This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
File:                     W9MkppvSbt2t9RKc0Y93odgFI7Y.mft (raw, json)
Hash identifier:          +swecSWYC0N2wkGPfyqVsSnxr/YAF7uiVP8m7Tq1fb8=
Subject key identifier:   86:2F:23:74:C8:0B:D3:B5:C5:C1:64:B9:02:6D:7A:2F:E9:FA:F7:5E
Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Certificate issuer:       /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
Manifest number:          F3
Signing time:             Wed 07 Jan 2026 04:28:29 +0000
Manifest this update:     Wed 07 Jan 2026 04:28:29 +0000
Manifest next update:     Wed 14 Jan 2026 04:28:29 +0000
Files and hashes:         1: W9MkppvSbt2t9RKc0Y93odgFI7Y.crl (hash: YHPUQrtC865N2oz6RXagChDl/kjx9n4kBHB1dV8W9qY=)
                          2: 09FB57587C7411EFB8CF8A27C4F9AE02.roa (hash: gO0CUhCgilm8/UUOXFuuBpFB5QM9rFiYOIsqVOXOzlY=)
                          3: 0A918056D24C11EFB8B5C95EC4F9AE02.roa (hash: cBGezkS6P+KbPVWAkP/GyV+QTZO+g5cPSzSssSv6zII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 04:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380, serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
        Validity
            Not Before: Jan  7 04:28:29 2026 GMT
            Not After : Jan 14 04:28:29 2026 GMT
        Subject: CN=695de0ed-682f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:a4:15:d1:71:3a:5b:fd:e3:0e:31:4c:c3:
                    76:63:93:e1:54:21:27:72:09:c4:ca:6c:86:04:6b:
                    cc:de:09:2f:c4:f9:7e:7c:c3:1c:3d:f5:6c:4c:5a:
                    f8:2b:84:ec:ce:a0:75:58:f2:45:86:9b:fa:d0:5d:
                    0f:93:9a:b2:95:bd:b1:34:b6:89:85:8c:a4:09:1c:
                    e7:f4:ca:b5:a6:ee:0e:63:3b:e8:6f:76:7b:9f:1f:
                    1a:a6:25:0b:a3:67:a9:62:6b:05:8f:a3:d2:a0:c4:
                    ff:a3:cf:2c:1e:04:93:73:5e:b7:6c:c0:3e:fa:88:
                    07:c9:71:d7:f6:1d:92:03:d0:da:cb:22:46:93:ce:
                    f6:36:b9:8f:31:49:4c:9e:e7:38:2f:87:c7:85:7a:
                    27:b4:8c:a3:1e:86:dc:04:69:1b:a3:ad:75:e8:ff:
                    28:bf:4a:38:dc:84:c5:45:61:e9:ff:3c:7b:bf:65:
                    70:f7:0e:97:8a:9f:b4:21:66:97:62:58:a1:01:6f:
                    76:89:8b:32:fe:05:f0:1a:c1:c2:fb:2e:f9:0d:e0:
                    0b:77:14:3d:9b:4c:46:30:f8:37:7e:0e:1c:b7:fd:
                    03:0a:ef:1a:46:0f:e9:ce:36:65:78:e4:7e:92:bb:
                    26:fc:27:0f:a9:6c:e4:cd:59:84:b9:20:5e:d0:19:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2F:23:74:C8:0B:D3:B5:C5:C1:64:B9:02:6D:7A:2F:E9:FA:F7:5E
