This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
File:                     w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft (raw, json)
Hash identifier:          dYqeJnz6nXzv2zYw2aOqTlqX5pdl6dmwuz+vbu9n6fc=
Subject key identifier:   BA:AD:84:C3:2D:CB:AF:D7:CE:59:F9:94:B7:E4:85:C2:01:19:D3:0C
Authority key identifier: C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
Certificate issuer:       /CN=A9116297/serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
Manifest number:          09
Signing time:             Fri 05 Dec 2025 05:51:14 +0000
Manifest this update:     Fri 05 Dec 2025 05:51:13 +0000
Manifest next update:     Fri 12 Dec 2025 05:51:13 +0000
Files and hashes:         1: w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl (hash: QtKXk5uaxX11XUW94LawihMwFdlu8Vr+TBRsw+NahRA=)
                          2: 217645DAC5CC11F0B5963A5AC4F9AE02.roa (hash: RXMfaFzW/9ZHGfERyZfeYe4UQqDUFD2avsOBKDr4G80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
        Validity
            Not Before: Dec  5 05:51:13 2025 GMT
            Not After : Dec 12 05:51:13 2025 GMT
        Subject: CN=693272d2-cc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:67:3d:16:52:fb:70:12:d3:72:fe:94:cf:
                    ef:ec:2a:97:07:17:9b:f5:80:9e:77:d3:3a:9e:de:
                    76:72:2f:e8:b2:7c:85:09:36:5a:27:9b:e7:d0:b4:
                    29:dc:99:c5:55:93:72:f2:bd:d6:9a:39:d5:f7:e0:
                    c6:09:3a:66:6f:8b:10:54:f5:a6:74:fe:98:b0:e5:
                    6f:a2:80:80:17:77:64:8d:31:3e:e6:76:74:a9:31:
                    bc:21:dd:83:e2:a2:7a:25:b4:6c:45:9e:aa:70:d1:
                    f1:d1:a7:03:f5:8c:f2:5c:dd:e2:af:bb:e2:c4:75:
                    d9:c0:0a:df:1f:39:dd:9b:39:51:d9:21:35:93:21:
                    fc:87:ab:28:b3:8e:ea:ee:77:f1:20:ad:12:97:8c:
                    f1:de:e5:fb:1b:59:4f:8c:e1:e8:41:70:53:07:46:
                    03:6c:db:58:e6:c4:1c:af:64:bf:63:8c:24:ae:f1:
                    56:04:69:0c:14:5a:24:3f:8d:7c:46:98:7a:b7:a0:
                    eb:12:c1:70:c3:dd:46:8d:64:05:cf:fb:4b:60:33:
                    4d:14:69:d5:4d:c9:86:1d:f2:89:b2:ec:ac:d1:97:
                    af:e9:2b:3b:2e:87:5e:28:53:d7:4d:4e:2f:dd:26:
                    26:19:28:bd:9a:36:fc:d4:a5:b9:68:a3:17:cc:d7:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:84:C3:2D:CB:AF:D7:CE:59:F9:94:B7:E4:85:C2:01:19:D3:0C
            X509v3 Authority Key Identifier:
                keyid:C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:2a:d9:ec:91:b0:f7:68:4a:4f:07:ce:1b:a1:c1:07:ee:
         8d:5f:d3:fa:1b:3f:99:de:61:92:08:6a:fa:b0:37:e9:15:5b:
         06:f2:dc:98:da:db:45:17:eb:fd:60:c7:30:99:e6:4b:31:b5:
         18:ec:95:73:10:83:23:a5:9c:34:6c:b9:7f:c9:6c:bc:b8:88:
         31:a0:ab:97:56:c1:ad:b1:1a:97:52:cb:cc:44:9b:19:4c:ac:
         75:7a:b7:fa:fa:37:09:93:1b:e9:7e:ca:bf:67:11:ce:a9:65:
         4c:4e:be:fa:e4:d2:b7:64:2b:11:b4:b9:3e:26:f7:5f:21:4e:
         3f:65:81:3f:8b:9c:23:91:23:70:22:85:52:0c:ab:e7:2b:5a:
         47:dc:58:36:b4:4c:74:ea:ba:d8:10:9f:5c:bb:d4:79:61:e9:
         5f:6f:87:db:06:40:61:6b:cd:85:96:de:d6:05:d0:ba:e9:dd:
         d1:38:4f:f4:00:d8:49:56:21:11:f3:99:7c:3d:20:df:58:7e:
         3e:63:bb:ed:63:da:55:58:7a:e5:b7:5f:e2:83:ac:d5:08:30:
         0d:e5:f3:af:ab:42:95:55:27:54:9a:b8:e3:78:95:de:07:06:
         5c:77:8a:0f:43:ed:5a:90:c5:c6:d0:ed:bc:af:f5:bb:52:55:
         5c:ce:12:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:52:13 2025 by rpki-client