This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File:                     RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier:          tJsJi2oBmWdd/nDoNBkqZWMEVFwmO9IoxM9a/g9mofo=
Subject key identifier:   6C:AE:5C:8D:C4:E4:44:83:8B:AD:81:C4:E8:16:D3:C4:B1:5C:A9:E2
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number:          024E
Signing time:             Tue 27 Jan 2026 01:07:05 +0000
Manifest this update:     Tue 27 Jan 2026 01:07:05 +0000
Manifest next update:     Tue 03 Feb 2026 01:07:05 +0000
Files and hashes:         1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: Z5NU8n+TiyVTI31nWaE8zeUX9UGx88ccomJ34ya37JE=)
                          2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: O02+8DoVYrqp82jrhg6ArYQ301VXPfCVYWMKw9CBkgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 01:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: Jan 27 01:07:05 2026 GMT
            Not After : Feb  3 01:07:05 2026 GMT
        Subject: CN=69780fb9-924e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9a:d2:d9:bd:11:10:b5:28:84:38:ef:27:3b:
                    40:ae:8f:14:c3:e3:c5:1b:5e:92:88:bd:68:4c:8c:
                    2d:47:17:22:7a:23:4b:97:97:eb:95:f6:96:6f:49:
                    25:02:ec:06:c7:c5:7f:36:bc:32:59:5e:a5:e1:1d:
                    25:e8:f7:c6:b6:60:9c:f5:34:56:32:00:06:80:4f:
                    e4:20:75:11:83:35:fd:07:20:6d:a3:7b:e4:6f:ab:
                    a9:a1:3b:4e:31:d4:59:39:1d:60:2f:73:85:ed:81:
                    17:c3:bd:bb:04:16:d8:09:f1:df:41:b4:90:8a:7c:
                    07:c4:15:e8:e9:d4:cc:d9:72:e3:58:4d:e6:81:b2:
                    6b:78:2f:30:47:1f:9b:c4:81:46:18:9a:45:dc:65:
                    cb:48:3e:d7:15:85:44:25:38:67:d7:41:0f:42:0f:
                    13:f3:0d:0a:09:2a:09:2e:a5:44:7a:bd:89:a6:81:
                    11:6a:ab:ce:65:c3:42:96:bd:63:7e:4a:9d:6e:a6:
                    10:41:e4:1d:62:1a:a2:52:09:24:53:5b:b9:aa:7c:
                    6b:4c:b3:4c:2d:9d:6b:b8:64:e4:95:7f:7b:bc:99:
                    1d:09:50:27:e9:ee:5d:5e:ac:bd:84:6b:b6:8c:97:
                    9f:b6:6c:a6:b9:af:68:ed:84:d9:b6:86:44:72:f5:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AE:5C:8D:C4:E4:44:83:8B:AD:81:C4:E8:16:D3:C4:B1:5C:A9:E2
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:82:b7:9a:93:c2:aa:6c:16:f9:09:09:b0:d3:dc:4b:5a:3d:
         8f:48:58:d3:12:c5:93:de:13:7a:48:30:e6:6f:f6:fb:2f:b0:
         1d:48:74:d8:0b:5a:0e:40:82:1f:5c:ef:6f:ad:03:c5:e8:1c:
         2a:20:1f:7e:83:89:49:4a:c3:1d:e3:4d:a0:01:34:b5:c6:4d:
         15:9f:30:29:65:15:d6:b9:6b:8b:87:6e:ba:6c:81:5f:58:86:
         68:79:e8:fc:1c:9b:83:ff:fd:11:c0:d0:f2:fc:cf:6a:ce:0e:
         49:a3:9e:28:62:9f:63:1b:f7:4c:76:5c:ab:bc:64:65:bf:83:
         b6:06:43:27:56:e7:13:72:2b:f8:e8:da:46:a7:b3:d9:d4:1d:
         de:bc:0a:6b:b8:01:ba:2d:2a:ad:cb:58:e6:3d:29:d0:57:aa:
         12:cd:11:ad:7e:95:4c:b7:49:7a:d4:16:90:c8:1e:e9:68:6f:
         3c:b0:28:22:11:d2:77:b2:75:87:0e:bb:a7:8f:85:46:67:4f:
         4d:f9:9c:23:83:7f:ef:62:15:5e:cc:83:51:f4:fb:86:ef:07:
         15:47:a2:39:0e:be:1e:86:48:8d:31:75:87:9f:0f:1a:cc:84:
         79:26:30:d8:53:b0:14:84:c2:5d:dc:20:39:45:14:5c:9a:26:
         dc:fd:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:49:02 2026 by rpki-client