This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
File:                     w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json)
Hash identifier:          n5qBpwVKQAUeVRFDZSRVVPVIWURKLgidlGQA0HkwW8I=
Subject key identifier:   26:9C:E3:FC:BB:90:78:90:36:41:9D:E8:D6:77:31:12:46:75:F3:38
Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
Certificate issuer:       /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Certificate serial:       05E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
Manifest number:          05D3
Signing time:             Sat 24 Jan 2026 22:18:22 +0000
Manifest this update:     Sat 24 Jan 2026 22:18:22 +0000
Manifest next update:     Sat 31 Jan 2026 22:18:22 +0000
Files and hashes:         1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: DIBrK/P89kq5IF2D/E6yyIKZTvj25uMmCN7phE5+vG8=)
                          2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: 2bH75nk9O6TD/rf7czJlYhCGMNmtoX73i8QmFGzj+S0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl
                          rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
        Validity
            Not Before: Jan 24 22:18:22 2026 GMT
            Not After : Jan 31 22:18:22 2026 GMT
        Subject: CN=6975452e-9e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a2:41:02:46:f9:ef:48:bf:f2:3d:21:87:16:
                    f2:b9:f7:b4:70:39:9e:d5:51:3e:2c:77:a4:18:7b:
                    5e:0b:9f:b8:b4:cc:66:2e:8a:9b:62:19:2c:27:09:
                    9d:85:e7:73:15:de:d7:ee:68:dc:b4:66:bc:40:9e:
                    5e:dd:f2:6f:dd:ca:3d:b4:77:35:37:96:52:b1:e8:
                    bc:2d:c6:d4:25:0b:45:ec:ba:58:5c:cf:e7:3a:e0:
                    e8:95:85:25:25:66:15:80:3d:7a:c7:af:3c:e0:27:
                    d2:8a:70:7e:65:52:ff:52:57:f1:7c:24:bf:4d:d9:
                    ae:65:79:c6:e1:a8:aa:46:03:1e:bb:4b:cc:6f:3d:
                    f5:f5:73:3d:70:2a:b1:40:5c:e7:90:b8:1d:f1:8d:
                    1a:ef:fe:22:58:1e:6f:8d:6e:c3:82:0f:62:e4:d6:
                    c6:88:93:77:de:a2:12:b7:da:c1:a5:e2:92:11:86:
                    85:21:12:ef:68:e8:0b:b1:b2:81:5c:27:38:0a:2e:
                    81:ab:7a:61:7e:25:9e:7d:d8:bd:51:cd:37:3a:e3:
                    1d:af:36:fe:38:36:0b:30:fd:02:a9:2e:fb:9f:20:
                    4b:08:65:2a:33:a4:46:16:ba:de:23:de:8c:62:48:
                    77:fc:71:bf:90:10:14:75:6f:22:40:de:01:44:a0:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9C:E3:FC:BB:90:78:90:36:41:9D:E8:D6:77:31:12:46:75:F3:38
            X509v3 Authority Key Identifier:
                keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:32:ec:4f:0b:4e:45:77:29:b5:aa:fb:8a:2e:aa:85:6f:
         f4:16:4a:8c:15:7a:98:d5:e4:33:d0:5d:de:8d:48:f7:8d:0b:
         69:f9:d0:88:6c:b0:38:72:17:3c:33:0a:d5:89:cf:23:30:85:
         42:5c:42:5b:89:49:26:0e:89:6f:96:2d:73:5c:49:9e:f4:01:
         89:1e:09:04:64:b1:bc:9b:2b:95:e4:75:13:aa:79:55:ff:bb:
         5e:9a:56:d5:53:4e:ad:94:d9:90:bd:35:6f:93:00:67:33:74:
         18:ac:d8:d8:4e:d4:56:59:3c:85:9d:86:4e:60:d4:c1:89:4d:
         f4:e3:bc:f8:f3:26:eb:88:eb:6a:84:83:48:e7:ac:79:c7:c4:
         af:72:d9:0f:1e:0b:ca:b1:89:1c:86:ab:31:44:81:07:c2:9d:
         ab:e7:da:56:df:38:04:91:a4:03:48:fd:c2:a2:7b:65:c7:0d:
         a6:94:a3:df:c1:25:d5:87:63:ae:aa:c4:2c:02:b8:ce:06:c7:
         30:c5:29:29:6b:24:fe:22:ed:70:52:61:8b:f0:5d:7e:e5:ad:
         88:da:96:e1:1b:cb:11:96:45:da:bd:54:c4:d6:53:3f:fc:17:
         58:48:e8:98:b3:e9:38:91:c5:93:b5:26:76:26:6c:10:53:d4:
         8a:c1:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:55:04 2026 by rpki-client