This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
File:                     nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json)
Hash identifier:          5YdmWajaTP6RU2AF+ltlOXygQ2lEgQCmy0MH10kqkQE=
Subject key identifier:   15:77:A3:65:02:F8:02:B9:76:AC:15:75:4C:D6:6F:73:CE:01:91:06
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Certificate issuer:       /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial:       2B0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
Manifest number:          2ACB
Signing time:             Sat 24 Jan 2026 15:25:17 +0000
Manifest this update:     Sat 24 Jan 2026 15:25:17 +0000
Manifest next update:     Sat 31 Jan 2026 15:25:17 +0000
Files and hashes:         1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: 0QzKXHTBAGcYLfBazrA+iHgg6o0lvpEh3phxpyg6yL4=)
                          2: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: foVnGp/jqxcrwmjuMi9JIuJxuKPFhTJXYXUK/5x/qrY=)
                          3: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Ey/Kmg1iRRIttYY5811s3SHGsRnkg9ROhR5r3BngPPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
                          rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11019 (0x2b0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
        Validity
            Not Before: Jan 24 15:25:17 2026 GMT
            Not After : Jan 31 15:25:17 2026 GMT
        Subject: CN=6974e45d-665b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:b7:a4:9b:59:9c:2e:a6:87:a3:70:c9:a0:
                    b4:dd:16:6f:79:cb:38:fd:d4:03:5c:8d:29:d4:85:
                    9a:9d:48:63:65:58:7b:92:a3:12:c7:14:ad:13:a1:
                    aa:b7:a7:b4:99:44:75:df:d6:a2:ad:54:7d:a0:fa:
                    08:ac:fc:78:2c:96:ed:c0:05:cc:f7:e1:0f:8f:1e:
                    87:7f:ad:27:71:15:4d:24:a1:47:a5:a6:35:a3:34:
                    33:46:48:2f:72:66:58:32:0b:83:97:59:cf:bf:75:
                    b9:0c:6a:39:d2:34:2b:00:82:e1:94:7c:83:e6:33:
                    4d:b7:44:50:61:ae:c6:8d:f2:31:23:34:0d:24:70:
                    94:d9:f9:79:97:82:61:69:ab:f8:1d:1c:cd:8d:7a:
                    7e:7f:3e:97:ad:66:63:95:74:f7:0e:02:02:f5:59:
                    b6:cd:07:a4:54:cf:cd:f8:e6:d0:d2:53:1a:3c:69:
                    9a:ec:97:a8:a9:cc:da:79:bf:35:8a:e6:1e:c2:aa:
                    8d:db:fc:02:ba:ab:54:81:dc:ec:c0:af:fa:d2:ea:
                    69:54:6b:79:f0:7a:bb:93:e7:aa:ba:d9:0d:69:01:
                    0a:68:21:f0:cf:72:ae:b2:38:26:08:68:da:67:fd:
                    f0:1a:fb:bd:1a:11:28:ef:e7:c9:0d:34:dd:b3:71:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:A3:65:02:F8:02:B9:76:AC:15:75:4C:D6:6F:73:CE:01:91:06
            X509v3 Authority Key Identifier:
                keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:17:09:6e:68:dd:25:90:10:14:4f:8b:cb:e4:a5:a0:b3:1f:
         3d:aa:f7:67:fa:4d:d3:6b:77:85:c2:85:1e:63:a1:23:7e:d6:
         ee:75:5e:7f:eb:fe:10:c6:06:a6:32:a9:6a:4d:43:79:74:ab:
         42:e7:ed:d7:f1:85:9c:dd:d5:1f:78:f4:af:12:e0:73:ab:17:
         6a:0f:40:6c:1f:0c:90:6b:23:ef:3f:06:b5:98:46:5f:6f:ac:
         46:ef:b8:25:d8:23:95:c2:15:ee:48:4f:52:af:61:68:8c:6a:
         1d:2e:de:d7:3a:90:7b:01:21:c8:85:90:04:5b:88:58:05:bb:
         af:71:50:68:f2:4d:ff:4c:5e:7a:c1:66:9b:fa:b8:ee:7b:18:
         33:92:a8:16:1d:90:d6:eb:19:51:6b:a7:f8:89:c9:04:8b:8e:
         f4:e5:61:bc:05:67:68:96:8e:13:02:55:03:ab:61:1e:20:d5:
         1d:83:75:a8:c0:2c:f8:17:3b:42:2d:92:e5:2a:ed:84:0e:2a:
         3f:ad:6f:86:d6:c4:7e:6d:75:85:36:f4:76:79:55:20:a7:c9:
         1e:58:0b:c5:88:ed:03:7c:b8:4b:19:bc:33:b7:b4:9b:03:c9:
         be:99:eb:e3:06:96:13:49:c9:58:40:59:c2:7a:05:15:47:e8:
         a2:64:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:04 2026 by rpki-client