This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
File:                     w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft (raw, json)
Hash identifier:          sd1xE9G1HBcTaRYPATWPyGxrAcDWEB6bR5gqO2/wMqQ=
Subject key identifier:   5A:CB:21:FF:63:9A:4E:8A:7F:81:8B:9D:2F:92:F5:A1:91:20:C5:14
Authority key identifier: C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
Certificate issuer:       /CN=A9116297/serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
Manifest number:          0B
Signing time:             Tue 09 Dec 2025 05:47:53 +0000
Manifest this update:     Tue 09 Dec 2025 05:47:53 +0000
Manifest next update:     Tue 16 Dec 2025 05:47:53 +0000
Files and hashes:         1: w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl (hash: 7FB7Z8c+Awp2+XUUiNLa8v29o23wOhWjcCwYMuLHvY8=)
                          2: 217645DAC5CC11F0B5963A5AC4F9AE02.roa (hash: RXMfaFzW/9ZHGfERyZfeYe4UQqDUFD2avsOBKDr4G80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 05:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
        Validity
            Not Before: Dec  9 05:47:53 2025 GMT
            Not After : Dec 16 05:47:53 2025 GMT
        Subject: CN=6937b809-497a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:37:53:b4:5e:cb:c3:f6:5c:c8:3a:ed:fd:
                    c4:8e:8d:e7:85:70:d6:fd:87:ad:d5:92:05:cb:70:
                    fa:23:ae:c5:60:f8:f1:6c:3f:65:a0:4a:5a:d6:c1:
                    f0:67:27:35:08:f6:38:f0:ee:98:bc:aa:ad:1e:a4:
                    5a:af:f9:fb:1e:43:06:1e:df:30:f1:2d:b7:30:72:
                    96:49:64:63:6e:62:37:69:e0:b4:4c:c7:f7:ff:dc:
                    87:a8:22:89:16:2a:c2:cd:74:0e:b3:44:17:1b:81:
                    90:ca:a2:a4:2d:ae:ba:e7:be:71:00:63:49:8b:f7:
                    de:2a:c4:d6:41:73:9a:8a:e4:3b:18:24:7b:39:54:
                    9e:0a:07:3e:32:8d:dd:ec:d4:fb:28:89:1d:7e:b2:
                    5d:d6:6d:07:f8:5b:fc:47:f9:77:51:cb:29:27:ae:
                    1b:a1:81:00:0c:18:41:48:13:af:86:06:02:6a:d4:
                    d1:9d:f8:7c:25:ec:67:db:dd:f8:c9:75:d1:36:86:
                    81:be:c1:c8:e7:61:60:9a:f0:cf:a8:9d:0a:c3:ea:
                    74:8a:97:49:13:3c:4a:35:3d:4c:d6:e7:98:0f:7f:
                    b7:06:c4:7a:9d:f6:58:9d:01:ac:b5:c7:08:12:d7:
                    27:c0:0e:11:bd:2f:92:81:dc:1c:6e:9b:0a:33:1f:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CB:21:FF:63:9A:4E:8A:7F:81:8B:9D:2F:92:F5:A1:91:20:C5:14
            X509v3 Authority Key Identifier:
