This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File:                     Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier:          C9O6aNXpjbACzO2HzB3dGKVFlWJ6e4qG+/YmDk4Oj0E=
Subject key identifier:   D3:18:18:69:EB:83:7F:24:E5:AE:01:A0:88:4E:B8:60:F2:FC:3B:29
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer:       /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial:       27B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number:          27B9
Signing time:             Sat 24 Jan 2026 15:29:28 +0000
Manifest this update:     Sat 24 Jan 2026 15:29:27 +0000
Manifest next update:     Sat 31 Jan 2026 15:29:27 +0000
Files and hashes:         1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: jcv4SM+AcpbF1ooycaBNuNq5pzWQfHlSDK77AIODHM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10169 (0x27b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
        Validity
            Not Before: Jan 24 15:29:27 2026 GMT
            Not After : Jan 31 15:29:27 2026 GMT
        Subject: CN=6974e558-8de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:f2:7a:8c:8e:48:dd:9a:8f:21:27:d2:a9:
                    83:36:f1:65:6c:63:6a:93:59:72:ba:7d:f7:28:59:
                    d3:91:5f:83:a1:20:f0:a4:07:45:1e:c3:de:d2:95:
                    a1:57:70:8c:b0:b3:68:b4:f4:03:58:d4:55:4e:71:
                    e5:20:bf:4d:96:84:ad:a4:bd:b2:7f:db:63:33:3d:
                    7f:4c:32:d8:1e:31:78:b8:5d:f7:4d:88:a0:f4:66:
                    69:44:03:a4:8a:9a:92:9a:7c:b7:e7:df:b2:49:62:
                    d2:65:2f:1e:64:c3:83:b9:9b:07:8b:88:6a:41:71:
                    d2:e7:80:f3:df:1d:cf:e6:e0:10:43:69:04:e1:71:
                    7c:82:31:0d:37:a9:83:02:03:bb:f7:43:43:8e:54:
                    17:c1:ea:b0:c0:f9:c6:d3:fe:d6:8e:00:0d:35:56:
                    91:84:2a:cc:24:c6:04:76:30:61:11:4f:13:87:7e:
                    68:90:f8:f0:0f:8b:9d:96:e3:17:d9:6e:73:fc:47:
                    2a:e9:12:e9:9b:29:e4:ed:af:8e:a1:c4:5a:a6:a7:
                    13:3a:55:53:4c:29:fc:16:8a:65:00:4d:d6:12:8e:
                    78:78:9c:d5:1a:07:a8:e9:a7:2e:29:5a:ae:43:f4:
                    05:66:8f:62:2f:6d:7d:64:e9:ff:b7:97:0e:58:cc:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:18:18:69:EB:83:7F:24:E5:AE:01:A0:88:4E:B8:60:F2:FC:3B:29
            X509v3 Authority Key Identifier:
                keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:80:88:0b:41:68:df:f2:1b:79:11:50:91:31:b1:8e:ce:f2:
         a9:f4:90:20:46:68:6d:b0:a5:03:d8:e4:0d:57:2a:a3:b2:e1:
         32:ec:28:c7:38:13:66:39:e9:6f:f3:c0:2c:63:e1:5c:2a:7f:
         95:e6:04:bb:b5:62:b0:f5:27:0e:b3:27:83:a2:a2:8c:4d:5f:
         57:bb:b5:46:5e:75:b6:b8:88:35:7d:91:74:6a:22:a9:b0:62:
         d8:dc:94:63:1b:35:19:a7:6a:06:d9:10:e7:24:f5:96:21:fc:
         70:5c:ad:01:84:ed:5e:9b:3f:5b:3d:92:5f:e4:c9:96:2b:5b:
         5c:e9:42:8d:a4:b3:05:95:3d:b7:28:42:f7:d3:4a:d1:48:a0:
         b4:17:5d:4a:4e:6a:7b:e9:ce:47:b6:86:2b:64:4c:63:8f:13:
         92:d1:93:a5:a0:f8:62:c3:8a:ec:c8:aa:10:07:9d:9b:cc:9b:
         79:df:7b:0d:60:d9:4d:45:82:92:06:84:a5:6f:86:b0:b9:29:
         41:7d:46:2e:96:b9:5a:50:3c:04:f4:c3:2a:76:5d:61:44:e2:
         d6:0d:fc:4b:d5:a0:de:d5:22:30:96:79:d7:40:57:cf:9f:da:
         f6:de:d9:88:f2:fe:bf:ae:91:34:4a:c2:1a:a8:93:fb:9a:81:
         fd:c5:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:39:51 2026 by rpki-client