This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File:                     1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier:          RKjhnb2U71IWIZw8i9OBliklyNeBW+d2kb+Y5Vi1gnQ=
Subject key identifier:   90:26:75:36:11:7A:9A:84:77:EE:6B:DC:E2:5F:9D:80:52:A8:3D:C5
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer:       /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial:       092C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number:          090A
Signing time:             Sat 24 Jan 2026 19:44:49 +0000
Manifest this update:     Sat 24 Jan 2026 19:44:49 +0000
Manifest next update:     Sat 31 Jan 2026 19:44:49 +0000
Files and hashes:         1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: W/F9Ux7ZKjBJ3LFR5E/2a3nYueLjWKxpxMbQmcyWkYY=)
                          2: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=)
                          3: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=)
                          4: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cndw19Zty56t27dvRNtU0GtVAt1H5pGdcRIcu3Z2IPk=)
                          5: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=)
                          6: F814A546C01411EA912AC365C4F9AE02.roa (hash: VCA7ATdoKb3bc3VrnHWvqH8lcWu2vv1KBpe9G26/lek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
                          rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
        Validity
            Not Before: Jan 24 19:44:49 2026 GMT
            Not After : Jan 31 19:44:49 2026 GMT
        Subject: CN=69752131-52df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:40:84:c9:73:5c:b0:48:81:b5:d1:8a:62:
                    14:c3:10:3f:1f:35:65:20:87:10:eb:eb:94:b1:92:
                    2a:38:ec:53:e8:c6:46:b7:41:4a:c8:7e:ab:6b:b7:
                    e5:8c:f0:ea:ee:41:67:a5:06:86:6f:ca:b7:12:73:
                    1b:38:03:18:ac:9a:21:46:7f:e2:5a:62:3e:20:34:
                    66:d8:26:53:fd:37:8a:3a:86:b3:bc:14:b3:a1:bc:
                    63:bb:c1:f1:3a:f3:13:73:34:55:9e:14:b3:9a:c4:
                    53:af:e7:d8:98:5b:2b:d0:0d:aa:cd:8d:4a:8e:af:
                    ab:1e:34:91:e6:44:0d:f6:77:ee:44:f1:fb:12:1d:
                    65:c2:e6:02:44:60:03:fb:2e:e5:55:f5:e2:c2:4d:
                    0b:87:99:1e:8e:c4:64:ba:67:a9:24:57:7e:dc:06:
                    c1:59:a5:20:e4:35:dd:b5:e2:23:2d:f3:f9:cb:81:
                    38:d8:34:cc:90:1e:62:d9:bc:f1:58:71:d1:c3:53:
                    40:5a:29:d0:80:48:0e:2d:72:8b:cb:1c:b7:4e:46:
                    12:a5:04:13:b2:13:df:df:f8:b5:20:17:17:6c:ad:
                    cb:cc:2f:6a:8c:3d:79:aa:7f:3e:9f:b7:50:c1:2e:
                    2f:b4:a6:e9:eb:82:0d:f9:23:0d:92:1c:eb:09:63:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:26:75:36:11:7A:9A:84:77:EE:6B:DC:E2:5F:9D:80:52:A8:3D:C5
            X509v3 Authority Key Identifier:
                keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:35:0f:00:38:f2:6e:ee:78:a5:23:0e:cc:68:83:40:24:2b:
         bd:a9:90:56:c6:c4:2e:38:84:6f:d0:58:ce:ba:81:d6:44:b0:
         22:6f:ce:a8:54:f1:70:aa:8d:ae:6d:1d:87:a0:a2:b8:56:7a:
         68:b8:c4:1b:70:5b:dd:1c:a3:63:1d:80:56:a0:93:d5:87:57:
         01:05:64:96:69:95:3a:f3:b5:17:69:de:41:49:6d:6d:a9:3f:
         06:0a:cd:43:b1:6a:a8:44:62:da:f9:b4:13:76:eb:65:af:d1:
         1e:62:ac:c1:aa:71:f3:f8:99:09:9f:78:04:40:a5:35:6c:eb:
         8d:be:4b:90:8a:61:e1:3b:3d:f5:aa:7b:22:ee:5d:70:e4:00:
         d1:b3:4b:ed:c3:bf:48:2d:88:7c:fd:7f:ca:05:b7:51:c6:84:
         ee:30:3c:2d:54:a5:41:55:2a:e8:d8:cc:ad:d5:eb:44:2d:9b:
         0b:98:3d:aa:23:c2:ed:6d:af:bb:90:6b:d6:1f:2c:03:54:f3:
         05:4b:85:cd:80:65:93:e1:f5:0c:f7:a9:92:74:dc:94:c3:94:
         f7:80:84:9f:83:9c:bf:1f:5e:b8:ac:8f:40:8e:d2:da:d2:fa:
         c1:3f:4b:9a:37:92:c0:e6:ba:36:da:46:02:19:c2:3f:15:d2:
         5b:56:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:21 2026 by rpki-client