This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          qTJvQ1amUfDRYHqRUOPGLeeUXLm7eIAE7iPdGkOsbzg=
Subject key identifier:   43:99:36:E3:66:CF:67:F9:1D:38:C1:F0:65:59:4C:60:86:C6:01:BA
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3690
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          359D
Signing time:             Mon 19 Jan 2026 03:16:49 +0000
Manifest this update:     Mon 19 Jan 2026 03:16:49 +0000
Manifest next update:     Mon 26 Jan 2026 03:16:49 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: sPTf+77QaQzQe5whQELEj55n/b600RtgZC60e+4jKbI=)
                          2: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
                          3: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
                          4: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
                          5: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: FY0t2N10iRK+Zr0ip8svKKHBrZSNX6MAybdSYEAFs30=)
                          6: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
                          7: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
                          8: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
                          9: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
                          10: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
                          11: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
                          12: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
                          13: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
                          14: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
                          15: BA0DF746D9F611F08511A4D47CD3641D.roa (hash: FaBVsUXWtdTBULefU8iO1BgtwzRuhinKdm9tVg3D5qQ=)
                          16: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
                          17: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: bdFFvc6eNQU1+yjsu6zdGpd9HjnTWxx0y+6B+LSnliU=)
                          18: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
                          19: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
                          20: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
                          21: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
                          22: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
                          23: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 03:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13968 (0x3690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Jan 19 03:16:49 2026 GMT
            Not After : Jan 26 03:16:49 2026 GMT
        Subject: CN=696da221-7a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:13:a0:a0:fa:81:8b:5b:11:ec:0d:3e:6d:5e:
                    30:7d:2c:fd:95:b5:f2:0a:5d:8f:09:88:54:98:0f:
                    9f:b3:db:e4:96:b5:35:1a:5e:a8:27:bf:3d:36:39:
                    b9:c8:0a:ff:10:7d:9a:5b:e9:13:10:77:58:60:c6:
                    8e:72:ba:de:4e:a9:36:2e:a2:66:59:2e:e0:9b:83:
                    1a:76:12:d3:80:e7:a8:af:44:eb:b0:de:d6:9f:90:
                    3f:55:af:48:c3:c1:3e:8c:1c:60:f5:74:e4:21:64:
                    6a:ea:7a:1a:7e:a4:d2:e6:68:93:b4:d2:f2:7f:18:
                    6f:9f:0f:a6:17:b5:b4:88:6d:34:5f:c9:40:51:35:
                    cf:12:ae:6e:a2:dc:59:c2:03:8d:e5:07:06:48:c6:
                    72:68:07:b4:37:44:8a:92:6c:27:64:ea:21:69:c3:
                    07:3f:f5:cd:c2:b9:54:7c:10:a0:13:f8:8d:8c:5b:
                    d8:91:9b:b2:fd:6c:97:09:52:63:fe:39:c7:e0:a2:
                    7b:03:90:b2:19:df:a7:d1:53:af:40:77:26:68:33:
                    3d:64:cd:03:0a:9c:6e:58:fe:19:c8:8a:ad:5c:e2:
                    5d:ec:62:8b:22:8f:d8:10:91:c1:64:cc:71:91:aa:
                    2f:b8:f9:e2:4c:de:f2:fd:ca:a8:e6:0d:ac:c2:b4:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:36:E3:66:CF:67:F9:1D:38:C1:F0:65:59:4C:60:86:C6:01:BA
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:60:df:5e:22:ea:ea:f9:8f:b4:47:3b:5a:14:95:4a:03:ad:
         b4:82:e3:5f:d5:59:ab:1e:b9:f2:8f:97:0b:e8:44:31:73:9b:
         67:bd:49:7e:db:67:51:06:f0:6a:3e:2c:69:6f:bd:ed:6c:8c:
         5e:1e:06:f5:74:b9:c9:02:d1:0f:4d:26:42:e1:de:6d:94:59:
         fc:07:2d:88:e2:1a:bb:f6:43:16:7e:ef:76:d5:3a:7d:47:50:
         4a:8a:35:9e:3e:63:8e:2f:a2:e7:cd:c4:6d:f2:25:eb:5b:15:
         2a:9f:85:5a:33:20:1a:55:9d:86:71:14:47:32:66:b8:0d:9e:
         92:a3:bb:da:4a:ca:c3:9b:13:35:d7:54:7e:cc:c8:c8:cc:5c:
         eb:5f:88:31:75:73:66:92:e7:a9:8d:21:d4:b9:38:4f:1e:04:
         8d:78:f1:f3:34:65:00:fc:c5:44:77:cb:99:a1:f4:b6:f1:51:
         cc:5c:3e:86:17:20:ce:fc:e4:41:c6:4e:b9:74:be:9e:b0:32:
         1e:2d:33:fd:0b:ae:47:9b:80:2c:25:56:eb:ae:01:90:1e:0b:
         57:0b:93:e5:f1:8f:3b:7f:d8:9a:59:b3:d6:a7:73:d0:15:94:
         05:ec:34:67:b2:d3:71:8b:bf:9c:a1:a2:c4:02:ba:be:15:1a:
         d7:3a:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:05:48 2026 by rpki-client