This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
File:                     nhuiMnN6PQDX-qC03Dg02arwbfg.mft (raw, json)
Hash identifier:          9gJZlojdX6TQpcHjM5Jg5oNWGcvFyTCxyktovIZYYJc=
Subject key identifier:   BC:3B:96:9F:5C:A7:FE:D1:A7:C2:EF:B4:8B:FF:2F:8C:95:A2:4C:3B
Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
Certificate issuer:       /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Certificate serial:       06E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
Manifest number:          06D8
Signing time:             Sat 24 Jan 2026 21:28:48 +0000
Manifest this update:     Sat 24 Jan 2026 21:28:47 +0000
Manifest next update:     Sat 31 Jan 2026 21:28:47 +0000
Files and hashes:         1: nhuiMnN6PQDX-qC03Dg02arwbfg.crl (hash: 80FwmTZzMLEp8iHpqYHrcgeGTYhpyECpSY3tKKkZZsY=)
                          2: 3B3D9AA4162211F0AE684383C4F9AE02.roa (hash: XamxWQNFXzVAky34dKuvGM9L/Xfu1Wl8RSwCxVZ6CUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl
                          rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178297, serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
        Validity
            Not Before: Jan 24 21:28:47 2026 GMT
            Not After : Jan 31 21:28:47 2026 GMT
        Subject: CN=69753990-4e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:3d:f1:5f:a8:08:fb:5f:21:41:0a:83:17:
                    4e:72:92:21:84:2a:07:63:bb:e1:5d:ba:d4:df:d7:
                    16:e4:f0:86:f0:88:40:da:1a:bc:83:d8:7b:2c:3e:
                    e9:91:d0:7e:fe:19:64:7d:97:58:51:16:e2:b7:f7:
                    2e:0a:69:9d:d6:d1:5c:8f:0c:93:6f:b6:05:81:37:
                    86:96:43:27:d3:68:3a:38:05:7e:8a:05:7d:49:85:
                    8b:a3:9a:8a:32:09:47:00:8c:56:e6:73:dd:95:52:
                    11:58:c2:27:28:9c:9b:65:fb:96:0d:80:cf:d3:e0:
                    29:49:9f:e8:dd:55:3a:fc:8b:34:90:38:f5:5c:ee:
                    3c:3b:11:99:db:ca:82:77:41:4d:b3:3d:05:4a:5e:
                    59:af:48:91:db:b7:1d:85:21:92:d7:b2:ec:3b:cf:
                    d5:8d:f7:33:55:af:ef:ea:82:1a:4b:72:57:29:62:
                    d9:49:39:ff:9b:ad:9c:c2:24:67:b4:89:d6:04:d1:
                    8f:c9:1e:29:a0:13:c3:e8:d3:35:17:25:06:92:24:
                    26:6f:24:d3:ea:ed:bf:a0:5d:ec:f3:cf:67:d9:ab:
                    2e:72:fe:b4:40:ae:ba:90:8d:f2:56:4a:0d:13:8d:
                    ad:a4:d3:76:5b:ca:d4:fd:05:aa:62:24:0a:cc:43:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3B:96:9F:5C:A7:FE:D1:A7:C2:EF:B4:8B:FF:2F:8C:95:A2:4C:3B
            X509v3 Authority Key Identifier:
                keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3f:39:c6:fa:76:d4:a8:75:22:02:ca:0c:85:b3:0a:6c:18:
         f3:b4:a1:79:d9:2b:4f:09:d0:42:65:45:a1:7d:7d:ac:f0:60:
         91:86:6e:cf:33:ee:3c:c2:d6:78:ab:67:b3:32:37:60:e6:98:
         0e:65:20:31:90:a9:fb:d1:0c:1d:09:48:09:ee:37:ee:44:8d:
         fc:9f:e5:f8:63:ea:49:1e:eb:b9:b3:9c:5a:a8:70:a0:80:1c:
         7f:1e:28:0f:7d:c6:b4:87:e3:57:b6:1a:61:29:45:d0:e6:1c:
         27:64:bd:49:aa:c2:f7:f8:de:16:d4:e5:15:b1:c9:d2:94:cb:
         a0:bf:9d:e0:76:dd:86:8d:fe:ac:32:ec:58:94:3f:67:ff:0e:
         39:b0:8f:df:3f:ad:eb:6c:31:3a:d3:c7:cb:81:da:31:5a:c2:
         bc:ed:d9:59:9d:c7:d3:fe:52:78:bd:51:dc:d2:10:e3:40:2d:
         32:0e:36:bf:34:30:0f:34:8b:c2:9e:2c:a8:9e:90:ba:58:1b:
         8e:40:a3:f2:77:ef:a4:01:ff:0a:1d:23:bb:1e:94:ad:27:04:
         ac:b0:49:ac:25:c9:21:cf:e6:eb:3c:27:4f:a2:2c:3b:70:bc:
         cb:3b:99:5a:e4:13:35:53:bf:dd:03:07:cb:c7:4e:c8:fa:1b:
         d6:2d:f2:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzgyOTcxMTAvBgNVBAUTKDlFMUJBMjMyNzM3QTNEMDBEN0ZBQTBCNERDMzgzNEQ5
QUFGMDZERjgwHhcNMjYwMTI0MjEyODQ3WhcNMjYwMTMxMjEyODQ3WjAYMRYwFAYD
VQQDDA02OTc1Mzk5MC00ZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4I98V+oCPtfIUEKgxdOcpIhhCoHY7vhXbrU39cW5PCG8IhA2hq8g9h7LD7p
kdB+/hlkfZdYURbit/cuCmmd1tFcjwyTb7YFgTeGlkMn02g6OAV+igV9SYWLo5qK
MglHAIxW5nPdlVIRWMInKJybZfuWDYDP0+ApSZ/o3VU6/Is0kDj1XO48OxGZ28qC
d0FNsz0FSl5Zr0iR27cdhSGS17LsO8/VjfczVa/v6oIaS3JXKWLZSTn/m62cwiRn
tInWBNGPyR4poBPD6NM1FyUGkiQmbyTT6u2/oF3s889n2asucv60QK66kI3yVkoN
E42tpNN2W8rU/QWqYiQKzEPYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLw7lp9c
p/7Rp8LvtIv/L4yVokw7MB8GA1UdIwQYMBaAFJ4bojJzej0A1/qgtNw4NNmq8G34
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODI5Ny80QjFGNzQ4NDg3
QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBRRFgtcUMwM0RnMDJhcndi
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odWlNbk42UFFEWC1xQzAzRGcwMmFyd2JmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODI5Ny80QjFGNzQ4NDg3QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBR
RFgtcUMwM0RnMDJhcndiZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbPznG+nbUqHUiAsoMhbMKbBjztKF52StPCdBCZUWhfX2s8GCRhm7P
M+48wtZ4q2ezMjdg5pgOZSAxkKn70QwdCUgJ7jfuRI38n+X4Y+pJHuu5s5xaqHCg
gBx/HigPfca0h+NXthphKUXQ5hwnZL1JqsL3+N4W1OUVscnSlMugv53gdt2Gjf6s
MuxYlD9n/w45sI/fP63rbDE608fLgdoxWsK87dlZncfT/lJ4vVHc0hDjQC0yDja/
NDAPNIvCniyonpC6WBuOQKPyd++kAf8KHSO7HpStJwSssEmsJckhz+brPCdPoiw7
cLzLO5la5BM1U7/dAwfLx07I+hvWLfJ3
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:09:25 2026 by rpki-client