This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
File:                     ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json)
Hash identifier:          D91FvnSHQuts/D6BCejBYMx+3oR8fGn0HZ/KdPysP5c=
Subject key identifier:   D0:6A:9B:08:6E:05:D1:E9:29:47:92:D3:9B:7A:64:6C:6B:7C:60:DA
Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
Certificate issuer:       /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
Manifest number:          71
Signing time:             Fri 23 Jan 2026 05:56:33 +0000
Manifest this update:     Fri 23 Jan 2026 05:56:33 +0000
Manifest next update:     Fri 30 Jan 2026 05:56:33 +0000
Files and hashes:         1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: C6/YJMCKm8yostlpSns6vOPt/8KZR87fCAqXIY+fKJg=)
                          2: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: i2BhMqJuRPJPw6EpQmAJmu0/MkHReXEBSLa+rZeCZ6I=)
                          3: C96601404B8D11F0B198C040C4F9AE02.roa (hash: T0dKTs8EMdDl2Inh3fwBdZE3Wa4Vfq9Mg4rvNVagedw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl
                          rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
        Validity
            Not Before: Jan 23 05:56:33 2026 GMT
            Not After : Jan 30 05:56:33 2026 GMT
        Subject: CN=69730d91-d53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:b8:67:52:01:b5:35:69:ee:e3:04:e8:bb:
                    d7:09:d4:6a:68:4e:a7:08:f1:db:2d:f7:2c:aa:f9:
                    66:bd:3e:82:20:0d:6e:ad:ca:d9:83:c7:38:64:ad:
                    4b:60:e2:3a:1f:8b:45:a8:8d:01:a0:62:fc:c7:41:
                    76:14:61:bf:1d:ae:bf:6f:ef:6c:f8:eb:ba:e0:e6:
                    92:3f:1d:6a:d5:47:06:94:57:45:b7:9b:ce:5d:b2:
                    00:fc:69:e7:88:43:9e:e4:f6:01:98:7f:39:c8:e1:
                    33:58:e4:02:3b:13:6d:30:6d:2e:95:6d:aa:9d:1f:
                    13:0d:ab:05:23:49:04:22:6c:78:3f:6e:6c:9c:7e:
                    4d:40:5f:b4:0e:f2:b9:9c:ee:d1:d1:56:4a:29:e1:
                    a1:e1:bf:24:38:2f:12:51:fe:94:04:1b:53:2c:ad:
                    87:17:ad:e0:17:45:ce:21:c2:6b:78:f6:b0:88:39:
                    01:5c:f2:60:e3:78:d7:a6:78:e8:15:a6:40:07:13:
                    06:a4:60:ae:76:dc:1e:e9:ee:41:be:32:27:16:ce:
                    19:9d:cf:c4:7a:dc:54:51:52:70:0b:0f:8b:28:a4:
                    7e:cd:6d:83:7c:3e:83:13:f0:cb:71:81:3b:d8:5e:
                    3c:9b:b4:2e:2b:8f:1c:a8:e6:a9:b5:c3:51:4e:9a:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6A:9B:08:6E:05:D1:E9:29:47:92:D3:9B:7A:64:6C:6B:7C:60:DA
            X509v3 Authority Key Identifier:
                keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:e3:a4:6a:6f:a4:63:49:85:ef:47:21:9d:91:1f:49:65:
         59:02:6d:14:5a:10:0b:b7:27:6a:5e:6d:a1:11:9f:1f:84:70:
         8e:d5:e4:f7:4b:e6:78:62:71:fb:3a:a5:1a:a9:d1:a1:29:94:
         8f:bd:95:79:fc:91:06:96:d2:99:83:e4:a1:f9:58:01:ec:23:
         a9:5b:26:eb:9f:72:a2:0a:05:58:de:26:d6:1d:bb:16:8c:4e:
         53:fb:8c:6a:e4:e5:bc:84:69:48:6c:69:f7:15:7c:ab:ac:a2:
         4c:93:40:32:88:eb:f9:db:e2:53:e5:c0:3d:c6:97:2b:bd:0f:
         11:b6:f6:3d:07:97:bc:0a:ca:5b:94:5e:f1:ee:36:20:63:7b:
         57:0c:0e:61:db:ed:c7:74:73:51:a3:ff:5c:82:05:bf:39:16:
         cf:14:1f:68:3a:a4:e8:a6:31:f2:2d:3a:9b:26:1d:ea:c3:6e:
         1e:3e:aa:2d:b3:c1:0f:03:c7:8a:3d:cd:f0:a5:7d:e8:09:f2:
         b7:93:dc:6a:67:82:33:c2:af:7c:7b:09:10:f8:c9:dd:29:6f:
         38:16:f2:3f:4f:9c:ec:05:ac:20:c0:a5:12:c5:7e:76:e0:34:
         72:2d:d7:a9:ff:58:e0:a3:ca:5f:24:d4:bc:ae:1f:50:04:e0:
         50:3c:78:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:58 2026 by rpki-client