This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
File:                     NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json)
Hash identifier:          p+QvpIczmgqFBFzw7kp2V1RdAOnglwInntv7pRFl9pE=
Subject key identifier:   C8:93:4B:04:85:74:B9:64:85:75:1D:77:5A:3D:F1:F3:3C:B0:26:81
Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
Certificate issuer:       /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Certificate serial:       19A4
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
Manifest number:          4BA7
Signing time:             Sat 24 Jan 2026 15:14:14 +0000
Manifest this update:     Sat 24 Jan 2026 15:14:13 +0000
Manifest next update:     Sat 31 Jan 2026 15:14:13 +0000
Files and hashes:         1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: Qjm4usESx1YEWRP2Bjbl8GI89cr3422Pv3xJ4qri8U4=)
                          2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6564 (0x19a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
        Validity
            Not Before: Jan 24 15:14:13 2026 GMT
            Not After : Jan 31 15:14:13 2026 GMT
        Subject: CN=6974e1c5-a4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:67:77:91:27:27:d7:40:f5:d8:47:84:37:
                    d8:17:a8:a8:ff:14:6f:02:36:c2:5b:4b:9a:f0:f9:
                    dc:df:91:25:0a:c8:2f:22:ed:1b:ea:60:d7:e3:3f:
                    c4:8c:9a:b8:41:0c:34:f2:49:f8:2d:30:db:f6:72:
                    b6:31:6e:fd:e6:9c:51:68:2b:48:90:de:b7:28:02:
                    3b:3d:cb:63:ac:7e:66:7b:38:a4:d1:af:1c:ee:22:
                    fb:c7:71:22:6f:d0:73:76:db:c3:af:9f:bc:59:4a:
                    81:0d:c7:df:ac:64:3d:8a:d8:0b:ea:fd:ff:a0:50:
                    9c:31:85:1b:22:96:90:e3:b0:34:b8:0f:7f:5c:ef:
                    8f:4e:f5:4a:a7:f6:0c:49:2a:c0:ac:3c:c1:8f:16:
                    3c:b5:b8:53:89:87:33:ad:9b:ba:8d:41:3d:7f:7c:
                    0d:92:6e:19:1d:db:3f:62:78:91:e0:3d:61:ac:b1:
                    9e:6d:e0:13:cc:5d:42:0c:88:3c:df:6f:63:05:c2:
                    bc:d0:15:75:94:8c:05:ec:af:fd:5b:0e:e7:85:69:
                    41:70:d1:5f:5d:72:25:cf:dd:96:f1:ee:28:15:09:
                    6f:2d:2c:60:d8:b4:98:b3:b7:b6:74:87:54:b7:7c:
                    ef:3f:2f:12:1f:ea:ff:d7:da:02:26:e6:0f:6d:4f:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:93:4B:04:85:74:B9:64:85:75:1D:77:5A:3D:F1:F3:3C:B0:26:81
            X509v3 Authority Key Identifier:
                keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:8b:82:b9:44:97:52:57:8b:50:73:0b:d2:0c:52:a4:7b:
         d2:dc:d0:2a:2d:c3:49:34:f1:de:75:94:54:ae:06:90:4f:68:
         43:b2:33:4e:93:85:32:5d:4f:8e:05:4a:33:51:1f:cb:9c:24:
         67:a2:1b:1e:1f:d4:d6:ee:46:89:e4:1c:11:9e:0e:e0:30:45:
         41:f3:4b:4b:da:bd:35:a6:67:fc:4d:84:ff:78:ce:27:31:c3:
         32:56:8f:49:5c:85:76:2f:70:3a:b1:93:ef:cb:78:e2:9c:6c:
         f3:91:0f:41:34:78:14:54:f1:3a:87:f5:32:91:f0:b4:e8:cd:
         3f:85:70:56:36:ae:5e:77:f3:72:33:45:a1:b4:8e:15:dd:41:
         42:5e:06:3f:20:39:00:7a:63:9f:a5:8f:43:ee:05:e3:13:9a:
         ca:d6:72:bc:16:85:44:ec:10:c8:03:3b:76:fe:3b:9b:a5:d0:
         01:10:f9:61:59:6a:ca:cb:2d:54:16:8f:55:36:e2:36:c0:95:
         36:d7:47:f9:31:91:ed:02:83:64:98:6d:64:98:00:c3:34:61:
         44:e0:7a:0c:25:bb:2b:20:9b:d7:ce:d8:2d:ae:a7:40:cf:05:
         8a:87:e9:85:c4:c3:b9:58:17:49:17:ee:ec:49:94:07:68:b5:
         c0:85:40:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey
NUQ3RTE2RDgwHhcNMjYwMTI0MTUxNDEzWhcNMjYwMTMxMTUxNDEzWjAYMRYwFAYD
VQQDDA02OTc0ZTFjNS1hNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlhnd5EnJ9dA9dhHhDfYF6io/xRvAjbCW0ua8Pnc35ElCsgvIu0b6mDX4z/E
jJq4QQw08kn4LTDb9nK2MW795pxRaCtIkN63KAI7PctjrH5mezik0a8c7iL7x3Ei
b9BzdtvDr5+8WUqBDcffrGQ9itgL6v3/oFCcMYUbIpaQ47A0uA9/XO+PTvVKp/YM
SSrArDzBjxY8tbhTiYczrZu6jUE9f3wNkm4ZHds/YniR4D1hrLGebeATzF1CDIg8
329jBcK80BV1lIwF7K/9Ww7nhWlBcNFfXXIlz92W8e4oFQlvLSxg2LSYs7e2dIdU
t3zvPy8SH+r/19oCJuYPbU9UKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiTSwSF
dLlkhXUdd1o98fM8sCaBMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha
TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB78IuCuUSXUleLUHML0gxSpHvS3NAqLcNJNPHedZRUrgaQT2hDsjNO
k4UyXU+OBUozUR/LnCRnohseH9TW7kaJ5BwRng7gMEVB80tL2r01pmf8TYT/eM4n
McMyVo9JXIV2L3A6sZPvy3jinGzzkQ9BNHgUVPE6h/UykfC06M0/hXBWNq5ed/Ny
M0WhtI4V3UFCXgY/IDkAemOfpY9D7gXjE5rK1nK8FoVE7BDIAzt2/jubpdABEPlh
WWrKyy1UFo9VNuI2wJU210f5MZHtAoNkmG1kmADDNGFE4HoMJbsrIJvXztgtrqdA
zwWKh+mFxMO5WBdJF+7sSZQHaLXAhUDI
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:17 2026 by rpki-client