    bd:eb:b7:64:a1:24:b7:b4:d9:35:3d:b8:bb:83:01:
                    b5:b7:49:6e:91:48:97:5c:e7:7b:d4:ef:ab:d9:6c:
                    74:18:87:4c:2a:c0:6a:d0:0d:7b:1d:8e:37:99:9b:
                    cb:58:64:80:57:00:b5:8e:12:16:ee:de:00:15:89:
                    d7:a6:0d:92:bf:57:1c:0a:80:51:13:e8:5f:f0:1c:
                    5d:11:80:24:62:32:43:20:61:cd:ce:cc:c7:0d:81:
                    b3:73:28:0c:a1:9b:29:79:91:5a:f0:39:6d:bf:61:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:67:50:1A:3B:C1:5B:54:E4:20:F0:D2:0B:3E:A7:B9:82:31:8D:A1
            X509v3 Authority Key Identifier:
                keyid:C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:e0:2a:10:6a:e2:96:73:bc:cd:dc:29:a7:c7:87:b9:1c:
         f0:82:0a:0c:a9:f5:59:87:22:30:c6:95:91:b2:e5:b4:6c:55:
         93:de:f1:a4:f0:d5:0d:d3:d8:0a:f7:a0:18:9b:86:81:6b:da:
         87:c7:17:29:03:34:a0:6b:6d:96:b5:d0:4e:b2:46:d4:94:3d:
         f9:3e:75:99:f0:09:6b:29:c8:89:cb:46:5b:25:89:96:0a:94:
         0e:8e:36:be:93:b4:a5:52:8d:7b:45:88:39:01:16:27:4c:bf:
         0f:f1:54:74:71:c8:7a:d9:50:3b:33:22:48:1d:c2:ea:3b:0c:
         82:6e:e5:1d:6a:82:f6:f4:97:1c:f8:8b:d5:6b:4f:35:ec:d5:
         27:33:e4:38:9c:34:d7:41:b4:eb:9c:5e:6c:a7:72:3a:4c:90:
         2b:fb:50:78:99:ef:9a:c0:19:c9:13:55:cc:54:a2:a9:dc:3d:
         24:16:58:19:00:ca:77:43:35:46:11:e5:a3:ef:ad:ce:c2:90:
         d5:12:b9:e9:9a:a3:e8:ba:b1:c8:84:1f:86:1d:0d:43:0c:fd:
         bf:4c:e4:35:f6:09:23:3d:05:f9:7d:2c:74:5d:be:90:05:ca:
         33:1f:73:7f:7b:5c:5a:f9:4b:8b:77:e3:af:49:c9:f3:36:84:
         74:21:87:4b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB
OTcyMDExMC8GA1UEBRMoQzJFNTc0RDIxMENENzE1ODg3MzZCRjM3OUQ0N0NEMTE0
NkFDMzdCMjAeFw0yNjAxMDUwNjU4NTFaFw0yNjAxMTIwNjU4NTFaMBgxFjAUBgNV
BAMMDTY5NWI2MTJjLTQzYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzyrzX2gVTJUcojYb03UXkTSI0Y1bnb/NpIqILFYNBHqU3Mrp0NphMrTP7rXyo
K1EURbyl+3MZ7DacqQD0RZKm1bavHC3YvOBCc+ObOC3G7EogL1yt6zfhY2rXscHw
vz+6ok51/cZEmdSWOeXLAf63cy7XMS/nx26/P+9p3qT1/CaS/0Pgslyzb9U/0yJg
HKMd0ENJwr3rt2ShJLe02TU9uLuDAbW3SW6RSJdc53vU76vZbHQYh0wqwGrQDXsd
jjeZm8tYZIBXALWOEhbu3gAVidemDZK/VxwKgFET6F/wHF0RgCRiMkMgYc3OzMcN
gbNzKAyhmyl5kVrwOW2/YZw3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/GdQGjvB
W1TkIPDSCz6nuYIxjaEwHwYDVR0jBBgwFoAUwuV00hDNcViHNr83nUfNEUasN7Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NzIwLzVBNDUwNzUwRTU1
OTExRjBCMjI4ODk1ODM4NkY1NkJDL3d1VjAwaEROY1ZpSE5yODNuVWZORVVhc043
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd3VWMDBoRE5jVmlITnI4M25VZk5FVWFzTjdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5
NzIwLzVBNDUwNzUwRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL3d1VjAwaEROY1Zp
SE5yODNuVWZORVVhc043SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEad4CoQauKWc7zN3Cmnx4e5HPCCCgyp9VmHIjDGlZGy5bRsVZPe8aTw
1Q3T2Ar3oBibhoFr2ofHFykDNKBrbZa10E6yRtSUPfk+dZnwCWspyInLRlsliZYK
lA6ONr6TtKVSjXtFiDkBFidMvw/xVHRxyHrZUDszIkgdwuo7DIJu5R1qgvb0lxz4
i9VrTzXs1Scz5DicNNdBtOucXmyncjpMkCv7UHiZ75rAGckTVcxUoqncPSQWWBkA
yndDNUYR5aPvrc7CkNUSuemao+i6sciEH4YdDUMM/b9M5DX2CSM9Bfl9LHRdvpAF
yjMfc397XFr5S4t3469JyfM2hHQhh0s=
-----END CERTIFICATE-----
Generated at Wed Jan 7 06:36:47 2026 by rpki-client