This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File:                     WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier:          x38pc3KgLZhA7/u4POLvest8a8Mvv5Tvi9lrXW3XEHQ=
Subject key identifier:   94:76:ED:17:29:F2:63:0A:B1:2F:82:32:42:97:3A:45:A4:58:01:7B
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer:       /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial:       21E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number:          21C5
Signing time:             Thu 05 Feb 2026 02:08:41 +0000
Manifest this update:     Thu 05 Feb 2026 02:08:40 +0000
Manifest next update:     Thu 12 Feb 2026 02:08:40 +0000
Files and hashes:         1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: tt+lX7r85xeR8gsETAqUx4oDmZssJmPxNcmccdaTwEk=)
                          2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=)
                          3: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: lQXg+x/pxYEw6RZp1vPPXfhhm8xX80IO6STDBaCkyJw=)
                          4: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 02:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8673 (0x21e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
        Validity
            Not Before: Feb  5 02:08:40 2026 GMT
            Not After : Feb 12 02:08:40 2026 GMT
        Subject: CN=6983fba9-cef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:f6:9b:03:0e:26:cf:d2:61:f5:17:91:e8:
                    fc:54:68:6f:ad:01:03:0e:d3:70:0c:b1:7a:35:22:
                    64:1f:b7:e8:e1:e7:b2:d0:96:1f:28:68:97:35:ce:
                    82:a4:51:04:b6:0f:1d:2c:73:bb:6f:e9:9a:c3:68:
                    94:b3:9b:46:60:9d:8e:1b:4f:58:11:cc:75:b0:e6:
                    aa:f7:20:34:9a:a5:e3:88:d7:80:1e:fc:b1:5b:2e:
                    4c:1a:69:3e:24:fd:12:97:69:7f:54:cf:49:de:cb:
                    44:5c:b1:96:87:24:8b:7f:4c:07:60:f8:ca:ff:b4:
                    60:2a:d2:40:93:24:10:99:25:1c:f7:33:f9:e5:96:
                    38:3e:34:44:49:a2:ed:32:cb:82:59:f3:1b:97:c4:
                    02:24:9e:55:a0:f8:64:fa:a9:df:6b:41:59:50:a7:
                    c2:e4:92:e3:7f:5b:6f:db:36:2b:82:5d:aa:71:53:
                    03:85:44:44:9b:8a:6a:27:e9:3d:37:f5:63:2c:83:
                    0e:02:1b:96:fb:05:af:d1:f4:fa:38:85:bc:28:44:
                    32:8c:05:86:a4:47:9d:fe:7a:19:2c:d6:6f:dc:16:
                    91:db:f4:4c:28:25:dd:d0:9f:74:69:8e:50:ad:41:
                    75:35:76:f5:f9:cd:5b:f5:fb:fb:0c:7b:c0:79:fd:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:76:ED:17:29:F2:63:0A:B1:2F:82:32:42:97:3A:45:A4:58:01:7B
            X509v3 Authority Key Identifier:
                keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:44:82:f2:19:9a:3a:00:12:ea:78:11:e1:6c:a2:ec:54:9a:
         43:6f:02:6b:5e:da:05:43:8a:a4:0b:8c:18:d6:09:88:ce:59:
         60:6b:ee:61:29:b0:f7:e7:6e:67:5c:76:25:b7:83:d3:12:d9:
         dc:99:a8:10:39:90:86:c8:ba:f3:8d:50:b8:61:9d:9f:48:7b:
         65:fb:6c:48:82:2e:55:4b:c9:8b:c8:0a:2b:87:c9:78:10:fd:
         33:b8:ab:6c:a3:c2:a8:c6:95:35:5c:4e:00:af:bc:13:34:35:
         a5:8d:16:cd:cd:d7:8f:25:c3:4e:8d:15:df:52:94:34:1c:65:
         eb:f2:0a:71:79:e1:eb:b2:1c:ed:a6:ae:dc:d8:37:0b:71:ca:
         96:c3:78:8b:97:d0:9a:33:d4:dc:5e:eb:6b:b4:51:72:de:b7:
         da:11:c0:72:46:85:57:ad:6c:ea:6b:be:e4:bb:9b:5c:67:83:
         10:43:6e:0f:f7:53:a2:55:61:40:90:df:56:9e:2d:5c:6a:42:
         cc:e8:1f:f9:50:43:b7:1b:0b:fb:fe:15:d6:0c:18:c7:01:ab:
         f6:59:9d:b8:32:f0:00:64:73:f2:27:b1:f3:49:d7:b0:d7:e5:
         d6:52:13:d5:00:c4:1b:c3:eb:42:a8:98:9c:c9:ab:16:39:f5:
         3a:26:c6:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4
MjA5N0U1N0YwHhcNMjYwMjA1MDIwODQwWhcNMjYwMjEyMDIwODQwWjAYMRYwFAYD
VQQDDA02OTgzZmJhOS1jZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VT2mwMOJs/SYfUXkej8VGhvrQEDDtNwDLF6NSJkH7fo4eey0JYfKGiXNc6C
pFEEtg8dLHO7b+maw2iUs5tGYJ2OG09YEcx1sOaq9yA0mqXjiNeAHvyxWy5MGmk+
JP0Sl2l/VM9J3stEXLGWhySLf0wHYPjK/7RgKtJAkyQQmSUc9zP55ZY4PjRESaLt
MsuCWfMbl8QCJJ5VoPhk+qnfa0FZUKfC5JLjf1tv2zYrgl2qcVMDhUREm4pqJ+k9
N/VjLIMOAhuW+wWv0fT6OIW8KEQyjAWGpEed/noZLNZv3BaR2/RMKCXd0J90aY5Q
rUF1NXb1+c1b9fv7DHvAef2GJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR27Rcp
8mMKsS+CMkKXOkWkWAF7MB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5
OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx
NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsRILyGZo6ABLqeBHhbKLsVJpDbwJrXtoFQ4qkC4wY1gmIzllga+5h
KbD3525nXHYlt4PTEtncmagQOZCGyLrzjVC4YZ2fSHtl+2xIgi5VS8mLyAorh8l4
EP0zuKtso8KoxpU1XE4Ar7wTNDWljRbNzdePJcNOjRXfUpQ0HGXr8gpxeeHrshzt
pq7c2DcLccqWw3iLl9CaM9TcXutrtFFy3rfaEcByRoVXrWzqa77ku5tcZ4MQQ24P
91OiVWFAkN9Wni1cakLM6B/5UEO3Gwv7/hXWDBjHAav2WZ24MvAAZHPyJ7HzSdew
1+XWUhPVAMQbw+tCqJicyasWOfU6Jsb2
-----END CERTIFICATE-----
Generated at Thu Feb 5 11:01:44 2026 by rpki-client