            X509v3 Authority Key Identifier:
                keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0a:6c:8a:78:03:7d:83:12:33:f0:79:d7:31:b9:57:30:e5:
         c3:93:40:96:fd:9f:d8:fb:e5:77:2c:4f:a6:f5:d5:23:cd:8a:
         43:e5:55:6c:32:2c:c2:ca:bf:4d:03:4e:b5:64:40:5a:cd:35:
         dd:1a:1f:99:d0:44:56:f2:b7:b5:ae:74:f9:d1:2e:84:3b:65:
         d7:53:f9:40:04:81:c9:af:1b:a7:40:2d:02:97:d0:aa:e4:11:
         39:36:9f:5c:aa:9c:0e:0d:8e:f0:58:79:75:65:75:e5:53:d2:
         70:9d:c0:e2:8a:fb:a1:02:22:71:49:5f:21:78:54:26:1a:c5:
         39:cb:c3:6d:ed:1c:fb:99:a4:c9:c4:40:3c:50:0c:50:a7:e5:
         f4:fb:60:9a:2c:2c:56:05:54:d7:b6:31:e5:9b:50:3d:79:bf:
         ea:e3:af:22:4c:88:49:c7:3d:7a:d4:70:8f:d8:9e:34:fc:58:
         c7:0c:2c:01:0b:77:15:15:59:57:e5:27:50:a1:44:a7:48:4c:
         4e:85:95:e4:0d:a3:78:48:95:8b:e1:34:96:27:7c:69:d3:ec:
         05:33:6c:2a:54:ca:34:ea:1e:b2:10:6c:5b:d5:c9:7e:3a:29:
         1c:cd:7e:f4:3e:1d:32:e3:59:97:1e:5a:b0:30:63:e9:2f:03:
         dd:12:87:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAzODAxMTAvBgNVBAUTKDVCRDMyNEE2OUJEMjZFRERBREY1MTI5Q0QxOEY3N0Ex
RDgwNTIzQjYwHhcNMjYwMTA3MDQyODI5WhcNMjYwMTE0MDQyODI5WjAYMRYwFAYD
VQQDDA02OTVkZTBlZC02ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzXGkFdFxOlv94w4xTMN2Y5PhVCEncgnEymyGBGvM3gkvxPl+fMMcPfVsTFr4
K4TszqB1WPJFhpv60F0Pk5qylb2xNLaJhYykCRzn9Mq1pu4OYzvob3Z7nx8apiUL
o2epYmsFj6PSoMT/o88sHgSTc163bMA++ogHyXHX9h2SA9DayyJGk872NrmPMUlM
nuc4L4fHhXontIyjHobcBGkbo6116P8ov0o43ITFRWHp/zx7v2Vw9w6Xip+0IWaX
YlihAW92iYsy/gXwGsHC+y75DeALdxQ9m0xGMPg3fg4ct/0DCu8aRg/pzjZleOR+
krsm/CcPqWzkzVmEuSBe0BmcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYvI3TI
C9O1xcFkuQJtei/p+vdeMB8GA1UdIwQYMBaAFFvTJKab0m7drfUSnNGPd6HYBSO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM4MC83NzIyNEU5NDdC
Q0IxMUVGQTI0ODkyMTFDNEY5QUUwMi9XOU1rcHB2U2J0MnQ5UktjMFk5M29kZ0ZJ
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c5TWtwcHZTYnQydDlSS2MwWTkzb2RnRkk3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDM4MC83NzIyNEU5NDdCQ0IxMUVGQTI0ODkyMTFDNEY5QUUwMi9XOU1rcHB2U2J0
MnQ5UktjMFk5M29kZ0ZJN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnCmyKeAN9gxIz8HnXMblXMOXDk0CW/Z/Y++V3LE+m9dUjzYpD5VVs
MizCyr9NA061ZEBazTXdGh+Z0ERW8re1rnT50S6EO2XXU/lABIHJrxunQC0Cl9Cq
5BE5Np9cqpwODY7wWHl1ZXXlU9JwncDiivuhAiJxSV8heFQmGsU5y8Nt7Rz7maTJ
xEA8UAxQp+X0+2CaLCxWBVTXtjHlm1A9eb/q468iTIhJxz161HCP2J40/FjHDCwB
C3cVFVlX5SdQoUSnSExOhZXkDaN4SJWL4TSWJ3xp0+wFM2wqVMo06h6yEGxb1cl+
OikczX70Ph0y41mXHlqwMGPpLwPdEofJ
-----END CERTIFICATE-----
Generated at Fri Jan 9 01:04:33 2026 by rpki-client