This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
File:                     w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json)
Hash identifier:          DFvnLItCHprrM7R8Itw21ZbEu7QAnXpy7JDwDyBl1Hg=
Subject key identifier:   E3:5A:AC:B0:B7:C7:74:12:44:58:93:44:C5:AE:E7:86:C1:0E:74:58
Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
Certificate issuer:       /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Certificate serial:       05E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
Manifest number:          05D4
Signing time:             Mon 26 Jan 2026 22:16:10 +0000
Manifest this update:     Mon 26 Jan 2026 22:16:10 +0000
Manifest next update:     Mon 02 Feb 2026 22:16:10 +0000
Files and hashes:         1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: X7GxegHodbPpBeyBOY7xQnU6oFoOs9V0hFxwbIPGxgQ=)
                          2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: 2bH75nk9O6TD/rf7czJlYhCGMNmtoX73i8QmFGzj+S0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl
                          rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 22:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
        Validity
            Not Before: Jan 26 22:16:10 2026 GMT
            Not After : Feb  2 22:16:10 2026 GMT
        Subject: CN=6977e7aa-3191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:46:8e:eb:e4:53:7a:68:13:87:cc:98:ba:
                    66:a6:a3:1f:83:61:b3:f1:f3:e4:33:bb:1f:11:c7:
                    1d:11:89:7b:71:48:f7:25:0f:39:9a:93:ba:eb:56:
                    4d:59:08:86:be:0d:e7:1e:db:e3:18:e8:85:df:f5:
                    fa:84:4f:8b:32:22:a2:3a:23:7c:4a:6b:3b:55:14:
                    65:ed:13:0c:43:7e:f4:12:b3:d5:13:d1:f2:f2:fd:
                    ab:f5:8e:aa:a0:0e:e3:ad:f0:5c:eb:fa:ca:57:2f:
                    ff:ac:56:71:56:2a:2c:93:f1:13:71:29:88:43:be:
                    36:04:7a:c7:98:8e:90:b8:21:8f:40:8e:d6:06:a8:
                    4c:a3:46:f3:c1:42:bf:6a:0f:ec:d8:a9:2e:6b:3b:
                    bc:af:8a:12:f7:eb:1a:78:33:59:38:07:47:45:07:
                    d7:ac:a6:3e:b4:53:0b:c0:7f:ab:8e:89:48:af:ed:
                    a2:97:29:79:20:18:1e:e7:65:93:6f:b4:bc:be:02:
                    f6:c1:d9:fc:b0:59:90:b7:93:3b:87:4d:2f:a5:24:
                    56:0b:96:50:7f:71:dc:fc:61:de:d4:b2:55:95:a9:
                    da:27:24:50:03:8e:4a:02:20:9f:b1:98:93:36:0d:
                    9c:88:8e:75:79:b1:8a:3e:9b:fa:30:2b:aa:42:22:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5A:AC:B0:B7:C7:74:12:44:58:93:44:C5:AE:E7:86:C1:0E:74:58
            X509v3 Authority Key Identifier:
                keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:20:50:a8:bf:02:6d:ea:19:e4:9e:93:16:9d:07:37:60:fe:
         f8:20:cf:d2:4b:6b:4e:d6:e2:84:ca:2a:13:ea:d6:36:f1:83:
         54:c7:71:99:70:9e:2e:bf:e7:cd:5f:eb:c8:93:89:44:5d:64:
         7b:33:df:9b:17:ed:14:8d:65:50:c9:e7:63:da:de:20:a1:b6:
         c8:1f:32:6c:50:31:99:ea:45:22:6f:3e:c4:01:5f:28:26:2a:
         51:19:d0:9e:9d:a0:77:63:a2:57:c9:61:3b:f6:27:f9:97:f5:
         f6:1e:c9:aa:37:7e:2a:6f:bb:cc:e7:ee:bc:ea:25:a7:bf:a6:
         4e:20:84:8a:78:f5:51:b4:79:e2:35:5a:c2:ca:64:d0:48:5c:
         c7:8f:42:ed:ec:2c:ea:c2:1f:cd:de:53:e4:16:2e:98:32:86:
         70:68:cd:07:e7:95:56:37:4f:37:ee:df:8f:25:e7:3d:27:14:
         b5:ac:ef:80:e4:10:36:69:5f:09:37:b8:c6:5f:1f:0a:02:d0:
         15:43:1b:22:eb:ec:c3:61:8b:3b:95:8b:e7:3e:d9:ee:38:ed:
         96:ed:c7:f0:77:89:a3:bb:bd:e1:51:12:9b:59:de:74:b4:29:
         e0:4a:54:89:a2:ee:07:25:2f:7b:f6:94:ae:fe:2a:2b:31:3d:
         19:69:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 10:00:36 2026 by rpki-client