This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File:                     NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier:          QUgQqg1Zk1EETGuuHE7Bw2hhU53+7FX7xv4ixaxnb+0=
Subject key identifier:   EF:98:BB:B9:69:1A:8E:FA:47:35:DC:0A:CB:65:B0:74:97:90:13:5E
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number:          05FA
Signing time:             Sat 24 Jan 2026 22:10:19 +0000
Manifest this update:     Sat 24 Jan 2026 22:10:19 +0000
Manifest next update:     Sat 31 Jan 2026 22:10:19 +0000
Files and hashes:         1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: nlbQQYHXEEzpcwl1AKc4Czhl212vyu7rxT21YIB7Dbg=)
                          2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Jan 24 22:10:19 2026 GMT
            Not After : Jan 31 22:10:19 2026 GMT
        Subject: CN=6975434b-f6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:a7:3a:0c:f3:3b:54:00:b0:08:aa:07:66:
                    09:76:d5:b3:23:73:5c:de:e7:9e:cb:d2:0b:7a:c6:
                    09:55:43:e9:64:83:40:69:4b:13:f4:43:47:55:d5:
                    ba:96:94:f9:b8:bc:04:b5:53:81:4d:98:70:09:15:
                    4c:24:cb:c7:46:a9:6a:07:25:2e:fd:d9:41:4f:68:
                    1c:86:be:65:37:bf:28:d4:68:e6:55:e2:d4:f2:85:
                    bb:12:a8:67:6f:31:f5:24:e4:be:28:8a:4d:ee:c8:
                    84:36:a9:ed:2d:cd:78:e4:73:4c:b1:97:87:af:61:
                    91:76:d3:39:ff:65:45:0a:b4:74:55:e3:1c:63:cc:
                    41:78:f2:74:02:de:0e:bd:0f:7d:37:82:01:51:5f:
                    43:50:a6:f7:fa:c1:75:d6:ff:39:45:63:6a:29:e2:
                    32:35:13:19:8c:59:76:a1:92:39:6e:5a:67:73:1e:
                    46:0b:dc:2f:ee:5e:dc:e4:5e:4c:d6:2f:3d:4e:b1:
                    26:8e:9e:ed:d3:21:a6:32:45:85:fa:46:28:a7:bc:
                    6c:69:dd:3c:53:c6:1f:18:cd:39:7f:fb:dd:93:07:
                    83:e8:6a:b5:70:f3:f3:fe:0c:97:47:91:00:a5:c8:
                    6d:5c:a8:86:1b:40:31:8d:11:42:b1:7b:89:ea:7a:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:98:BB:B9:69:1A:8E:FA:47:35:DC:0A:CB:65:B0:74:97:90:13:5E
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:be:d9:b3:45:dd:9e:b7:77:6b:0c:50:91:f2:b9:87:5d:24:
         e6:19:87:73:90:16:39:24:a9:5d:5e:49:46:e9:08:f9:07:bf:
         5e:da:34:52:1f:ac:b3:9b:46:c0:28:25:85:e1:89:93:de:d9:
         52:c8:5c:e7:67:d6:fa:08:75:d6:ad:b6:26:bd:7b:67:41:59:
         99:71:32:9b:e6:6e:df:1a:e1:65:8e:5b:f6:41:1a:c7:47:ae:
         ba:e4:f5:92:51:34:55:7e:75:08:2b:e7:72:9d:69:b5:9e:e9:
         cc:05:91:dd:16:c8:93:6e:ac:7b:ec:bc:30:25:ef:16:ce:64:
         bb:e7:28:57:65:86:82:3e:21:ed:bf:33:84:fa:e2:e9:20:58:
         b6:36:a4:1c:1a:26:b9:b7:6e:ff:4b:02:43:10:0d:87:3c:e2:
         22:94:b7:4d:d6:3f:3a:6e:3c:4a:1a:c7:33:e4:ad:1d:d1:73:
         17:99:1e:38:53:99:99:a4:68:7f:3c:5e:51:67:d1:d8:36:3c:
         3e:8a:86:43:2a:fe:77:64:ca:db:eb:40:1e:e7:b8:28:18:9c:
         dd:89:83:05:81:55:1c:18:4c:82:95:07:e9:41:bd:59:ce:52:
         de:4a:2e:82:ad:48:73:da:70:eb:11:aa:85:0d:da:ad:5b:db:
         9a:29:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:57 2026 by rpki-client