This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
File:                     NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json)
Hash identifier:          GCnPfEWT/WkV38/pSqoz/+NzIUuX6tw3ij4PFp57l1k=
Subject key identifier:   27:48:F9:D9:E4:78:07:A8:61:67:30:87:10:FB:13:E1:BA:F1:1D:30
Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
Certificate issuer:       /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Certificate serial:       097F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
Manifest number:          0978
Signing time:             Sat 24 Jan 2026 19:29:50 +0000
Manifest this update:     Sat 24 Jan 2026 19:29:50 +0000
Manifest next update:     Sat 31 Jan 2026 19:29:50 +0000
Files and hashes:         1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: b961WYTKGQauU5ZGpt2WjZhooIf93jJR6J7eMdZQZu0=)
                          2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: pMMXr/lqWr+5GcVstLkkyd8gkDTgGy1DHQolAjMLixQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
                          rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431 (0x97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
        Validity
            Not Before: Jan 24 19:29:50 2026 GMT
            Not After : Jan 31 19:29:50 2026 GMT
        Subject: CN=69751dae-ec06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:c3:b2:5d:00:d5:56:63:18:ef:c2:9c:54:
                    8c:d2:1e:f2:e5:08:55:81:e4:14:81:cf:2a:3c:94:
                    ad:5a:73:3b:4d:4a:ad:81:1e:5a:5b:63:85:2b:5d:
                    dc:d4:fe:90:a4:9f:53:ef:53:fa:62:ef:c7:14:0d:
                    dc:74:bf:e7:5c:4f:a2:7e:b1:e0:dd:fe:a2:02:ca:
                    b9:29:f6:82:b2:6e:4b:ed:c6:60:d4:32:8e:f6:bd:
                    01:78:54:a9:cc:8f:38:5b:ea:7b:cc:c9:d0:bb:bd:
                    d8:86:a2:88:a0:e2:f9:30:83:3b:11:fa:3f:89:13:
                    09:52:fa:f2:31:b1:35:19:cd:90:54:6c:5b:b1:6b:
                    be:eb:a3:33:21:35:d6:e0:79:34:14:c9:93:22:cd:
                    9e:88:b0:a5:b3:a2:d2:1f:67:cc:44:c1:5c:0b:27:
                    08:94:68:69:02:25:63:66:9e:87:12:d5:12:02:18:
                    5e:90:4c:96:ca:97:c0:15:94:c2:73:db:e0:a1:11:
                    67:4c:3f:51:6a:80:68:61:df:99:9b:96:74:d5:e6:
                    28:12:a1:8e:d2:fb:8b:da:08:32:fd:b5:3f:49:1b:
                    5b:3e:49:4f:a4:ca:29:d6:1e:f9:ba:d5:46:ad:e6:
                    a9:a3:cb:da:f7:59:dc:37:03:d7:54:a7:f4:ab:cb:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:48:F9:D9:E4:78:07:A8:61:67:30:87:10:FB:13:E1:BA:F1:1D:30
            X509v3 Authority Key Identifier:
                keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:26:1d:89:cc:21:e5:7e:6e:ab:2d:86:69:c7:e3:a3:a8:72:
         8c:b5:b2:fd:b0:a0:08:4b:02:82:b3:0d:b2:cf:c6:53:5e:3e:
         8e:e6:89:28:5d:a2:b4:7b:fe:71:de:63:3c:cc:04:31:1b:24:
         e3:3a:c5:37:78:bb:90:48:dd:92:d2:9a:bc:f2:51:e3:71:de:
         53:05:69:2e:c1:c8:6b:f4:91:f7:73:03:b8:3b:5d:a1:9b:be:
         61:78:04:f4:4f:f2:a9:57:32:0c:55:99:4a:4d:ae:2d:8a:88:
         21:93:4c:42:01:b6:91:1d:ca:4f:65:8e:70:57:4c:46:1f:3a:
         d8:3c:94:bb:7f:59:8e:c2:46:9d:68:9d:eb:b8:23:0b:70:05:
         22:3a:31:4d:78:78:a9:5a:8c:a2:13:6a:30:65:30:eb:3a:22:
         79:18:06:92:bd:80:8a:44:27:99:79:7f:79:55:d4:00:9a:38:
         cf:00:bc:a2:11:e0:0b:24:e1:87:3d:ea:95:bf:50:0b:19:52:
         7a:90:34:3d:d7:84:7e:c5:6f:5b:a5:db:ba:c0:65:07:07:25:
         0f:52:f4:01:15:3f:b0:ef:89:cd:60:50:4e:e9:a3:74:72:8a:
         83:7a:4b:15:95:3f:a5:a2:f2:09:11:b4:97:93:a0:21:b8:0a:
         50:c0:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:24 2026 by rpki-client