This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
File:                     NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json)
Hash identifier:          +qH/nWfcYjXym03lt65AioImeh8Z1cT8l8iubBB46VA=
Subject key identifier:   8D:31:7A:FE:AE:0E:3D:3A:A1:54:D2:02:75:88:28:46:4E:19:16:77
Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D
Certificate issuer:       /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
Manifest number:          0269
Signing time:             Sun 25 Jan 2026 00:49:47 +0000
Manifest this update:     Sun 25 Jan 2026 00:49:46 +0000
Manifest next update:     Sun 01 Feb 2026 00:49:46 +0000
Files and hashes:         1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: +8Xr9hqRsPVOiY8zsddVCI3EDyCyUE/kkVChzXepEs0=)
                          2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: 4Pojvoz6pQz0drU/suSB3Qk2A6ZI24l6azJQWIsOLc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl
                          rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D
        Validity
            Not Before: Jan 25 00:49:46 2026 GMT
            Not After : Feb  1 00:49:46 2026 GMT
        Subject: CN=697568ab-be9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:42:96:2e:e7:59:4e:2a:e1:f2:5d:f9:cb:
                    fb:9f:6a:2c:10:49:27:e9:8b:e1:5f:b4:89:1f:08:
                    9a:1e:9d:c5:39:d5:a1:22:b3:a2:77:63:ce:0e:31:
                    20:89:b0:c8:3d:eb:02:88:8e:fb:98:a0:b4:ca:7c:
                    66:9f:17:6e:71:da:22:57:cd:d1:58:72:4f:58:1e:
                    39:0f:53:24:2f:00:07:71:6d:73:6a:8e:02:1b:2d:
                    49:8c:57:b4:d5:ee:0d:83:a8:4c:77:69:ea:ea:5c:
                    ae:71:1f:40:18:f6:26:1d:58:e0:27:cc:a9:01:4d:
                    f3:51:7e:4c:1f:99:8e:d8:fa:89:6c:0e:ec:70:94:
                    66:f6:f1:b9:5f:f7:e8:68:c0:c0:db:d2:21:f6:87:
                    02:e4:e5:a2:00:87:23:94:27:9e:ea:75:dd:6e:d3:
                    4c:4d:6c:98:0a:7e:40:e4:2b:85:71:48:a4:5a:23:
                    bc:df:32:d7:a3:94:7c:7c:11:76:dc:c4:2e:3f:10:
                    41:10:24:e7:a3:fd:f8:2c:b7:3d:fe:30:5a:41:d1:
                    f3:a9:25:67:cd:31:7d:dc:02:dc:47:50:87:78:e6:
                    13:62:1a:c9:17:6a:65:e3:bb:a2:f7:e4:e1:71:5d:
                    11:81:f2:fb:f9:c7:e6:9a:34:1c:2c:3f:94:8f:5f:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:31:7A:FE:AE:0E:3D:3A:A1:54:D2:02:75:88:28:46:4E:19:16:77
            X509v3 Authority Key Identifier:
                keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:65:e5:c6:36:13:3c:02:a5:c3:25:6f:8d:f0:b7:e0:fd:08:
         83:7d:a0:a4:48:32:92:85:0f:a4:6a:8a:7c:8b:59:af:01:60:
         94:42:f1:fb:eb:9a:45:c3:9d:cd:ea:6e:5f:14:ff:f6:2a:6a:
         e6:fc:3b:f0:64:81:29:c2:48:27:4b:ef:22:94:cc:b5:96:4b:
         4c:8b:c7:96:39:e9:10:6a:bd:6a:de:4c:3a:b0:b3:45:07:bb:
         de:6b:b7:56:8c:a6:3e:53:15:5a:34:e2:38:ca:f5:fc:b9:3c:
         50:f9:f3:ca:c6:b5:80:23:11:50:6e:c5:68:f0:51:09:16:4c:
         3d:52:0f:65:81:ee:57:a2:1a:78:37:71:23:c6:42:e2:d8:07:
         2a:03:c0:2d:4e:29:84:0d:b8:d8:a2:ea:85:8a:f8:1f:6b:3e:
         4d:ee:58:9e:32:32:06:82:28:7b:87:bb:85:5a:0e:75:83:f4:
         e8:2b:dc:95:f6:ce:a7:d5:e9:0c:3c:cd:32:05:19:da:eb:12:
         a5:d4:f0:b1:76:1e:fa:5a:bd:c2:99:ca:77:65:4e:c5:b9:15:
         e8:7f:ac:b4:65:c2:5b:b5:97:58:07:c9:35:03:71:01:60:e1:
         ca:72:54:b5:19:87:2e:bb:eb:71:2b:49:e3:5f:bc:de:ba:4a:
         58:33:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:08:10 2026 by rpki-client