This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
File:                     NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json)
Hash identifier:          PVElw5R1tRahNdOZEgfCHrS/Ihs2AT84Mu5OMjX8kqA=
Subject key identifier:   38:62:1A:8D:25:F8:10:AA:1C:28:FA:E1:94:D1:13:B3:29:56:81:57
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Certificate issuer:       /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
Manifest number:          63
Signing time:             Sun 25 Jan 2026 06:09:42 +0000
Manifest this update:     Sun 25 Jan 2026 06:09:41 +0000
Manifest next update:     Sun 01 Feb 2026 06:09:41 +0000
Files and hashes:         1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: WYHqJkD3bD/+2C2LS12kZ/+ZFVMfGOJfqCSeYqZ8hrg=)
                          2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: YXoQ9r4tej6CnG1FdK26UeZMqNkqakqvZSbUkeab5Z8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
                          rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
        Validity
            Not Before: Jan 25 06:09:41 2026 GMT
            Not After : Feb  1 06:09:41 2026 GMT
        Subject: CN=6975b3a6-652c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:03:8e:c0:3b:32:c1:99:8e:5e:54:e5:aa:
                    2b:53:f2:9d:ad:7a:d2:59:4f:8c:82:05:d4:2e:d1:
                    39:1e:8b:fd:24:98:87:a1:26:2f:c0:ed:08:ff:1e:
                    7c:ce:ab:91:2f:40:8d:09:61:f7:ab:a9:a1:06:aa:
                    28:15:ec:83:d0:45:51:f1:76:e5:fb:3c:76:72:5d:
                    c8:bb:14:3d:ba:38:00:c1:3e:26:13:72:c2:3c:2b:
                    9c:6f:55:b9:a8:8d:cd:c2:e7:b3:f0:cd:23:87:ae:
                    9a:f9:46:b6:78:ed:3f:c2:16:e7:f9:09:6e:27:0d:
                    90:0c:9a:5c:94:7a:2b:eb:65:1a:94:55:5e:e7:57:
                    c5:e5:1f:8e:c2:f0:28:d0:7d:b3:bb:4e:61:bf:21:
                    70:04:4a:1e:b6:2f:04:eb:95:f3:f4:86:fa:a5:bc:
                    43:f5:d4:6e:2a:0b:76:28:52:e5:e6:18:06:fc:cc:
                    b4:01:05:af:07:91:d9:eb:0f:ec:f9:90:dc:35:f7:
                    1a:16:c5:c4:d2:d5:f6:ad:5a:19:f5:5a:2c:60:cf:
                    77:cd:23:73:85:90:11:6b:f8:04:1b:62:bf:ac:5e:
                    7f:f9:50:49:89:7a:e9:fd:a9:84:93:93:81:58:79:
                    b3:90:18:5f:30:82:96:44:37:0b:4c:ff:53:63:40:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:62:1A:8D:25:F8:10:AA:1C:28:FA:E1:94:D1:13:B3:29:56:81:57
            X509v3 Authority Key Identifier:
                keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:1f:9c:94:94:00:cc:6c:e2:4d:1d:c0:f4:db:61:c8:28:
         41:b9:c9:f7:2b:48:b7:fc:e2:d3:38:72:f3:8e:d7:5b:31:2d:
         48:ac:d1:bc:eb:a6:64:1e:44:ce:87:8b:07:57:01:66:a5:cd:
         c1:9d:0c:48:d5:c0:f4:f0:39:ff:21:4e:66:84:bf:95:19:93:
         89:eb:e7:29:74:1a:59:20:60:8a:f9:e7:bb:09:06:69:27:ac:
         a5:ef:06:b3:55:c5:89:03:55:bc:45:3c:90:30:8a:7d:3c:ee:
         47:f4:91:91:60:1d:7e:a9:0d:9a:1d:5d:fa:ee:7c:97:34:ad:
         e8:a5:b4:71:9c:3b:1b:e7:c9:16:0e:2e:09:b1:61:c8:d2:d5:
         51:d7:98:5f:1e:f0:fa:8b:b8:e1:1f:d5:2f:1d:b8:d5:d3:88:
         c4:b7:d5:af:34:2a:ec:65:17:47:95:58:5e:30:9a:d3:65:50:
         88:09:bf:fe:95:37:81:e3:b9:bc:79:8a:34:e2:55:3d:00:3c:
         5a:1a:ff:e6:36:6d:0e:7b:7c:3c:01:1a:b7:ae:35:60:18:17:
         8f:bd:7a:6d:d3:da:76:96:38:15:fc:cc:54:cc:d4:aa:a9:bf:
         5c:17:d4:cd:e7:8e:74:32:77:7d:b3:21:6f:d1:7c:42:cc:a1:
         60:cd:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:12:36 2026 by rpki-client