This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
File:                     nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json)
Hash identifier:          Nid7zcwvf2BRIAq32Kqhbs8eG/1J8MbBUgoP4z5uHkM=
Subject key identifier:   58:89:E9:78:E9:F9:E7:47:52:EB:0D:1A:27:B1:2B:F8:20:CC:D3:DC
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Certificate issuer:       /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial:       0C7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
Manifest number:          0C6B
Signing time:             Sat 10 Jan 2026 18:11:12 +0000
Manifest this update:     Sat 10 Jan 2026 18:11:11 +0000
Manifest next update:     Sat 17 Jan 2026 18:11:11 +0000
Files and hashes:         1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: NiFXmESUEq5iGq00sgPfPngsceGr6zXiHjo7ex7EDpY=)
                          2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: EiyCu0vojKly9zo+I5SeQzaBIubHaZ4bVOiCN+YJMlU=)
                          3: 702B683202E911F097290F2EC4F9AE02.roa (hash: sacDAKMV0IlhxL+E1+gGomun+TIZdZwc4g1OZ/geqzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 18:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3195 (0xc7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Validity
            Not Before: Jan 10 18:11:11 2026 GMT
            Not After : Jan 17 18:11:11 2026 GMT
        Subject: CN=6962963f-1f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:48:6f:4e:cb:4a:3f:78:0e:29:87:79:71:
                    93:f8:d0:bd:17:04:58:3b:27:8c:83:5d:69:5b:aa:
                    1f:6b:85:95:fb:c9:77:fd:e6:26:cb:b7:aa:f4:82:
                    8d:86:61:ac:57:55:da:9a:a0:bc:be:62:7b:00:be:
                    f7:a8:12:3b:e0:5f:fa:86:4b:37:8b:6c:23:bd:23:
                    64:05:b1:99:78:01:0a:10:82:00:e1:32:c7:38:35:
                    99:64:53:f8:f0:e1:51:d7:52:09:41:30:e6:f3:13:
                    53:b9:d5:f5:cb:09:5f:16:d7:3f:35:3d:41:05:24:
                    da:2e:9b:52:46:2e:c9:ab:3f:4f:9a:93:3e:44:78:
                    43:30:08:18:c4:96:23:80:dd:7a:05:7c:5c:2e:50:
                    92:28:fe:e3:9e:13:5c:3c:9b:ee:b8:7a:b1:a7:84:
                    21:67:32:01:b6:53:30:18:d3:b9:bf:df:e3:88:5b:
                    5e:4e:b6:b8:72:c1:2a:40:61:ff:a0:ef:52:3e:7f:
                    1c:55:59:04:b3:2c:4c:14:69:ba:6f:4c:65:cd:3a:
                    4b:b6:59:5b:e6:f1:ed:96:71:5b:ff:3f:5a:f7:23:
                    b2:6a:6b:2f:db:96:78:7e:85:86:86:2f:18:ce:60:
                    91:ab:1e:b4:02:b2:6b:f9:d3:99:fd:41:39:e9:14:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:89:E9:78:E9:F9:E7:47:52:EB:0D:1A:27:B1:2B:F8:20:CC:D3:DC
            X509v3 Authority Key Identifier:
                keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fa:d2:04:c7:77:22:6c:d9:7a:76:1f:b2:d3:cd:47:39:d3:
         d3:84:1b:8c:49:46:2c:b2:7a:15:31:d1:66:56:b9:49:78:d8:
         0a:36:45:fa:43:9a:02:31:99:94:01:a1:71:c4:48:71:a9:42:
         39:04:24:ef:d7:03:14:8b:1d:29:ea:cc:ee:8e:fe:f2:45:20:
         e3:2c:3f:17:ad:45:f4:34:6a:cf:1c:97:b3:67:18:1b:e2:ef:
         6d:8f:2f:e7:30:c4:8c:8a:23:3e:c6:6e:db:7f:37:39:21:9f:
         86:36:ed:4e:ca:06:6c:91:9c:9d:07:4d:73:33:ee:5e:a6:b1:
         55:16:75:f5:a4:55:7a:f0:54:5c:81:12:ec:3a:18:ff:6d:d6:
         45:fc:bf:c0:e1:f5:20:86:9f:0e:9f:6d:6d:db:4b:58:11:6f:
         d9:a6:2c:1b:ed:97:76:11:78:38:8a:3f:c1:36:f8:af:6c:d1:
         76:43:cc:e8:93:2d:1e:5c:00:5d:c8:ee:b4:bc:17:b8:4f:6a:
         fa:32:e4:9e:24:ec:94:61:12:76:6b:77:6e:69:35:6c:7d:b5:
         5a:78:c9:58:52:02:c7:85:13:d7:e9:22:fc:ef:f7:90:ee:e6:
         45:30:79:c3:cc:56:f3:96:6f:8d:c5:2f:57:42:55:58:5d:5c:
         1b:37:04:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:49:14 2026 by rpki-client