This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File:                     NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier:          uJgpQoIRUm+LpEDtCmyJslv+bYrDo5RUEHW+pJBod/w=
Subject key identifier:   6B:44:02:94:D9:D2:53:D1:86:2C:91:29:A9:EB:A0:A6:C4:ED:0C:36
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer:       /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial:       1499
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number:          1491
Signing time:             Sat 24 Jan 2026 16:36:58 +0000
Manifest this update:     Sat 24 Jan 2026 16:36:58 +0000
Manifest next update:     Sat 31 Jan 2026 16:36:58 +0000
Files and hashes:         1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: b1SxliLBIm5Izj1/z11oqdwUQdisqcKQ1x1OXea1N7s=)
                          2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
                          rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5273 (0x1499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
        Validity
            Not Before: Jan 24 16:36:58 2026 GMT
            Not After : Jan 31 16:36:58 2026 GMT
        Subject: CN=6974f52a-1459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:c4:90:ca:e2:96:4f:9f:6a:37:92:3f:34:
                    c2:ae:58:59:02:f9:00:e2:71:26:c0:09:b7:ac:f3:
                    23:84:9f:0e:d8:37:b7:70:aa:27:5e:dc:a8:93:7f:
                    8b:25:4a:d0:db:c7:1c:07:78:c5:47:27:ab:2e:45:
                    e5:5e:cd:7b:dc:4b:5e:fe:9d:57:d4:3b:79:0e:e5:
                    a6:39:5a:fb:b4:bb:16:56:f3:a4:dd:5c:58:b4:06:
                    8b:fa:37:f6:cc:de:18:11:3c:56:3c:b7:fd:1b:cf:
                    99:91:8d:17:9c:0c:e4:32:64:e3:29:15:fb:7d:2f:
                    e3:5e:e0:7e:d6:87:6d:55:bf:ba:6b:7e:91:95:ea:
                    1c:41:ae:6f:c8:ba:b5:0a:7b:8b:03:9d:95:f4:58:
                    40:5c:b3:80:57:f9:3a:9d:17:db:aa:95:0f:f2:26:
                    d5:08:68:5d:e7:52:f7:2d:f8:fc:c1:5e:bb:39:a4:
                    39:80:61:af:f4:73:bb:ff:27:aa:0f:fc:28:43:22:
                    d1:86:06:79:eb:93:3a:6c:3b:bc:24:61:4c:00:b3:
                    fb:43:db:64:7b:aa:33:4e:86:9d:47:ad:f5:d0:0f:
                    b7:1c:f7:8a:bf:0a:f3:a5:13:63:0f:ec:09:09:ad:
                    cd:1d:94:5c:5c:32:9f:32:79:1c:d9:e8:34:e5:ec:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:44:02:94:D9:D2:53:D1:86:2C:91:29:A9:EB:A0:A6:C4:ED:0C:36
            X509v3 Authority Key Identifier:
                keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:96:42:e7:4d:15:ad:44:32:4b:07:9e:97:75:8c:1a:c9:
         1b:96:31:f6:cc:5e:6b:fb:60:fd:8f:51:bc:8a:58:6d:62:ec:
         1c:5f:6e:97:7b:dc:0f:f5:87:25:63:da:46:45:b9:e7:04:6a:
         f2:d9:9a:1c:00:a5:3a:51:31:0c:b2:47:d1:f6:f0:24:7c:ea:
         63:69:a1:0c:e6:05:15:d0:cd:98:73:c8:94:79:f5:00:2d:db:
         cf:c2:d1:64:87:5e:2e:7c:74:28:05:90:cc:49:97:fa:75:62:
         9f:71:5e:e9:3e:9a:74:7b:f1:c1:05:ea:e7:e6:6f:3e:93:72:
         96:d8:8d:44:9e:a7:46:3e:5b:8a:ed:6a:2c:6d:6d:a4:cf:fd:
         61:44:bf:79:c4:2d:4d:13:66:3a:bd:4c:df:12:a5:9e:d8:a9:
         d5:f7:1f:3d:39:11:1a:62:c9:d2:17:2e:51:71:06:d3:cf:cb:
         60:f2:cd:8f:db:4c:10:bc:2d:13:b7:42:84:cc:e0:39:a1:55:
         a2:ca:a2:7e:5a:c9:d6:bc:3c:04:29:02:51:44:f9:63:0f:67:
         21:63:6c:aa:79:b0:f5:0e:1a:3c:07:c6:cb:c7:63:a6:4f:6c:
         d5:e0:38:b3:b9:67:d3:6a:1c:93:24:a0:de:25:e4:6e:10:5e:
         ea:73:a1:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3
NDMzRUIyRTcwHhcNMjYwMTI0MTYzNjU4WhcNMjYwMTMxMTYzNjU4WjAYMRYwFAYD
VQQDDA02OTc0ZjUyYS0xNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxt/EkMrilk+fajeSPzTCrlhZAvkA4nEmwAm3rPMjhJ8O2De3cKonXtyok3+L
JUrQ28ccB3jFRyerLkXlXs173Ete/p1X1Dt5DuWmOVr7tLsWVvOk3VxYtAaL+jf2
zN4YETxWPLf9G8+ZkY0XnAzkMmTjKRX7fS/jXuB+1odtVb+6a36RleocQa5vyLq1
CnuLA52V9FhAXLOAV/k6nRfbqpUP8ibVCGhd51L3Lfj8wV67OaQ5gGGv9HO7/yeq
D/woQyLRhgZ565M6bDu8JGFMALP7Q9tke6ozToadR6310A+3HPeKvwrzpRNjD+wJ
Ca3NHZRcXDKfMnkc2eg05ez26wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtEApTZ
0lPRhiyRKanroKbE7Qw2MB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC
MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT
MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQO5ZC500VrUQySweel3WMGskbljH2zF5r+2D9j1G8ilhtYuwcX26X
e9wP9YclY9pGRbnnBGry2ZocAKU6UTEMskfR9vAkfOpjaaEM5gUV0M2Yc8iUefUA
LdvPwtFkh14ufHQoBZDMSZf6dWKfcV7pPpp0e/HBBern5m8+k3KW2I1EnqdGPluK
7WosbW2kz/1hRL95xC1NE2Y6vUzfEqWe2KnV9x89OREaYsnSFy5RcQbTz8tg8s2P
20wQvC0Tt0KEzOA5oVWiyqJ+WsnWvDwEKQJRRPljD2chY2yqebD1Dho8B8bLx2Om
T2zV4DizuWfTahyTJKDeJeRuEF7qc6FB
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:37:20 2026 by rpki-client