This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
File:                     wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json)
Hash identifier:          faFaVdr7z9fqocbE4N9qJSu//Bi2GMr7LxLZmM3Alkk=
Subject key identifier:   E1:6D:E5:12:79:63:FA:67:D1:26:D1:14:54:4C:4C:02:91:7A:B6:D5
Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE
Certificate issuer:       /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE
Certificate serial:       0E08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
Manifest number:          0DFF
Signing time:             Sat 10 Jan 2026 17:30:25 +0000
Manifest this update:     Sat 10 Jan 2026 17:30:24 +0000
Manifest next update:     Sat 17 Jan 2026 17:30:24 +0000
Files and hashes:         1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: 7uz3Hl+6VWpu98uWb2JM7NEWuwymzMCFx0sJKdVM08U=)
                          2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: 7fP+JRoC8BLIz3dypzljentRpLc6i2GDCzDHkh90QUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl
                          rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3592 (0xe08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE
        Validity
            Not Before: Jan 10 17:30:24 2026 GMT
            Not After : Jan 17 17:30:24 2026 GMT
        Subject: CN=69628cb1-4686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:b8:a9:fc:61:58:cd:f5:9c:62:b0:e1:2b:
                    66:33:de:36:d5:b0:8f:ec:e2:50:96:b5:0b:78:8d:
                    44:93:d9:0d:a9:e6:94:4f:34:f7:be:d7:e7:b2:cd:
                    8f:ee:3f:33:50:e8:33:ea:0d:3d:10:6b:f9:50:41:
                    8c:55:c4:85:b6:12:99:44:be:d3:82:51:e1:49:9c:
                    f2:13:7d:02:99:6d:c9:ed:5b:b9:78:49:19:57:15:
                    36:26:be:a7:e2:54:f3:50:e2:d0:a5:f0:0c:bf:b6:
                    c8:54:19:e5:68:6e:57:40:1a:bb:56:43:50:93:84:
                    20:bf:6f:93:f4:05:96:9a:ab:00:87:a8:a5:b7:7b:
                    cb:d3:e6:8f:20:23:8a:33:2d:8d:cc:97:bc:f1:b1:
                    10:93:1c:96:51:86:8e:06:53:f3:54:05:f9:90:80:
                    c0:44:43:bc:00:03:b4:d7:82:7f:ec:cc:ed:65:2a:
                    cd:b8:1b:ba:3e:ff:93:63:6c:82:72:11:4d:03:d2:
                    0f:99:fb:e8:5d:88:9d:67:c0:b5:8b:34:b5:a3:73:
                    64:47:15:0b:72:39:e4:03:9e:bb:73:db:64:e3:fe:
                    be:46:a9:74:2f:ec:29:f8:df:fb:d3:d1:21:db:d8:
                    09:71:2b:dc:bc:20:a7:b9:49:7c:96:96:4a:a3:1b:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6D:E5:12:79:63:FA:67:D1:26:D1:14:54:4C:4C:02:91:7A:B6:D5
            X509v3 Authority Key Identifier:
                keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:d6:29:05:21:9e:fe:90:5d:8c:d4:ed:89:b5:17:7c:40:
         e1:30:e1:10:25:ef:c4:3f:bb:e4:66:aa:5d:e8:d9:45:a7:16:
         eb:e8:0a:f1:84:16:a4:81:a2:47:19:e5:c0:80:9a:f4:2a:34:
         60:d2:86:d4:55:d8:f3:4d:08:db:4f:82:05:0e:ac:73:e6:05:
         b9:f9:f2:85:bd:1e:61:70:13:ef:90:0d:28:f1:ef:d0:2d:47:
         cd:01:8a:31:ce:43:f5:88:c7:2d:44:dc:70:50:2c:1f:bd:3d:
         97:98:bd:14:11:0d:15:c4:f1:3d:8a:f8:f4:d6:7b:0f:6d:4f:
         2c:1c:b1:53:6c:e7:13:80:54:82:f2:e6:25:9f:e6:b8:b2:b3:
         fe:d9:ed:3e:79:4c:ab:24:7c:43:f2:b9:0e:2b:98:24:26:8d:
         e0:41:f3:11:67:2a:cc:ba:b1:1a:c5:cf:7d:00:8d:ef:f9:0f:
         5f:e7:f3:9a:82:83:88:ba:f4:3d:72:7c:53:28:39:ab:26:bb:
         68:73:77:8f:6f:b9:4e:dd:57:e6:99:c6:c8:60:ab:af:61:9c:
         de:b1:52:05:2f:be:e9:d8:fd:8c:12:4f:ff:17:7d:19:29:ab:
         b6:c2:7d:10:1c:50:88:0a:96:0e:02:cb:d4:d7:39:69:4c:24:
         aa:74:e7:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3
MUI3RkM5QkUwHhcNMjYwMTEwMTczMDI0WhcNMjYwMTE3MTczMDI0WjAYMRYwFAYD
VQQDDA02OTYyOGNiMS00Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA59K4qfxhWM31nGKw4StmM9421bCP7OJQlrULeI1Ek9kNqeaUTzT3vtfnss2P
7j8zUOgz6g09EGv5UEGMVcSFthKZRL7TglHhSZzyE30CmW3J7Vu5eEkZVxU2Jr6n
4lTzUOLQpfAMv7bIVBnlaG5XQBq7VkNQk4Qgv2+T9AWWmqsAh6ilt3vL0+aPICOK
My2NzJe88bEQkxyWUYaOBlPzVAX5kIDAREO8AAO014J/7MztZSrNuBu6Pv+TY2yC
chFNA9IPmfvoXYidZ8C1izS1o3NkRxULcjnkA567c9tk4/6+Rql0L+wp+N/709Eh
29gJcSvcvCCnuUl8lpZKoxvvzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFt5RJ5
Y/pn0SbRFFRMTAKRerbVMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1
QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF
STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+kNYpBSGe/pBdjNTtibUXfEDhMOEQJe/EP7vkZqpd6NlFpxbr6Arx
hBakgaJHGeXAgJr0KjRg0obUVdjzTQjbT4IFDqxz5gW5+fKFvR5hcBPvkA0o8e/Q
LUfNAYoxzkP1iMctRNxwUCwfvT2XmL0UEQ0VxPE9ivj01nsPbU8sHLFTbOcTgFSC
8uYln+a4srP+2e0+eUyrJHxD8rkOK5gkJo3gQfMRZyrMurEaxc99AI3v+Q9f5/Oa
goOIuvQ9cnxTKDmrJrtoc3ePb7lO3VfmmcbIYKuvYZzesVIFL77p2P2MEk//F30Z
Kau2wn0QHFCICpYOAsvU1zlpTCSqdOdY
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:21:23 2026 by rpki-client