This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File:                     Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier:          lEkpi4hMDgdaToNJ2fXAGWsy1oRF7Glmo+F1FFRo3UA=
Subject key identifier:   E2:95:41:CA:3A:6A:67:13:BB:6E:56:17:26:8C:2A:D8:CB:0F:C2:B2
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer:       /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number:          F3
Signing time:             Fri 23 Jan 2026 04:27:31 +0000
Manifest this update:     Fri 23 Jan 2026 04:27:30 +0000
Manifest next update:     Fri 30 Jan 2026 04:27:30 +0000
Files and hashes:         1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: 1as8/XkoH3AYN8xNABnP5rzr+vfN14d0IDGP6r94ZJk=)
                          2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
        Validity
            Not Before: Jan 23 04:27:30 2026 GMT
            Not After : Jan 30 04:27:30 2026 GMT
        Subject: CN=6972f8b2-7290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:ca:eb:9e:55:9c:df:13:c5:3c:7e:8c:58:
                    ed:62:3b:fd:4f:20:6a:09:65:d5:60:57:36:b2:43:
                    6c:53:97:7c:8b:8c:d4:e7:09:96:40:bd:eb:80:f6:
                    60:a1:f4:88:ac:e6:64:c9:83:0b:f2:23:59:65:5c:
                    0e:36:de:f9:17:79:68:3f:56:b0:49:0d:aa:9b:64:
                    52:d6:d6:68:6b:68:33:9f:a7:95:b6:7a:c7:43:79:
                    7e:8f:ac:50:b7:63:2b:a3:69:85:79:b8:a2:5b:82:
                    b6:85:35:6b:90:c8:43:d5:9b:01:5f:20:9a:52:5a:
                    9f:1b:54:16:f4:64:5b:8b:1b:6e:46:04:92:27:f0:
                    34:27:09:e5:01:7d:67:dc:76:c5:d4:cc:ba:3e:0f:
                    ac:68:1e:85:f5:92:e3:a4:6c:f1:c6:a8:b5:7b:08:
                    3e:e2:c1:e9:85:9c:59:a1:e8:ac:56:80:85:66:54:
                    b4:3c:a6:b7:15:32:6f:ce:5c:4a:3e:62:48:59:f1:
                    78:26:92:cc:5f:be:3e:38:d0:bc:80:cc:85:98:a3:
                    eb:1b:50:4a:53:7c:75:88:20:bd:86:34:2c:26:56:
                    8a:1b:db:74:42:2b:8f:55:22:61:7c:8c:69:98:b7:
                    36:bf:7c:1b:9e:07:83:00:1a:23:e5:ce:c8:dc:ca:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:95:41:CA:3A:6A:67:13:BB:6E:56:17:26:8C:2A:D8:CB:0F:C2:B2
            X509v3 Authority Key Identifier:
                keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:0e:72:b5:19:b7:f7:c2:d2:ea:46:99:2a:50:df:d9:e9:
         fd:6b:f0:d6:8e:57:46:7c:3a:7a:22:44:76:96:ed:ed:64:08:
         87:81:25:d1:ca:6b:9b:08:68:ee:99:2b:28:da:f4:c2:5b:ad:
         2b:81:a4:e5:7a:62:64:1e:ae:0b:f7:66:21:47:8c:88:d7:68:
         4c:50:67:f7:e5:b6:50:e2:65:9a:4d:48:1b:80:0a:1d:6b:f9:
         18:60:44:0d:2e:7e:cd:d4:fa:7b:4b:45:cb:0c:5b:95:0e:60:
         66:b3:07:fa:6c:98:98:ce:c5:d6:15:dc:99:d0:a5:f4:1c:bd:
         55:24:ba:a6:27:25:c4:02:da:8b:b3:d0:6b:f7:54:f4:f5:28:
         55:b1:85:3d:06:88:ca:3d:32:15:0f:a7:a1:4e:f3:78:37:d5:
         e1:34:0b:36:5c:af:67:d1:64:08:08:7c:38:29:37:26:72:2e:
         4f:c7:4b:b7:b7:3c:c0:87:14:b2:e3:3b:c4:35:18:8a:fb:75:
         72:db:a5:e9:f0:e9:7a:62:83:1c:56:63:d6:c8:3d:6c:45:e6:
         3f:d2:1e:43:91:4e:80:10:17:4f:3a:fc:92:04:9c:40:8f:75:
         75:23:70:e9:ba:23:72:ce:e5:64:0a:27:da:de:5e:18:26:fb:
         75:b3:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:28 2026 by rpki-client