This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
File:                     w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft (raw, json)
Hash identifier:          5K1gPLbu5btYCKhgQq4G7sNUjn/R4a3t0FLP5oEQ+64=
Subject key identifier:   5A:87:7F:EE:F8:F2:E0:73:3F:16:83:2D:DD:D2:E6:0E:53:98:87:BD
Authority key identifier: C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
Certificate issuer:       /CN=A9116297/serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
Manifest number:          22
Signing time:             Fri 23 Jan 2026 06:46:55 +0000
Manifest this update:     Fri 23 Jan 2026 06:46:55 +0000
Manifest next update:     Fri 30 Jan 2026 06:46:55 +0000
Files and hashes:         1: w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl (hash: Qt1gxX3BOwZ+9hZK2h89El7eBrWc2EaNESF4lv4W5YE=)
                          2: 217645DAC5CC11F0B5963A5AC4F9AE02.roa (hash: RXMfaFzW/9ZHGfERyZfeYe4UQqDUFD2avsOBKDr4G80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
        Validity
            Not Before: Jan 23 06:46:55 2026 GMT
            Not After : Jan 30 06:46:55 2026 GMT
        Subject: CN=6973195f-54d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:c7:b2:a4:16:24:e9:88:fd:90:e7:fc:a8:
                    6e:6b:27:af:bd:16:62:6c:af:a2:bf:f0:63:44:09:
                    f9:19:1f:5e:dd:90:00:8e:c1:f9:4b:ae:38:c7:4b:
                    85:40:55:26:fa:e1:d1:08:0f:fa:ee:69:40:3d:88:
                    26:8e:65:7b:87:56:45:45:c0:40:5a:ef:2b:57:40:
                    90:8b:ce:cd:09:e8:01:1f:6c:b4:0d:2b:94:1a:aa:
                    22:c1:2d:bc:26:01:6e:56:e9:a6:18:46:3c:27:dc:
                    c5:f8:74:02:e7:97:39:c2:10:c8:66:80:0b:53:7e:
                    d6:65:53:f2:3e:1c:1d:db:50:0a:ed:98:26:bc:24:
                    b2:4a:5b:72:c8:8f:fd:fe:c0:66:d1:4c:6a:e8:fa:
                    81:04:ef:09:ec:57:ad:7b:6f:f6:d2:18:ba:70:27:
                    6c:11:1c:44:c3:b8:86:ed:09:4b:e0:ee:c5:c6:31:
                    ad:80:b4:72:f4:be:10:86:09:75:6d:86:24:c2:6a:
                    fe:66:be:74:30:e9:c5:44:f7:8d:90:f4:f4:c5:6c:
                    e0:cf:3a:6b:28:67:2d:58:ad:51:34:ff:10:21:7e:
                    1b:9f:a9:10:aa:d9:6e:fe:78:8c:47:b6:41:fe:75:
                    a7:84:4b:15:30:6d:ff:dd:f0:ac:44:ad:f7:68:42:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:7F:EE:F8:F2:E0:73:3F:16:83:2D:DD:D2:E6:0E:53:98:87:BD
            X509v3 Authority Key Identifier:
                keyid:C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:26:1f:c7:07:2c:cd:22:e0:21:42:3a:e8:03:d5:74:3f:7c:
         4d:ba:7f:68:f8:c1:66:21:22:61:b5:35:ae:50:6a:9d:f6:5e:
         63:cc:d5:58:cd:22:24:e3:0e:33:b9:f8:a9:bc:4c:a0:3d:da:
         46:62:1f:ba:33:78:1f:e6:e2:c7:b8:d3:13:8a:22:25:41:58:
         0a:c0:51:19:09:db:00:17:9f:03:91:0d:10:62:61:64:8c:f4:
         91:c7:12:62:9a:53:03:1d:5a:97:6d:f2:bb:74:f8:84:c4:e6:
         b5:8c:41:a8:b1:fb:06:81:e9:41:92:89:b0:45:13:73:32:f5:
         88:0c:fd:b0:f5:fd:58:6f:78:1e:0d:d8:15:b4:e9:fa:36:df:
         76:11:d6:25:14:c8:28:ad:1a:e6:a5:b8:3a:a1:3e:ef:6e:de:
         88:9f:d0:98:e0:3b:98:60:02:1c:fc:5e:d0:e5:49:e1:36:8e:
         5b:54:6f:b0:74:c1:7f:fc:67:2f:4f:d6:05:8f:0f:53:d0:b6:
         61:30:fc:82:b3:f9:52:8b:b1:c6:bf:0d:0b:9a:c2:02:6e:34:
         35:68:f2:69:f1:7f:62:a5:58:8e:6d:4f:e5:08:56:d3:f0:b5:
         60:1a:fc:8f:69:d1:c0:51:32:94:78:9c:d7:df:c5:e5:a6:b9:
         f1:2d:e7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:09:20 2026 by rpki-client