This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
File:                     nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json)
Hash identifier:          jdGEVkI9fTjqecgF7GE4oSnFFhouwmCPr0FvNnEkesw=
Subject key identifier:   12:14:06:4F:18:CB:C8:77:66:7F:76:6F:C7:13:57:85:C4:59:1C:29
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Certificate issuer:       /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial:       08B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
Manifest number:          087B
Signing time:             Sat 24 Jan 2026 20:12:56 +0000
Manifest this update:     Sat 24 Jan 2026 20:12:55 +0000
Manifest next update:     Sat 31 Jan 2026 20:12:55 +0000
Files and hashes:         1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: +sxqIpnLy8DIEuSUy4AroO88FxkIvO2OnIYgkNIDkZI=)
                          2: F9EA1194F66911F08646E7846F6F56BC.roa (hash: XKT5i9+UeN10hSiU8sqVpmRCE1gCFePQyxpmqVtH5Zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
                          rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
        Validity
            Not Before: Jan 24 20:12:55 2026 GMT
            Not After : Jan 31 20:12:55 2026 GMT
        Subject: CN=697527c8-5b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:e8:3f:db:b7:4f:ed:9e:b3:f0:1c:b6:c9:
                    16:81:17:b9:e5:6e:58:4d:7c:89:f7:50:5c:a3:cf:
                    4f:88:dc:87:2f:13:24:9c:0f:29:73:c7:ae:79:1c:
                    cb:7f:1e:9c:a0:c9:d5:c3:36:94:c1:50:b7:ce:57:
                    82:54:e4:b7:c1:31:9f:35:a3:50:e0:a7:73:7c:91:
                    f7:ea:71:de:c3:6b:97:f4:3f:43:28:0a:5d:6a:34:
                    be:1d:42:ac:e5:fe:2d:2d:82:af:35:5e:83:65:82:
                    bf:64:cc:8d:5e:df:21:e6:09:e0:5d:3e:a3:2c:30:
                    25:60:6b:0f:86:f6:4e:19:fb:2b:ce:13:d9:0a:37:
                    42:bd:0a:db:c1:4a:ad:0b:83:7c:14:e5:9b:f8:84:
                    03:6a:1f:84:66:90:ee:ed:bc:49:d3:66:96:26:1e:
                    82:b6:ef:d5:66:ee:0f:7f:53:80:af:fd:b3:5e:af:
                    f5:9f:b9:fb:9c:bd:66:f0:68:7b:2a:ba:1b:32:ad:
                    75:40:f5:21:3e:e5:c8:d6:10:51:8f:25:a4:23:2a:
                    12:d7:f6:ba:83:cc:02:df:43:93:d9:54:bc:76:f6:
                    a7:c2:5d:fa:ff:23:11:27:8e:37:85:e5:06:1b:88:
                    54:cb:05:1e:66:45:7f:c4:2b:c7:f3:14:01:39:fd:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:14:06:4F:18:CB:C8:77:66:7F:76:6F:C7:13:57:85:C4:59:1C:29
            X509v3 Authority Key Identifier:
                keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:6b:b1:e9:27:89:d1:1f:2e:c1:af:91:be:5c:79:e0:ab:
         c0:42:7f:7d:bc:1e:c2:95:76:ee:9d:08:49:28:ab:62:52:28:
         80:ac:3c:35:39:74:de:bd:80:16:57:10:22:54:b3:2a:94:22:
         c9:13:d5:1c:e7:78:1f:98:55:57:98:48:33:e8:fd:60:d3:5c:
         93:43:43:60:11:3c:15:c6:1f:67:26:30:f6:da:38:64:ab:6b:
         fc:69:d0:55:56:37:80:c5:1f:e1:0b:cd:31:47:ec:59:77:b5:
         ad:d0:38:d9:67:c5:79:69:e2:27:a1:aa:52:ec:5d:4d:31:17:
         a1:5b:a5:4c:34:5a:75:a8:f5:d7:fe:d4:d7:7f:e7:64:66:51:
         2e:f8:e8:a1:a4:6f:67:ae:6d:73:c0:93:81:ec:f3:96:7e:59:
         84:99:fa:3f:93:73:c9:e6:08:0f:86:58:ac:ef:1b:b6:9a:90:
         15:57:e2:b2:e7:6b:65:ad:4b:b4:42:ec:d8:88:42:41:2f:ef:
         f8:48:aa:00:65:14:30:59:b6:97:05:06:d2:17:5f:cf:8a:50:
         a2:b6:c8:92:fa:ef:c9:69:26:de:b5:d6:b8:ea:8e:4f:fd:42:
         64:e8:35:79:23:40:5a:4a:0b:34:b7:d3:2d:bf:c7:36:7d:21:
         c3:0b:49:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3
MzVGNEU0NzAwHhcNMjYwMTI0MjAxMjU1WhcNMjYwMTMxMjAxMjU1WjAYMRYwFAYD
VQQDDA02OTc1MjdjOC01YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkijoP9u3T+2es/ActskWgRe55W5YTXyJ91Bco89PiNyHLxMknA8pc8eueRzL
fx6coMnVwzaUwVC3zleCVOS3wTGfNaNQ4KdzfJH36nHew2uX9D9DKApdajS+HUKs
5f4tLYKvNV6DZYK/ZMyNXt8h5gngXT6jLDAlYGsPhvZOGfsrzhPZCjdCvQrbwUqt
C4N8FOWb+IQDah+EZpDu7bxJ02aWJh6Ctu/VZu4Pf1OAr/2zXq/1n7n7nL1m8Gh7
KrobMq11QPUhPuXI1hBRjyWkIyoS1/a6g8wC30OT2VS8dvanwl36/yMRJ443heUG
G4hUywUeZkV/xCvH8xQBOf2J7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIUBk8Y
y8h3Zn92b8cTV4XEWRwpMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB
MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG
ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBn02ux6SeJ0R8uwa+Rvlx54KvAQn99vB7ClXbunQhJKKtiUiiArDw1
OXTevYAWVxAiVLMqlCLJE9Uc53gfmFVXmEgz6P1g01yTQ0NgETwVxh9nJjD22jhk
q2v8adBVVjeAxR/hC80xR+xZd7Wt0DjZZ8V5aeInoapS7F1NMRehW6VMNFp1qPXX
/tTXf+dkZlEu+OihpG9nrm1zwJOB7POWflmEmfo/k3PJ5ggPhlis7xu2mpAVV+Ky
52tlrUu0QuzYiEJBL+/4SKoAZRQwWbaXBQbSF1/PilCitsiS+u/JaSbetda46o5P
/UJk6DV5I0BaSgs0t9Mtv8c2fSHDC0lY
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:01 2026 by rpki-client