This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
File:                     NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json)
Hash identifier:          HUmERaykTiyVDpEV7ClIWaOgLyCf8ekKzSuIutRgdig=
Subject key identifier:   19:20:3C:77:83:92:2F:04:32:32:3E:03:27:01:F4:40:76:0D:C2:E5
Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
Certificate issuer:       /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Certificate serial:       1820
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
Manifest number:          180A
Signing time:             Sat 24 Jan 2026 16:18:32 +0000
Manifest this update:     Sat 24 Jan 2026 16:18:31 +0000
Manifest next update:     Sat 31 Jan 2026 16:18:31 +0000
Files and hashes:         1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: /QtxW18Y9bANry5D8YIa7HBMvQXz1gk2RCwt+zXW9ow=)
                          2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: YPOOK5AIk3gBw37/F4hGfOPvVpq+0nympVjwZNkZ59I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
                          rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6176 (0x1820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
        Validity
            Not Before: Jan 24 16:18:31 2026 GMT
            Not After : Jan 31 16:18:31 2026 GMT
        Subject: CN=6974f0d8-2903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:2b:15:a6:c7:bd:12:1c:39:14:42:a6:73:
                    62:33:5d:9f:2e:42:fd:92:27:6c:cb:50:d6:4e:7a:
                    3f:bc:bc:aa:e6:ac:8c:6c:a1:28:1f:2b:17:97:b4:
                    e5:3a:50:6c:01:03:f7:f3:97:85:02:0e:07:1d:45:
                    23:13:6f:44:94:6c:77:11:e5:2b:c9:87:9d:57:df:
                    9f:b3:1d:7a:4a:26:c4:53:5f:c1:56:c6:64:4d:71:
                    4f:e1:ee:3f:eb:2c:13:3e:21:f2:05:89:b0:29:83:
                    d8:f1:89:18:f6:4a:67:e2:7b:71:75:0a:6c:b7:84:
                    a6:37:df:98:2d:d7:61:39:83:d7:a9:dd:30:bf:8d:
                    d9:35:72:be:26:6e:14:7a:0b:b7:d9:3a:42:42:75:
                    53:11:e2:19:93:73:90:62:ca:ea:14:5b:3a:f1:3c:
                    85:e7:a3:ef:4c:c6:c3:f3:4f:77:00:40:a9:98:71:
                    a8:4a:6a:b8:d6:2c:00:78:95:e2:92:73:65:c6:4c:
                    8b:51:20:9d:bb:ea:c0:1e:9c:f3:0f:6b:2f:6e:21:
                    7f:9a:68:f6:87:0d:a1:be:6b:38:f6:a0:6d:3e:b6:
                    b9:28:c7:ca:7c:dd:ec:35:1b:28:c7:98:f3:aa:3a:
                    b3:92:c6:5f:87:a1:61:38:93:f6:8e:15:ae:be:c2:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:3C:77:83:92:2F:04:32:32:3E:03:27:01:F4:40:76:0D:C2:E5
            X509v3 Authority Key Identifier:
                keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d6:f0:97:c8:d6:83:ae:dd:c5:89:75:49:ae:bf:f9:0f:a8:
         0d:bc:10:46:0f:9d:53:5d:da:bd:cf:57:47:8c:c6:3a:cc:1b:
         6b:24:94:09:f7:4f:9b:12:71:03:d5:af:e1:f1:2c:70:78:e8:
         8c:f6:2d:b2:1e:f2:9e:15:19:74:39:80:25:fd:c3:e3:f8:cf:
         e3:c6:2a:86:07:8a:0f:bc:79:67:24:f5:27:c7:aa:69:29:ab:
         bb:47:34:3d:39:0a:e1:24:52:18:67:96:45:94:21:de:18:01:
         04:35:8c:1b:32:bf:4c:0f:04:28:33:d8:1d:be:0c:e9:65:98:
         12:9e:65:72:6b:49:23:e4:97:cb:28:8c:64:07:a0:33:bb:0f:
         b3:43:a7:cb:c8:5d:a0:a3:c6:81:87:05:9b:6f:07:00:25:cd:
         eb:b1:d0:c9:c7:df:6c:d2:ca:b9:59:33:f4:92:0a:3c:09:82:
         c3:5d:12:62:48:11:13:f0:42:55:be:9b:7f:63:c1:10:a2:b7:
         ae:28:ef:dd:2f:1c:34:28:6d:43:79:d8:c1:d4:fc:9b:a0:67:
         55:6c:9a:37:44:48:5e:75:2d:79:0b:54:ae:85:d5:ea:ff:78:
         7c:d8:30:0f:f0:ec:77:83:25:1f:00:b5:98:dc:34:ec:d9:fe:
         65:6d:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:46 2026 by rpki-client