This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
File:                     NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json)
Hash identifier:          NacmHj8cHhRc4G7ghJS7Xa86D7ALBP9MEh5mX4et/8w=
Subject key identifier:   7B:24:C5:8D:F6:C2:78:69:AC:2C:00:00:34:76:C8:65:4D:90:61:68
Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78
Certificate issuer:       /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978
Certificate serial:       26D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
Manifest number:          26C6
Signing time:             Sat 24 Jan 2026 15:31:43 +0000
Manifest this update:     Sat 24 Jan 2026 15:31:42 +0000
Manifest next update:     Sat 31 Jan 2026 15:31:42 +0000
Files and hashes:         1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: z5PZxqeRE3N1k6J5mH8oO38IT+y9mgxcDFYua/phCCc=)
                          2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl
                          rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9945 (0x26d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978
        Validity
            Not Before: Jan 24 15:31:42 2026 GMT
            Not After : Jan 31 15:31:42 2026 GMT
        Subject: CN=6974e5df-87e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:60:2c:89:00:90:4e:8a:cb:9a:87:de:11:
                    af:10:3a:51:13:29:7c:8f:08:56:b7:7c:9b:8f:19:
                    1f:c3:0d:5c:7e:fc:57:60:cb:18:d7:7f:74:7d:38:
                    34:62:c9:06:b6:2f:7e:b1:6a:99:67:48:1e:8b:40:
                    66:eb:65:63:e4:ef:5f:12:3b:67:fc:8c:8b:4b:c7:
                    df:0b:d1:34:a1:21:c4:ec:43:03:0c:6d:a8:8e:15:
                    e7:aa:aa:51:06:9c:33:20:ac:13:79:60:a6:d3:ca:
                    54:05:b5:e0:39:06:1f:65:e5:b5:66:20:c5:6f:cd:
                    24:f4:e5:44:35:e5:82:35:86:bc:db:18:47:37:81:
                    a6:0a:66:09:82:cc:1f:70:62:9b:63:b5:8f:a2:5c:
                    79:37:d6:0c:41:e4:e4:0c:bd:b3:36:f9:75:64:b6:
                    74:af:f3:06:e6:5a:b5:95:1e:b3:10:76:d5:05:bb:
                    92:af:05:51:a1:24:0b:59:a1:79:06:0e:4f:ab:3e:
                    9f:eb:3b:e9:4a:54:da:02:ec:8b:7b:d1:b8:b7:da:
                    f8:25:a8:0e:c2:c5:8b:47:e0:ec:71:f9:59:5e:d8:
                    85:90:24:d6:0a:78:57:57:78:6a:8a:e6:41:a8:8f:
                    95:d3:e6:be:a8:fa:72:40:e7:e0:f4:97:4f:23:da:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:C5:8D:F6:C2:78:69:AC:2C:00:00:34:76:C8:65:4D:90:61:68
            X509v3 Authority Key Identifier:
                keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:88:95:7b:84:17:d8:6a:48:ff:5c:04:94:56:d8:20:c3:4b:
         dc:cb:83:47:ea:7d:a8:82:c6:67:a2:69:22:a4:c0:28:62:c1:
         71:1f:3e:80:23:48:c5:80:60:06:0f:12:5b:77:80:cf:72:20:
         23:a2:75:1d:7f:88:5d:c7:18:f9:31:ce:59:27:37:a1:68:91:
         5b:54:74:3f:62:8a:60:f4:d2:99:61:cf:f5:9b:17:d5:1b:56:
         3c:18:de:8a:e0:c8:9a:4c:f0:81:67:06:7e:de:2e:28:68:26:
         86:57:88:45:ef:ed:39:9c:1c:a5:d6:35:bd:5c:c8:f7:98:1f:
         31:d1:65:0f:5a:e7:65:87:6a:ce:31:6e:1e:1c:cd:74:c0:b6:
         38:1a:26:7d:a1:7a:fb:4f:f3:ef:c0:ea:f6:f8:2d:c4:9b:c2:
         11:9d:02:4d:5e:9e:b0:19:bd:2a:5d:1d:95:35:62:1e:9d:89:
         4d:56:92:3a:e8:db:87:0a:aa:29:be:ac:c0:be:1e:8b:4e:03:
         ee:ca:6a:a0:92:83:94:af:ba:b4:9b:c2:23:df:75:66:d0:47:
         bb:02:bb:a4:1e:a4:8c:12:5b:2e:80:60:3b:5a:73:c8:b3:83:
         8b:f5:33:23:ac:65:b0:b2:63:2f:e1:fa:df:5f:28:11:06:ca:
         67:23:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:53 2026 by rpki-client