This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File:                     Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier:          6XTr4yE0lKDo1LnQq5ysLsrIj+TqiD1/umwbdeSyFP0=
Subject key identifier:   5B:9A:C1:EF:64:60:77:5F:05:D7:2C:C9:33:BE:B0:21:05:21:3D:2D
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer:       /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number:          0207
Signing time:             Sun 25 Jan 2026 01:41:19 +0000
Manifest this update:     Sun 25 Jan 2026 01:41:18 +0000
Manifest next update:     Sun 01 Feb 2026 01:41:18 +0000
Files and hashes:         1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: 9CAv4A/0ANIvVQ5BXcrqcrgYhuI1Q12NVlfkBGF5XZg=)
                          2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: z9aB/eMQsAs4dx5UPgq7iMP6FyNI1Namac/Cs27VAaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
                          rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
        Validity
            Not Before: Jan 25 01:41:18 2026 GMT
            Not After : Feb  1 01:41:18 2026 GMT
        Subject: CN=697574be-2671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:83:a5:23:40:e5:3e:fa:59:b2:e4:c4:2c:
                    b0:1c:9a:6d:c1:aa:6d:91:5d:68:b7:2d:75:3d:37:
                    d5:e2:35:d9:d1:9c:6f:3a:16:56:73:eb:ca:23:10:
                    20:79:0e:4e:d0:f1:89:ef:99:e1:05:b0:1b:97:e5:
                    59:77:8e:6d:da:52:a2:2f:41:a5:8e:6a:02:a7:7c:
                    19:0c:88:67:ac:21:80:42:0d:0a:7e:36:b7:cd:0e:
                    b1:aa:a3:52:48:3f:f5:3c:8a:da:e4:9a:d8:92:52:
                    80:95:ae:37:e6:9a:52:c2:48:bb:68:fd:df:74:73:
                    21:a4:ec:f5:d3:dd:1e:c9:c1:83:39:35:34:a2:ec:
                    64:b2:76:d0:07:59:75:27:6e:8e:a5:e9:8e:14:c1:
                    63:65:40:cf:28:39:b1:85:a7:a4:56:bb:43:03:7d:
                    0f:3f:43:e6:63:02:94:08:8a:e1:22:74:17:f8:96:
                    7a:ea:87:fc:9d:d6:5e:b1:94:9a:eb:2c:2f:02:30:
                    41:5b:4d:2f:65:7c:0e:94:82:60:4e:64:4d:30:57:
                    f8:2b:5c:6f:f0:84:5e:bf:30:e5:2c:be:71:a5:04:
                    ac:2a:68:6a:c0:ef:f7:5d:2e:3f:b7:2f:94:d4:a6:
                    99:f1:28:bc:58:55:2a:cb:09:34:6f:d5:bc:11:fd:
                    9e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:C1:EF:64:60:77:5F:05:D7:2C:C9:33:BE:B0:21:05:21:3D:2D
            X509v3 Authority Key Identifier:
                keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:b5:f6:26:c9:fa:79:01:5e:b7:6b:f1:dd:a7:66:d8:9e:
         c8:76:a3:52:09:30:3a:c0:6c:7e:e2:2c:30:a8:f1:ad:82:da:
         04:64:9f:ec:0c:b9:b6:d0:c8:9f:72:ec:e5:e0:66:93:26:fc:
         5a:91:1b:44:7a:e1:1a:64:40:95:9e:9b:6b:38:67:59:f1:35:
         6f:16:c0:ec:64:3a:ae:1f:2a:3f:bc:fb:9d:ab:e3:b5:42:cb:
         3b:96:66:8f:12:6a:5f:68:4c:8b:b6:bc:71:28:a2:35:04:f7:
         2a:1c:00:3a:72:5d:00:4d:66:e6:49:ab:fb:be:55:71:b3:b7:
         96:5d:2b:17:2c:b7:ed:d6:29:f8:e5:11:d0:a6:2e:90:a3:d7:
         37:40:ec:2e:8b:31:6e:1b:03:b2:9d:94:ea:7e:23:03:1f:27:
         85:10:36:57:08:1c:78:bb:24:8f:b8:08:2b:6b:72:4d:97:8a:
         72:22:d4:99:ac:92:46:65:02:d2:65:c8:3a:7e:65:86:79:6b:
         cf:d7:b2:44:86:3f:93:b0:10:cd:04:25:59:94:cc:14:29:81:
         f7:ca:c6:dd:4a:d9:3a:2b:b3:ab:cf:33:47:85:f9:93:15:80:
         ba:a6:db:c2:cb:eb:b4:7c:38:61:cd:0e:10:fc:38:94:a3:e4:
         43:26:26:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky
ODQ2ODZEQjAwHhcNMjYwMTI1MDE0MTE4WhcNMjYwMjAxMDE0MTE4WjAYMRYwFAYD
VQQDDA02OTc1NzRiZS0yNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySCDpSNA5T76WbLkxCywHJptwaptkV1oty11PTfV4jXZ0ZxvOhZWc+vKIxAg
eQ5O0PGJ75nhBbAbl+VZd45t2lKiL0GljmoCp3wZDIhnrCGAQg0Kfja3zQ6xqqNS
SD/1PIra5JrYklKAla435ppSwki7aP3fdHMhpOz1090eycGDOTU0ouxksnbQB1l1
J26OpemOFMFjZUDPKDmxhaekVrtDA30PP0PmYwKUCIrhInQX+JZ66of8ndZesZSa
6ywvAjBBW00vZXwOlIJgTmRNMFf4K1xv8IRevzDlLL5xpQSsKmhqwO/3XS4/ty+U
1KaZ8Si8WFUqywk0b9W8Ef2eewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuawe9k
YHdfBdcsyTO+sCEFIT0tMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0
MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz
MVVZU29TNjF1WWtvUm9iYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+rbX2Jsn6eQFet2vx3adm2J7IdqNSCTA6wGx+4iwwqPGtgtoEZJ/s
DLm20Mifcuzl4GaTJvxakRtEeuEaZECVnptrOGdZ8TVvFsDsZDquHyo/vPudq+O1
Qss7lmaPEmpfaEyLtrxxKKI1BPcqHAA6cl0ATWbmSav7vlVxs7eWXSsXLLft1in4
5RHQpi6Qo9c3QOwuizFuGwOynZTqfiMDHyeFEDZXCBx4uySPuAgra3JNl4pyItSZ
rJJGZQLSZcg6fmWGeWvP17JEhj+TsBDNBCVZlMwUKYH3ysbdStk6K7OrzzNHhfmT
FYC6ptvCy+u0fDhhzQ4Q/DiUo+RDJib7
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:36 2026 by rpki-client