This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
File:                     NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json)
Hash identifier:          BXLuxF6P12Ro8xcdUSmmOHCJt+H9iW4HWLsYXFb0hrk=
Subject key identifier:   D7:36:06:AE:6F:E0:9C:DE:42:9D:5E:85:28:9D:EE:D3:37:94:1A:01
Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
Certificate issuer:       /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
Manifest number:          11
Signing time:             Fri 23 Jan 2026 07:01:54 +0000
Manifest this update:     Fri 23 Jan 2026 07:01:53 +0000
Manifest next update:     Fri 30 Jan 2026 07:01:53 +0000
Files and hashes:         1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: 3lUqsy6Npj/bUL7FzmK9dB2U+ArxvVuA/MQE+E2q2Dw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
                          rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
        Validity
            Not Before: Jan 23 07:01:53 2026 GMT
            Not After : Jan 30 07:01:53 2026 GMT
        Subject: CN=69731ce2-8d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:ba:0a:d9:bb:58:bd:59:97:4e:f9:77:e6:
                    63:d3:39:9b:7a:d5:06:18:8e:ae:00:49:53:34:48:
                    6f:de:e8:20:13:2b:66:47:a8:ad:7c:49:1d:04:c6:
                    64:a5:81:9f:aa:46:b8:c9:7a:e6:ae:b4:83:5f:f5:
                    95:df:80:07:00:50:42:4e:bb:ad:85:14:d3:6c:a3:
                    f8:8d:15:97:93:6b:e0:ff:77:2a:27:da:71:ef:57:
                    cd:0d:d3:53:6b:6e:ce:e4:e7:85:25:c7:e2:cd:a2:
                    03:ae:71:eb:3b:b1:13:b5:e3:18:b1:cb:2f:6a:0a:
                    30:7d:57:c5:a1:90:cb:ac:67:b7:2f:25:53:1a:93:
                    d3:ea:50:b8:46:f0:ca:ed:ab:a1:fe:72:64:fb:3a:
                    9d:80:a9:e9:bb:c8:ff:af:f4:42:23:36:b3:e6:01:
                    68:b0:e6:1e:49:cd:95:70:7d:1d:8a:a8:69:5b:f1:
                    74:d4:51:be:a2:5b:af:4b:3b:41:e1:80:38:5c:aa:
                    58:03:ac:be:24:92:cc:b9:65:e1:24:36:a4:9d:96:
                    52:43:c3:bf:e8:3e:e9:84:46:f2:ee:7a:cc:f2:df:
                    d6:a0:aa:43:38:8b:4e:eb:fe:4c:a5:59:45:1c:4b:
                    a4:d6:e9:48:ca:44:6c:fe:8f:a1:cb:11:d7:42:1c:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:36:06:AE:6F:E0:9C:DE:42:9D:5E:85:28:9D:EE:D3:37:94:1A:01
            X509v3 Authority Key Identifier:
                keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a2:f7:21:d7:3b:43:26:6c:e6:dd:04:b8:88:c2:f3:a1:a2:
         32:72:04:aa:70:22:5a:c9:fb:27:66:b4:20:83:8c:95:14:df:
         c8:af:bc:8d:67:dc:0b:db:e4:20:e6:bd:cc:aa:1a:f1:48:d6:
         29:35:43:f8:40:54:03:f4:49:6b:e5:5a:22:cc:00:a5:1b:4a:
         dc:6d:8b:ea:98:5b:8f:8b:07:c3:3f:02:a4:d4:99:0a:d7:c8:
         67:66:d4:fb:fe:fc:c4:c2:cd:55:f5:00:ff:f1:b4:81:32:b7:
         ce:9c:29:45:95:1d:37:23:cf:97:d7:46:3c:b4:90:73:b1:9b:
         3d:3f:a9:49:b8:9b:a4:ab:08:d1:1c:c3:54:63:ea:a8:22:0c:
         20:ff:85:c8:6a:06:39:8f:88:7c:03:b2:9b:34:3e:6f:50:6a:
         71:b9:19:86:4f:97:a2:09:8b:c0:bc:0c:c3:75:ea:5b:b0:31:
         82:95:f4:f7:54:0d:33:70:76:6a:8a:a8:63:d9:21:75:3b:a3:
         d5:d9:9d:dc:b8:b7:29:60:4b:40:c5:14:f2:fd:9f:ca:26:22:
         47:61:d5:a0:66:8b:3b:cd:bc:5d:32:d5:be:21:93:fd:20:5e:
         20:b4:8e:45:d6:ad:93:70:46:3a:8e:6d:00:49:58:a8:5d:12:
         00:6f:2f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:29 2026 by rpki-client