This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
File:                     NpBAbdMULvZPdhZKfyJsCMwwG1M.mft (raw, json)
Hash identifier:          QYzhJcTR/yCUXNdWc5/AMtKfBjxaTP3W/5O9BW9Yl/0=
Subject key identifier:   C5:5E:3C:74:D0:75:35:24:BA:02:08:1E:7C:E4:0C:8A:51:71:54:A1
Authority key identifier: 36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53
Certificate issuer:       /CN=A91A0807/serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
Manifest number:          1F
Signing time:             Sun 25 Jan 2026 06:53:24 +0000
Manifest this update:     Sun 25 Jan 2026 06:53:24 +0000
Manifest next update:     Sun 01 Feb 2026 06:53:24 +0000
Files and hashes:         1: NpBAbdMULvZPdhZKfyJsCMwwG1M.crl (hash: MwYWmp0hpY1kNcfN+5Ay38SRa+/iZ7mBuWEAFohT040=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0807, serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
        Validity
            Not Before: Jan 25 06:53:24 2026 GMT
            Not After : Feb  1 06:53:24 2026 GMT
        Subject: CN=6975bde4-1c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:f0:7a:b1:9c:a6:b0:2a:70:8c:61:36:c7:
                    63:f2:af:11:dd:b7:ac:8a:47:8e:51:d9:75:b5:ca:
                    c4:bc:b2:87:50:1f:84:a1:ae:65:91:76:f8:16:1a:
                    48:ae:21:33:c7:29:e3:14:96:0f:70:b1:a3:66:39:
                    f1:63:47:53:d1:02:a0:e2:58:b8:7d:bd:1d:2f:2a:
                    41:35:56:15:b4:b8:25:bd:73:73:04:8b:8d:17:6f:
                    a0:55:bb:c8:40:23:10:b6:66:60:4d:74:72:a3:1b:
                    6d:b5:01:d4:6d:cf:30:46:8d:de:4b:01:ef:b3:0f:
                    a9:36:a5:c8:21:0d:af:f9:5e:3c:1f:3e:f3:43:51:
                    10:33:75:ad:90:03:46:b8:d9:ac:40:e6:1a:5b:8b:
                    73:34:d6:fd:f0:32:82:c2:d2:8c:91:9c:98:ac:a5:
                    e6:8e:db:3a:8b:1f:d0:7b:25:09:89:55:05:63:55:
                    2a:e4:69:4f:0b:9b:3f:cb:e5:14:8f:2e:ad:f9:a4:
                    b2:f1:58:34:ac:48:d9:57:bf:b4:a3:58:3d:08:e9:
                    1f:d3:30:aa:eb:08:38:39:16:ca:aa:a9:f2:d1:5a:
                    31:9a:0a:db:e9:41:89:26:93:5e:db:ed:67:ea:ae:
                    76:40:96:33:b7:69:12:c6:1b:43:5d:29:dc:f8:0d:
                    9e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5E:3C:74:D0:75:35:24:BA:02:08:1E:7C:E4:0C:8A:51:71:54:A1
            X509v3 Authority Key Identifier:
                keyid:36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9b:66:68:f1:28:3e:2e:d6:d5:82:54:ac:3d:7c:43:71:a6:
         a8:9b:ff:1e:02:be:a9:bc:81:af:a9:04:01:41:9d:cb:44:52:
         8e:b8:53:cf:76:af:79:ab:c5:92:de:ef:87:ce:35:3e:8a:f1:
         12:24:8e:66:03:73:39:70:9f:e3:01:f9:68:a5:37:1f:f3:30:
         39:07:56:86:7a:7d:9c:f6:e0:8f:82:f9:fd:d2:62:60:4c:e5:
         dd:38:42:96:0f:8c:2f:12:a0:f4:d5:41:e6:b4:2d:a7:ef:f4:
         6d:8d:5d:5c:77:60:dd:73:45:ba:3d:0c:a2:bf:95:fc:28:7e:
         f3:02:02:03:9f:8b:b2:9d:0a:9d:06:53:41:38:9b:ea:b9:96:
         e8:23:63:69:59:ae:ea:5d:96:d5:5b:37:2d:14:7d:1c:d8:e0:
         9e:1a:17:8a:e9:3b:a8:62:38:55:dd:0c:45:94:c9:05:24:b7:
         69:5a:c8:ee:77:98:3b:8a:4f:9a:e5:bb:a3:7b:55:13:eb:0f:
         11:90:a9:61:fb:73:7e:1e:9e:82:a4:75:bd:1b:94:8f:5d:fd:
         76:ce:24:50:ac:f5:bc:98:6d:1e:b5:ec:33:08:67:e1:10:05:
         c4:b2:ff:df:23:24:5a:fb:ac:27:b9:f2:45:5d:b5:4b:54:52:
         3e:51:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:45:40 2026 by rpki-client