This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
File:                     npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json)
Hash identifier:          T6BHnk+hqD5b0wBsXtqMNGhh4CP6oc4ZcqpjcvzkF8E=
Subject key identifier:   7A:FA:03:17:64:16:BB:8A:56:63:2F:FE:2A:F9:9D:41:6E:0D:C2:D6
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Certificate issuer:       /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial:       15DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
Manifest number:          15B9
Signing time:             Sat 24 Jan 2026 16:30:28 +0000
Manifest this update:     Sat 24 Jan 2026 16:30:27 +0000
Manifest next update:     Sat 31 Jan 2026 16:30:27 +0000
Files and hashes:         1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: SCViCLPCKqnvlO4Bv73Ob7+rtjeViDSG065iDotMsbo=)
                          2: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: E6ZfJqWKl59ctqtC8pvHl8ZSeijGWf0fidXXivDnF8s=)
                          3: 75417ABE781411F0BDF7A723C4F9AE02.roa (hash: +PM/BNSQ17ND+kO8gcl6/hex8B+MKYuBQPyA7XyFPXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
                          rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5599 (0x15df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
        Validity
            Not Before: Jan 24 16:30:27 2026 GMT
            Not After : Jan 31 16:30:27 2026 GMT
        Subject: CN=6974f3a4-c2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:a4:15:43:cc:bd:98:8e:e3:18:5d:a4:41:
                    43:54:1b:2a:14:c5:1a:49:b1:26:9b:59:49:fc:0d:
                    ce:30:e8:36:a4:d3:88:d9:17:9b:43:a1:0f:ef:95:
                    54:b1:09:cc:5a:25:88:0c:a3:db:7e:cd:0e:23:91:
                    65:33:40:b1:35:49:93:3c:69:17:42:a6:c2:b4:4b:
                    d1:24:67:f6:9f:51:79:31:04:cb:92:fe:6e:0b:ec:
                    8b:fa:ab:7e:47:d4:0d:39:45:35:e6:fd:e0:f9:e1:
                    67:43:9b:0e:a9:70:20:c6:96:e3:5a:42:66:55:11:
                    65:14:62:46:55:55:ce:84:49:68:d6:a3:66:2a:23:
                    a9:85:14:6d:be:a4:d7:d9:a8:c6:90:5b:a5:d5:58:
                    9d:be:27:9b:db:95:2a:ac:4c:66:6f:a4:b0:fc:7f:
                    f8:a5:1c:27:3a:b9:98:7a:9e:90:5c:31:45:8c:e7:
                    d5:bd:24:b0:e2:dd:55:ad:11:a1:b0:df:31:81:60:
                    f9:a7:81:b9:a6:5b:79:a4:7d:69:fb:c3:67:e1:2f:
                    4a:b0:5a:31:a9:fd:31:09:1a:37:3e:94:67:f7:d5:
                    de:ed:f3:67:6b:fa:47:d8:59:e6:4e:90:96:7e:49:
                    b4:d0:2e:51:39:2e:cd:9f:31:1e:f5:f2:53:b7:e5:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FA:03:17:64:16:BB:8A:56:63:2F:FE:2A:F9:9D:41:6E:0D:C2:D6
            X509v3 Authority Key Identifier:
                keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:32:dc:3d:48:31:6e:7e:d6:a2:50:36:f3:2d:1e:d4:ea:72:
         54:17:77:59:90:d6:ec:04:58:8f:f3:57:0e:23:44:e2:77:2d:
         a3:56:bb:fe:f3:ca:c9:c1:63:f2:04:76:5e:b7:e8:27:2f:1c:
         77:d4:2c:93:da:9d:da:7b:15:e6:5c:a0:b8:1b:44:ed:9b:73:
         27:84:93:ca:4d:02:ca:a2:cb:1f:1a:8f:00:b9:94:3a:21:30:
         5f:6f:52:2b:dc:9c:ed:96:8b:43:a9:cb:e7:d1:b2:8d:68:cb:
         fa:58:3e:f9:ed:2d:4f:83:3a:8d:d0:ce:25:12:b4:e5:e5:96:
         3c:dc:9f:3a:b3:7c:2f:bd:a1:a4:ae:86:25:65:b5:15:e0:78:
         38:bc:6a:d1:51:80:75:4c:38:a7:98:d3:bd:a3:c2:ee:f2:c4:
         84:93:7c:42:eb:4d:b9:35:8f:92:dc:39:11:42:4a:2f:63:f7:
         e5:54:8a:c8:38:84:65:a3:40:fb:65:c3:e3:63:40:22:98:f7:
         29:4b:6f:4e:09:89:e4:ca:28:5b:54:3c:1a:10:28:39:30:57:
         8c:8a:71:70:6b:bb:06:06:07:4b:6e:79:d2:59:2a:39:e3:bc:
         a2:5e:72:55:7a:d6:61:c3:ae:b0:2b:34:f2:37:c7:3e:b9:8e:
         14:e4:79:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:15 2026 by rpki-client