This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
File:                     w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft (raw, json)
Hash identifier:          RmYl+/14JDIUk89hG+gWzWmzVi1NUqDTOdEp1cv+VRc=
Subject key identifier:   34:E7:E8:F4:8F:72:37:E7:FE:E7:A8:D2:81:47:AF:B9:B4:46:7C:B6
Authority key identifier: C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
Certificate issuer:       /CN=A9116297/serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
Manifest number:          23
Signing time:             Sun 25 Jan 2026 06:48:26 +0000
Manifest this update:     Sun 25 Jan 2026 06:48:25 +0000
Manifest next update:     Sun 01 Feb 2026 06:48:25 +0000
Files and hashes:         1: w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl (hash: 4KfTFOiNd/E8Z3o7rOgMjbjy+2dLMSMI58o4ZuPTUQ8=)
                          2: 217645DAC5CC11F0B5963A5AC4F9AE02.roa (hash: RXMfaFzW/9ZHGfERyZfeYe4UQqDUFD2avsOBKDr4G80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
        Validity
            Not Before: Jan 25 06:48:25 2026 GMT
            Not After : Feb  1 06:48:25 2026 GMT
        Subject: CN=6975bcb9-c2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:7d:bd:86:80:0a:1f:9e:cd:0c:7c:cc:77:
                    82:77:0b:84:a8:75:d2:9b:94:56:12:c9:89:48:fe:
                    26:02:a4:25:64:36:0d:60:46:fb:66:52:c3:d1:0b:
                    21:b2:09:c5:04:72:26:4a:db:62:24:39:9b:1c:25:
                    88:e7:b9:17:d6:31:3f:77:a5:52:88:b9:a9:be:1d:
                    36:06:13:85:d2:76:97:27:0b:5a:1b:7a:81:51:17:
                    52:03:c6:48:61:ab:f8:77:19:c9:dc:1f:80:45:5f:
                    d5:c6:48:aa:06:65:cf:d0:a6:74:e8:cd:dd:c9:eb:
                    c2:c6:29:70:c6:d7:54:45:37:8e:ef:88:f6:03:52:
                    15:c7:d7:be:76:42:8c:f9:be:fb:b5:0b:76:62:7d:
                    01:45:c6:8a:d9:af:8a:8d:e5:44:9a:09:6c:77:52:
                    24:36:82:19:21:e2:76:0b:13:48:55:c3:95:10:d7:
                    ab:fb:7c:5f:06:21:4d:f0:c3:e7:2a:ff:2f:4d:4a:
                    ab:6d:20:52:d3:ff:b0:22:e9:25:34:0c:32:ec:a3:
                    40:63:67:fd:3b:6e:c1:2f:b5:11:64:f9:cd:fb:47:
                    31:27:c2:73:d1:38:a5:19:eb:01:fc:ba:b5:78:f0:
                    a3:63:46:6c:1f:8b:2e:60:9c:c5:27:4d:fe:9f:1c:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E7:E8:F4:8F:72:37:E7:FE:E7:A8:D2:81:47:AF:B9:B4:46:7C:B6
            X509v3 Authority Key Identifier:
                keyid:C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:52:d7:d4:a2:a6:5b:16:41:e0:48:2e:5d:f7:69:e7:f9:52:
         f5:21:bc:2d:c5:f9:64:f8:fd:aa:8c:4c:67:25:7d:0d:59:16:
         ba:a3:cf:d5:8b:93:19:9e:ba:9a:be:a4:49:37:3c:d7:e7:1a:
         8d:db:5a:fa:22:6f:b3:c6:b0:94:20:e3:8b:68:be:2b:42:1e:
         d7:95:95:c4:10:58:31:fe:49:6f:df:4b:a5:e7:b4:20:4e:3c:
         4e:6c:0a:d4:f9:a6:00:13:1d:3a:d0:d3:7a:e8:58:54:e9:3a:
         58:34:3b:c6:50:04:fd:2f:42:31:c3:d3:3d:a4:79:cd:9d:27:
         d6:1f:61:a4:a4:85:62:45:37:b4:e0:f0:75:42:76:2a:2d:31:
         94:d0:c3:9c:0a:4a:98:57:e2:85:23:6b:cf:5e:88:9c:45:00:
         38:a8:67:f2:cf:aa:87:ea:f1:a8:95:10:c8:e2:08:49:25:94:
         dd:50:b5:b1:f5:ec:53:1e:fa:b4:fa:be:a3:e1:69:7d:dc:95:
         b7:a5:33:42:97:ea:dd:ea:ef:3e:a3:79:18:93:5f:dc:7b:2d:
         f0:b8:4b:47:e2:20:7b:6a:4d:4b:38:76:93:d8:29:1d:c2:3b:
         a9:2a:08:9c:1f:f0:d9:32:7d:55:8c:15:22:5b:11:55:cd:c2:
         e8:11:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:45 2026 by rpki-client