This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File:                     w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier:          ZG84xSPhAbg3/bnYmeYbr/QHZ04Lf+6jLT5yUPw0x74=
Subject key identifier:   F7:69:D1:EF:8B:CE:1E:C5:9E:0B:7A:CC:11:52:A1:EF:F3:07:CE:18
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer:       /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial:       1A3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number:          1A33
Signing time:             Sat 24 Jan 2026 16:08:08 +0000
Manifest this update:     Sat 24 Jan 2026 16:08:07 +0000
Manifest next update:     Sat 31 Jan 2026 16:08:07 +0000
Files and hashes:         1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: EDXDvkc2Ra6wqOq92fPPppCEz2sSQj5JzUkIV2DYDZU=)
                          2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
                          rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6718 (0x1a3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
        Validity
            Not Before: Jan 24 16:08:07 2026 GMT
            Not After : Jan 31 16:08:07 2026 GMT
        Subject: CN=6974ee68-4ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:aa:64:e3:b8:6a:3c:70:b2:ae:59:55:f6:
                    90:79:06:53:2c:f3:1b:25:fd:b3:a7:ba:e6:cb:d5:
                    68:db:55:e9:b2:48:0d:3b:6d:d9:2d:26:7d:31:e6:
                    d1:90:34:20:7c:9e:2e:77:c6:08:02:25:e9:30:41:
                    a4:bb:56:9c:52:2e:39:ba:52:ef:4f:8b:94:8f:db:
                    28:33:27:33:f2:d3:c0:89:20:4d:f6:65:33:72:b0:
                    35:a7:37:81:67:fe:ef:c4:b6:f2:fa:21:df:d1:0a:
                    df:33:13:21:6e:c6:91:3b:64:dd:c4:10:18:35:3a:
                    ce:51:73:29:d6:83:b5:20:07:bc:04:ee:44:6c:2a:
                    e6:57:1d:18:8f:c9:19:25:86:e1:67:c8:c6:6a:11:
                    97:55:7d:99:d0:00:ec:51:9f:e1:bb:c4:4a:1e:19:
                    6f:ae:d2:6c:fc:f0:9e:fe:ca:c5:95:bf:f2:c7:61:
                    29:c5:68:1c:cd:f4:59:e3:44:d0:3f:98:c2:85:9f:
                    0e:33:01:07:0e:0b:db:c6:79:97:e5:ca:7f:ea:5b:
                    57:2c:b6:52:70:ab:e5:27:6b:51:88:e4:7c:49:3d:
                    e5:1a:60:df:2f:9b:71:6d:b5:b4:69:17:98:d5:95:
                    37:b0:d7:d1:4b:5b:dc:46:ff:53:02:8d:81:01:5e:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:69:D1:EF:8B:CE:1E:C5:9E:0B:7A:CC:11:52:A1:EF:F3:07:CE:18
            X509v3 Authority Key Identifier:
                keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:21:4d:c3:cd:82:db:29:a5:dc:6c:93:3e:6b:7b:1c:0e:55:
         71:7b:89:76:fd:37:49:8a:18:96:f1:d7:bd:bf:f7:bb:98:66:
         9b:ca:c5:e7:9f:d2:e0:13:de:30:a9:ab:04:6b:5d:a5:3a:15:
         9c:1e:db:8d:a4:57:5a:15:91:54:63:b3:f4:8b:7b:60:7f:2e:
         75:cd:5f:a0:6e:34:1e:2d:da:77:69:a9:79:56:b5:89:f2:44:
         2d:64:17:46:3d:3e:bc:d2:1f:1e:1d:04:45:60:be:cf:08:ff:
         f4:41:99:bf:17:6f:35:0f:28:40:d7:3c:3b:0d:34:67:c1:51:
         df:d8:25:1f:29:4a:aa:fa:01:ad:2d:04:d4:48:93:a3:b6:c9:
         ab:7f:ef:f1:31:3a:6d:3c:f1:29:dd:d6:cf:89:c9:71:74:25:
         da:7c:bf:d8:7c:3e:5c:e1:29:57:4f:ad:9e:9e:18:ba:03:1f:
         e2:db:e0:b7:68:30:24:7a:0a:6e:32:b4:44:49:87:a3:da:91:
         3d:95:22:5b:d5:c5:31:dc:be:c6:ab:2f:00:32:bf:72:43:97:
         a2:8e:3c:c4:07:c0:ff:3d:19:fe:3f:ed:f5:44:c2:43:70:2e:
         c5:6b:06:a8:a0:b1:83:12:32:0e:5c:75:bd:ab:70:43:4c:8b:
         33:cb:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:33 2026 by rpki-client