This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File:                     nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier:          NqCMY+n/1VkBV7XLH0/2K8RJ8IzqfVGoFmhZD9S3rYY=
Subject key identifier:   67:6F:B5:C8:57:D0:4E:E7:E6:A2:17:A7:69:E8:E4:98:D3:48:13:C9
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer:       /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial:       1E75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number:          1E66
Signing time:             Sat 24 Jan 2026 15:52:57 +0000
Manifest this update:     Sat 24 Jan 2026 15:52:57 +0000
Manifest next update:     Sat 31 Jan 2026 15:52:57 +0000
Files and hashes:         1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: E+0jgPz/2c3tqCKRKwSze6NrQxPLLHjFb4JK7qwgtIs=)
                          2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
                          rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7797 (0x1e75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
        Validity
            Not Before: Jan 24 15:52:57 2026 GMT
            Not After : Jan 31 15:52:57 2026 GMT
        Subject: CN=6974ead9-c017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:db:81:7f:e3:ae:84:cf:6b:15:2d:ce:31:
                    5e:39:e5:e7:8c:5e:df:59:19:a7:f3:2d:2e:16:83:
                    b4:0a:77:81:ca:6b:2c:9a:ee:aa:04:27:e1:c9:6f:
                    9e:e6:3e:3c:63:35:58:77:9e:d8:20:1b:4c:d0:33:
                    20:fd:9f:fb:c6:ba:e1:01:b7:53:0c:67:7d:c8:ba:
                    55:27:63:45:45:0f:6a:a2:0e:9a:73:1d:2e:1d:c9:
                    fb:ee:06:01:f9:62:6c:c3:cb:26:40:24:1b:61:e3:
                    6d:fb:9c:d0:c2:15:1a:44:fd:3b:70:37:dd:d5:8d:
                    6f:9f:14:c8:fd:bf:e7:80:a4:f1:f8:14:8f:ee:43:
                    89:37:89:d7:0a:34:59:82:fe:7f:17:17:87:3a:5e:
                    2a:2f:21:46:e1:cf:c4:45:bf:c4:1f:b3:6e:fd:52:
                    4e:1b:de:21:27:a6:a1:5f:79:3a:12:45:5d:a4:c5:
                    35:0f:c4:97:73:fd:b7:26:85:94:2b:11:c0:a7:2f:
                    f0:77:f4:dd:e3:64:a1:04:f9:b3:35:84:55:53:ba:
                    c5:cf:70:09:3c:27:da:55:49:63:de:e8:b5:99:02:
                    07:b9:1d:70:53:3f:44:20:03:76:c6:31:e8:65:ae:
                    28:ef:90:5a:44:a8:86:60:34:ec:66:88:3e:30:44:
                    45:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6F:B5:C8:57:D0:4E:E7:E6:A2:17:A7:69:E8:E4:98:D3:48:13:C9
            X509v3 Authority Key Identifier:
                keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a0:e4:01:2d:1a:d5:93:55:58:af:57:fc:a3:6e:0c:83:cf:
         26:87:67:73:58:83:30:62:a2:39:b0:26:a3:eb:7c:f0:7d:f7:
         f2:30:84:2d:47:e8:91:df:2c:ec:4f:09:21:cc:82:43:f6:ca:
         4d:bc:88:c4:b1:07:e8:0d:c5:92:cf:d0:2e:46:60:db:f7:13:
         cd:df:13:6f:98:f3:8d:fc:27:b9:88:b9:21:c9:b4:85:2c:2f:
         4a:a3:bd:f2:2f:39:ce:45:49:1a:8a:e5:93:1c:ea:ca:72:7e:
         71:0e:60:96:3f:28:f8:55:10:20:b1:91:d7:a0:8a:fd:87:26:
         62:d2:1b:62:bc:28:cf:85:aa:2b:1d:47:0f:3c:88:c7:d9:85:
         ff:87:09:23:e1:5e:d5:50:00:ec:05:6a:eb:f1:ae:55:4c:d2:
         eb:4d:93:c3:0f:69:9f:6c:77:2d:a2:ef:42:6d:9c:44:a1:0e:
         9c:2d:5a:62:91:d8:29:e3:36:ba:b2:5c:72:ec:b3:43:c4:6c:
         19:78:e5:e6:e2:d1:1e:83:4f:7e:45:19:6b:39:01:7e:6e:40:
         3c:91:c5:21:2d:6e:07:03:cd:a9:af:7f:97:a4:1b:35:1a:a1:
         1d:b1:92:00:c6:8c:b8:7b:5e:1e:a7:78:2e:a7:75:fe:7a:a2:
         72:66:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:19 2026 by rpki-client