This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
File:                     _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json)
Hash identifier:          3xdVyOfyivBBPanObiKfsma509ZOuWFplazsQYo1sJA=
Subject key identifier:   FE:1F:CC:A3:5B:1C:DE:7C:20:7C:C9:F6:2B:48:25:46:B7:EF:AF:54
Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60
Certificate issuer:       /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
Manifest number:          01ED
Signing time:             Fri 23 Jan 2026 01:47:11 +0000
Manifest this update:     Fri 23 Jan 2026 01:47:11 +0000
Manifest next update:     Fri 30 Jan 2026 01:47:11 +0000
Files and hashes:         1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: 97GbWVCtfMkMGqgZCAQe8n9zonlOwf7Yd1nxMb/wJlk=)
                          2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl
                          rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 01:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
        Validity
            Not Before: Jan 23 01:47:11 2026 GMT
            Not After : Jan 30 01:47:11 2026 GMT
        Subject: CN=6972d31f-41e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:16:de:ef:a9:b1:71:0d:b6:cb:7d:36:1e:
                    40:2a:fb:0c:b6:12:b1:a7:da:cf:4e:3e:91:12:41:
                    43:41:90:0f:dd:3a:65:db:f5:24:d1:65:9e:a5:6b:
                    b2:98:6f:c0:e2:48:bf:f0:10:5f:cf:a3:42:c5:a3:
                    66:3c:cb:99:8b:a4:2d:ec:b8:e2:3b:ce:5c:fd:16:
                    84:9d:2d:2a:2e:bb:c1:46:1b:6e:b6:5d:78:91:e1:
                    48:91:90:14:2b:6f:05:d6:97:35:ef:57:bf:e0:bd:
                    bd:48:9e:22:b0:75:13:21:f5:25:b2:d0:1d:d3:45:
                    f5:a1:fc:b5:42:e3:8f:42:3c:72:6d:91:3e:50:82:
                    75:e3:a3:e3:48:09:74:ce:04:3f:0a:61:cb:e0:a8:
                    21:d7:f7:f0:44:0c:bb:fe:fb:f6:99:59:7a:0d:b6:
                    d3:3e:37:09:ee:55:ab:2b:03:73:44:4d:b3:2c:73:
                    30:83:c0:91:d3:08:e5:7f:4a:aa:ae:a9:14:5f:b0:
                    c4:36:5e:2a:7a:bc:87:75:eb:ae:3e:60:21:d8:60:
                    17:e5:8c:b6:4d:95:84:d9:60:56:83:cf:5d:08:bb:
                    48:0a:0c:a0:da:33:fa:cc:3b:41:2a:f4:96:75:a9:
                    68:b1:f8:b3:cc:ab:7b:c7:f4:3e:6c:48:26:00:94:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1F:CC:A3:5B:1C:DE:7C:20:7C:C9:F6:2B:48:25:46:B7:EF:AF:54
            X509v3 Authority Key Identifier:
                keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d6:ea:c6:7e:4d:ee:17:bd:0a:1a:7c:0c:a4:92:65:f2:09:
         e7:6d:b6:3c:b0:33:ff:09:3b:8b:d0:63:70:95:7e:31:55:8a:
         62:d6:98:b1:2e:aa:69:cb:d2:d8:c4:e3:f7:47:78:a9:74:0e:
         e6:d3:50:5b:e8:37:28:01:2e:bd:09:9b:dc:13:9f:4b:84:ad:
         9b:42:20:d1:3a:88:6a:e5:c9:30:f7:64:4a:d3:eb:32:e5:b9:
         23:6b:4e:0e:7f:5a:a9:b6:10:46:eb:d1:d2:c3:cb:42:ea:6d:
         a7:60:ab:60:87:64:b7:f2:dc:1c:af:45:59:de:83:b1:df:d3:
         ca:a5:b5:3c:a1:bd:0d:a2:e4:b5:2e:83:57:d8:22:9f:e8:7e:
         9b:e6:2f:71:92:6a:5a:ef:0c:d7:ee:63:31:38:e4:90:19:d8:
         a6:f9:83:54:ac:40:0d:26:a0:a6:8a:8a:c6:6f:91:94:ef:ea:
         ce:05:c8:b1:88:8a:2c:66:86:bf:ad:18:29:9e:99:1c:5f:20:
         85:3b:d3:48:04:0a:22:5b:e0:1d:26:9e:7c:1f:8e:f1:36:6a:
         b8:d5:cd:4a:ff:6f:83:1d:37:08:60:6d:fa:a7:f5:11:90:62:
         e3:a0:ce:77:2f:2b:b9:cd:5d:6e:db:68:d8:87:cd:11:fc:a6:
         c6:2c:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:36 2026 by rpki-client