This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File:                     W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier:          fONLkRZo+YBOwufU1t7e4m3l2I6WwcMjiW5dassP/bg=
Subject key identifier:   20:75:62:DB:58:F8:02:BA:F5:23:4C:0B:8D:39:3F:C4:40:7C:5F:1A
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer:       /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial:       03A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number:          0399
Signing time:             Sat 24 Jan 2026 23:56:24 +0000
Manifest this update:     Sat 24 Jan 2026 23:56:24 +0000
Manifest next update:     Sat 31 Jan 2026 23:56:24 +0000
Files and hashes:         1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: JkqP8c/0YeuJSCEjTyeFDXwSrGgKPrU72hRGts6I/ck=)
                          2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: gHbb1DedGEVNYDe8gPkrOnV+opTyWHpDa3aEA0RGNJI=)
                          3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: ERhWo0W4P0/i1i0Btr7k8IVeQA2SJMiw/31p7bzmBlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Validity
            Not Before: Jan 24 23:56:24 2026 GMT
            Not After : Jan 31 23:56:24 2026 GMT
        Subject: CN=69755c28-c1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:2e:17:6e:a9:f3:ec:91:33:3d:fd:57:23:
                    21:8a:ad:a5:c7:80:f0:70:a3:92:c3:18:4f:59:d3:
                    72:2a:62:14:cc:e7:cd:12:e0:37:13:19:d1:9b:f0:
                    96:d9:5c:72:20:e7:d6:10:0c:ae:e8:87:de:37:6a:
                    04:11:83:e2:68:bc:6f:33:57:80:6b:52:d3:fa:52:
                    53:91:09:ae:8d:27:cc:3d:f4:24:7e:fd:70:2f:b6:
                    47:cd:b3:b2:b9:91:26:4f:85:bd:b1:f1:9d:78:e2:
                    d9:6c:3c:78:f7:89:5d:b0:48:d5:fa:cc:95:0e:92:
                    24:8c:ad:a2:76:c8:2c:ad:89:6b:13:da:4e:fa:22:
                    a2:d2:50:d5:4a:cd:62:6a:fb:b7:7a:ee:a4:fd:cc:
                    43:88:6a:4e:2c:ee:72:a3:0d:da:a9:9d:5d:3c:7c:
                    32:ee:25:7e:e6:0a:b7:8a:2d:db:97:35:13:d7:a4:
                    eb:2b:26:63:b7:12:42:2c:2f:9f:44:23:75:0e:9c:
                    b2:2e:d1:2e:a3:f9:38:38:62:56:30:43:84:53:76:
                    78:76:a3:ef:dc:5e:88:6f:57:6e:47:6f:33:a4:b7:
                    df:df:fb:8e:52:b3:a3:82:09:fe:38:8f:a2:d9:91:
                    25:d8:4b:c2:2e:17:3e:f7:15:cb:9e:bb:26:2c:15:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:75:62:DB:58:F8:02:BA:F5:23:4C:0B:8D:39:3F:C4:40:7C:5F:1A
            X509v3 Authority Key Identifier:
                keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1f:34:2a:75:93:9f:9f:0b:42:38:b0:c5:ba:ea:01:fa:b1:
         48:f4:46:0c:28:a5:3c:ec:24:a2:38:0d:ee:68:27:a5:05:8b:
         84:61:e3:19:d3:09:3a:32:8b:2d:22:55:2f:3d:22:d2:e8:c6:
         ae:84:9e:76:4f:84:6c:e0:0c:58:df:92:af:dd:8d:b2:b9:a2:
         cc:59:fe:06:5f:76:97:c7:c4:aa:9a:2d:af:4e:01:a0:52:c5:
         58:8a:ed:ae:2a:46:78:6f:4b:fd:db:7f:f7:08:ed:a6:af:ce:
         4b:60:92:75:0f:85:ef:ed:ba:4f:d9:d3:4f:65:83:78:3f:83:
         29:b0:72:6c:b9:e0:fe:91:e3:30:11:70:5c:ce:6e:c1:c1:21:
         e7:28:46:5e:06:14:10:03:4c:18:1d:18:d9:ff:ea:62:1e:e4:
         f4:87:5d:40:aa:08:0a:4f:e5:f6:af:98:4d:b4:69:a1:a5:72:
         2f:12:c8:9d:07:bc:bc:1c:89:83:61:35:ea:07:ce:08:f6:e6:
         86:b3:92:f2:1f:41:91:1a:78:02:19:b3:50:92:cf:40:74:fd:
         77:55:42:de:de:a9:b3:34:8b:33:11:26:ae:29:3a:ed:4c:81:
         31:3f:87:36:25:e0:8d:dc:26:5f:e9:08:f4:97:55:e0:16:ab:
         fc:f5:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:57 2026 by rpki-client