This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
File:                     n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json)
Hash identifier:          8jDCSQrAc22TUWJABWgGOiMjW0cJ7bhPnXUbsd8yYlc=
Subject key identifier:   59:2D:0E:DA:0A:71:D1:E3:EE:E1:54:8C:FD:74:FC:23:6F:CC:94:B6
Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77
Certificate issuer:       /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
Manifest number:          025F
Signing time:             Sun 25 Jan 2026 00:59:20 +0000
Manifest this update:     Sun 25 Jan 2026 00:59:20 +0000
Manifest next update:     Sun 01 Feb 2026 00:59:20 +0000
Files and hashes:         1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: e+VkSKcNftcC5KM/HIfV69EdHMVbz+5RHYt3rrQhVgA=)
                          2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl
                          rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
        Validity
            Not Before: Jan 25 00:59:20 2026 GMT
            Not After : Feb  1 00:59:20 2026 GMT
        Subject: CN=69756ae8-6bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:88:3f:0b:98:04:31:6c:b2:49:b8:a9:1a:
                    f7:ab:50:d9:53:28:74:15:2e:b1:5c:63:e8:4e:e2:
                    a3:d1:fc:bf:be:5f:ee:e5:5f:e1:dc:79:d8:a9:78:
                    18:cc:28:00:85:93:9b:a9:30:8a:88:40:07:ac:5a:
                    69:12:bd:73:4a:7e:e8:6e:86:62:b7:ed:b4:34:de:
                    82:d4:f1:37:b0:83:0d:7b:c5:57:85:91:fb:7a:71:
                    99:a0:05:60:19:0e:49:be:c3:d8:f4:ab:a2:d1:33:
                    83:2d:be:c9:87:19:03:8b:03:73:27:25:73:f6:21:
                    1a:78:dc:73:25:9b:42:11:d1:e4:dc:bb:17:cd:cb:
                    12:ca:10:1b:55:c3:74:8e:65:cb:e0:fa:e7:28:42:
                    cf:c7:f1:54:57:5b:8c:ad:5d:0e:c9:79:ed:95:16:
                    d2:78:5e:33:92:39:62:b0:3b:c7:ef:55:f2:69:ea:
                    d4:da:bb:43:52:14:cc:89:6c:a9:20:fd:86:75:f7:
                    e7:8c:ab:a8:6a:ab:9d:51:1f:f6:4b:c2:da:3b:26:
                    0c:f8:ba:0f:30:6c:fa:97:d2:13:0d:82:74:b4:af:
                    88:e1:02:f4:63:5a:71:a1:76:9f:e6:bf:3a:9a:ba:
                    67:a1:7e:45:29:37:5d:b9:c4:99:b2:4d:74:53:c9:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2D:0E:DA:0A:71:D1:E3:EE:E1:54:8C:FD:74:FC:23:6F:CC:94:B6
            X509v3 Authority Key Identifier:
                keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:5e:75:e8:13:8d:d6:4d:06:e8:9d:c9:df:91:07:45:79:93:
         e5:be:20:c3:8d:b1:d9:8b:01:28:17:49:3f:6a:9b:97:e2:6b:
         dd:b7:bb:86:51:f8:86:9c:ac:e0:e7:32:14:13:b3:7e:18:b3:
         7f:ec:10:33:85:f3:99:39:9f:0c:60:ce:31:c2:d0:af:e7:1e:
         fa:3c:4b:15:75:ca:3b:15:f7:6b:eb:43:4c:8a:5e:d8:e0:ea:
         c5:83:1f:5a:00:e4:76:ab:44:c5:53:a5:4f:ef:65:9f:51:86:
         c0:86:8c:9b:a2:85:f6:7b:9e:2e:56:43:a0:c5:4d:ce:8e:61:
         32:b9:15:bd:09:20:53:b7:d3:fa:97:79:ed:3f:52:20:ad:a2:
         02:e3:22:94:9c:2a:c1:72:ee:e1:7b:84:c6:09:f9:77:3d:2d:
         62:f6:51:54:1f:b8:91:ff:2b:92:70:c8:59:05:26:3c:3c:1e:
         e2:36:7c:97:a7:2f:9f:2a:c4:f2:ac:16:27:7c:e3:0e:65:7a:
         bf:39:b6:a5:5a:ed:00:60:ef:52:33:1f:52:24:74:44:69:29:
         7b:e3:6d:15:29:db:80:3c:4c:17:91:ca:e6:24:01:e5:3b:6b:
         76:61:3d:94:43:75:17:e9:ec:be:ca:7f:45:48:29:a0:55:92:
         d1:94:e6:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0
M0U4Qzk1NzcwHhcNMjYwMTI1MDA1OTIwWhcNMjYwMjAxMDA1OTIwWjAYMRYwFAYD
VQQDDA02OTc1NmFlOC02YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn6OIPwuYBDFsskm4qRr3q1DZUyh0FS6xXGPoTuKj0fy/vl/u5V/h3HnYqXgY
zCgAhZObqTCKiEAHrFppEr1zSn7oboZit+20NN6C1PE3sIMNe8VXhZH7enGZoAVg
GQ5JvsPY9Kui0TODLb7JhxkDiwNzJyVz9iEaeNxzJZtCEdHk3LsXzcsSyhAbVcN0
jmXL4PrnKELPx/FUV1uMrV0OyXntlRbSeF4zkjlisDvH71XyaerU2rtDUhTMiWyp
IP2GdffnjKuoaqudUR/2S8LaOyYM+LoPMGz6l9ITDYJ0tK+I4QL0Y1pxoXaf5r86
mrpnoX5FKTdducSZsk10U8nHqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFktDtoK
cdHj7uFUjP10/CNvzJS2MB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB
RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w
S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3XnXoE43WTQboncnfkQdFeZPlviDDjbHZiwEoF0k/apuX4mvdt7uG
UfiGnKzg5zIUE7N+GLN/7BAzhfOZOZ8MYM4xwtCv5x76PEsVdco7Ffdr60NMil7Y
4OrFgx9aAOR2q0TFU6VP72WfUYbAhoybooX2e54uVkOgxU3OjmEyuRW9CSBTt9P6
l3ntP1IgraIC4yKUnCrBcu7he4TGCfl3PS1i9lFUH7iR/yuScMhZBSY8PB7iNnyX
py+fKsTyrBYnfOMOZXq/ObalWu0AYO9SMx9SJHREaSl7420VKduAPEwXkcrmJAHl
O2t2YT2UQ3UX6ey+yn9FSCmgVZLRlOZx
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:23 2026 by rpki-client