                keyid:C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:f0:7a:0d:a2:b4:e5:3e:d1:21:0a:e5:a5:f6:69:9d:17:
         55:22:64:42:a9:98:7a:1a:0e:e3:e0:c2:6a:13:93:96:80:ae:
         01:44:cc:c5:2f:37:f3:4b:d6:c4:83:33:df:a5:f0:df:e9:3a:
         6e:08:02:65:6f:18:4c:c4:a8:34:c0:24:cc:78:cc:06:4e:e3:
         a6:22:e8:56:9b:84:9c:b8:c8:cd:55:be:53:b8:a4:ea:0d:98:
         41:12:af:cb:a9:f6:2f:e8:f3:ca:c7:5b:69:d2:78:72:06:4d:
         30:1e:a6:57:a0:86:7b:5e:6f:96:36:5b:92:bb:f9:33:38:58:
         32:ed:6a:6d:e1:a2:d9:9b:22:a7:81:7a:55:65:1f:b6:ac:89:
         00:fb:93:9b:42:23:33:8b:ea:ed:54:32:fe:92:24:6c:ca:ff:
         ab:43:42:d9:e2:57:91:d5:4a:88:1f:4b:1b:68:31:2d:9d:dc:
         82:c7:81:b0:fe:72:b4:d6:4b:32:c2:dc:51:8d:ec:18:d2:45:
         d0:a0:48:81:7a:93:a7:bc:d7:b2:fd:18:54:57:90:10:7b:9a:
         d2:28:3b:7b:da:ff:f4:c4:a0:20:b9:3c:c3:0b:15:a2:94:ae:
         02:bb:12:40:f4:91:da:0c:fd:0a:d8:53:a0:7e:47:2f:a4:c5:
         59:91:dd:2a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjI5NzExMC8GA1UEBRMoQzNBOUUzMkExMjk5RjJDMkM5MjAzNTY1REFDNTk5OTEz
OTcyMzJCRDAeFw0yNTEyMDkwNTQ3NTNaFw0yNTEyMTYwNTQ3NTNaMBgxFjAUBgNV
BAMTDTY5MzdiODA5LTQ5N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/FjdTtF7Lw/ZcyDrt/cSOjeeFcNb9h63VkgXLcPojrsVg+PFsP2WgSlrWwfBn
JzUI9jjw7pi8qq0epFqv+fseQwYe3zDxLbcwcpZJZGNuYjdp4LRMx/f/3IeoIokW
KsLNdA6zRBcbgZDKoqQtrrrnvnEAY0mL994qxNZBc5qK5DsYJHs5VJ4KBz4yjd3s
1PsoiR1+sl3WbQf4W/xH+XdRyyknrhuhgQAMGEFIE6+GBgJq1NGd+Hwl7Gfb3fjJ
ddE2hoG+wcjnYWCa8M+onQrD6nSKl0kTPEo1PUzW55gPf7cGxHqd9lidAay1xwgS
1yfADhG9L5KB3BxumwozH0UFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWssh/2Oa
Top/gYudL5L1oZEgxRQwHwYDVR0jBBgwFoAUw6njKhKZ8sLJIDVl2sWZkTlyMr0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Mjk3LzczNEM0M0IwQzVD
QjExRjA5NjY2QkM1OEM0RjlBRTAyL3c2bmpLaEtaOHNMSklEVmwyc1daa1RseU1y
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdzZuaktoS1o4c0xKSURWbDJzV1prVGx5TXIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
Mjk3LzczNEM0M0IwQzVDQjExRjA5NjY2QkM1OEM0RjlBRTAyL3c2bmpLaEtaOHNM
SklEVmwyc1daa1RseU1yMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHpf8HoNorTlPtEhCuWl9mmdF1UiZEKpmHoaDuPgwmoTk5aArgFEzMUv
N/NL1sSDM9+l8N/pOm4IAmVvGEzEqDTAJMx4zAZO46Yi6FabhJy4yM1VvlO4pOoN
mEESr8up9i/o88rHW2nSeHIGTTAepleghnteb5Y2W5K7+TM4WDLtam3hotmbIqeB
elVlH7asiQD7k5tCIzOL6u1UMv6SJGzK/6tDQtniV5HVSogfSxtoMS2d3ILHgbD+
crTWSzLC3FGN7BjSRdCgSIF6k6e817L9GFRXkBB7mtIoO3va//TEoCC5PMMLFaKU
rgK7EkD0kdoM/QrYU6B+Ry+kxVmR3So=
-----END CERTIFICATE-----
Generated at Wed Dec 10 05:27:31 2025 by rpki-client