This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File:                     ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier:          oTBpgVwKMK7en82mNlCdnbQXR5zVZDAWlZnOdRoXstg=
Subject key identifier:   7A:8E:E5:0B:43:66:0B:25:F5:E3:3F:42:E2:88:FB:45:8A:51:F4:C1
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       3775
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number:          35F9
Signing time:             Sat 24 Jan 2026 14:44:06 +0000
Manifest this update:     Sat 24 Jan 2026 14:44:05 +0000
Manifest next update:     Sat 31 Jan 2026 14:44:05 +0000
Files and hashes:         1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: kIuBPmzwtqTxmwnBH+9nDiYlXfS+TB1Dwaqhi9C1I+k=)
                          2: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: Pysow4ghhE6bNtWAkyi1inOqPNBVAlZxtG0k9FkRDpM=)
                          3: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: hk6nfRNdxkr1KrGE/tfXLkIoFCaShIIlre48Dkw+60k=)
                          4: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: JRI97yoxRtupHfmn7kbQDCY5sz6BBIJOh/q9HLp8tPI=)
                          5: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: 74RIIXCsVyk2LOqxXGG8myKMnT9xwaL2IEwmBulTtc4=)
                          6: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: Qoz5g9368HMZWctAVVNXY9CZ9LyOlyI2/eGHTTT7kQw=)
                          7: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: GJ+Ts94sVlUdI4E9xrQTvfVMrj+KCnN2xtF35+3yCvE=)
                          8: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: hFXanv2FdjB0oerr/Ni9RmWLKXd7bj75bYHKTp5JZ4U=)
                          9: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: EUm4AnmfuJxU75sTZEUXibkajEE5FVqoIFPKGh69ArU=)
                          10: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: ukv1HUDNVDJbCJlkSDyGbdgGzyB74+5Ji2qFWgrv0gw=)
                          11: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: YIkgFm4YlQ3B4lEIbOf0SksB4/x97E+3vlPXwWTeW9Y=)
                          12: 691D0462E6FD11F09102F531686F56BC.roa (hash: ORCzm8lk1uiPL8hBhaKfWr2fmgLgL6/98Mji1a+L420=)
                          13: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: Tvw2f69b+5p+ID20B8iBZZ0yBfURv9eNZRD114TIL4I=)
                          14: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: RZHpITklMqhnuO90bEeP3i7RWRtO5TJRoQwAU5BGgUs=)
                          15: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: /p/aYFDXmU+p5r2x/x59lnZ8e1gVGwdb3q9zI0rbkwk=)
                          16: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: jlbUlIXnT9veJGusBLS+x09R8IWreW5sDY2cRLkBosA=)
                          17: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: VYBHve/PNmOFeIWgiVN/Red7+4ngw1/OUZ+8fRDI5rI=)
                          18: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vzBcTdf96+UTQqQZlkeYwtQci7kemGbUS01k0jfvWtI=)
                          19: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: DUYEU2WPRgGRjSa+GBl8Qamn18toiw7tspgbnam3lYo=)
                          20: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: irNVJAgK3pBegIwIYQHvfU2ICa37uezrCrR7Sshxk/Y=)
                          21: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: 89eEUpRQHSJ8X1lImXGmURAImfIF1FtpfbrbpBLEmDo=)
                          22: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: idSl8lJvkqdSo60nq2wum68o9p4rKFmDbGlEVDUP4DE=)
                          23: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: C9sOI6EfTgRnMQGNjlrtl3KFe7JPwkVRiva430VVNhg=)
                          24: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: UStQZ3E5ENhOJAnKZAoPf8pnLHZK3+vt2+bwJ7bo508=)
                          25: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: jV1pO0tJQkm8tDF//+xAb/Vr8QQlVyReb+p4WbFsB4g=)
                          26: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: hCAJoif7R0PdtafhhCqVg3AWh/fUgT/PZ22s2qQ33mA=)
                          27: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: VrbZ7ZecbNcImk9iVkkzXLKwbDb+F2iSfzr14g+V7aQ=)
                          28: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: JqpaA6uavzScEzQE05g7FN0bGDgZqNMIyby4mXtlKkU=)
                          29: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: va72E7xgUhipybtVeUXFFu66WOtMudWBDnK3BZLcOzk=)
                          30: 35E95924844811EAB301615FC4F9AE02.roa (hash: LgoFbTvnCYGxtb9l3zKpoNxXJ+KSjB/JRV9oy3sEYvk=)
                          31: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: twGH4Ti0Hxo3XFvPXLG4LeJ5bIvmDJLFNJkw3EGUZio=)
                          32: 35575C68844811EAB301615FC4F9AE02.roa (hash: IpJzY/E3RfTD/Jty42OF5cBR7XD15VMXMCEpMRRL3LU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14197 (0x3775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Jan 24 14:44:05 2026 GMT
            Not After : Jan 31 14:44:05 2026 GMT
        Subject: CN=6974dab6-bb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:bd:61:e0:a4:96:5c:51:15:6c:7e:71:7f:
                    61:a9:20:13:55:6b:44:2f:e7:86:c4:68:d5:51:28:
                    ee:6c:5f:89:c8:b6:96:a6:ae:80:f8:ea:3e:4c:c7:
                    5e:3c:ae:e9:b7:02:5f:63:a7:36:b2:d0:a3:91:68:
                    17:05:ae:9b:84:1f:d9:08:35:69:e0:6e:f5:68:45:
                    9f:c7:ec:32:74:76:6f:ff:7e:86:9a:d4:20:6f:08:
                    cc:f1:44:b5:dc:a0:25:e7:40:8b:85:cf:8a:d5:a4:
                    bf:d0:87:e8:ab:b0:71:dd:c2:fd:0c:2c:74:09:0c:
                    fd:0c:ba:7e:44:07:24:c0:09:d6:9f:c6:b9:c7:1a:
                    ad:a4:14:05:74:f4:32:3f:18:87:c3:58:85:17:80:
                    45:f1:11:74:54:e1:f6:5b:d4:b3:8b:4b:0e:78:70:
                    0a:d1:e5:da:96:2b:97:8b:5a:37:74:1e:31:68:5b:
                    f4:be:80:e5:be:f0:22:27:0e:69:80:72:e4:05:0e:
                    20:ab:22:87:b7:e8:bc:aa:02:83:86:86:31:6f:a0:
                    8f:65:4f:d0:91:a6:0b:83:f8:5f:24:d6:9f:89:45:
                    c6:7d:74:fe:5a:af:19:a7:fa:54:e5:c7:b9:3a:9e:
                    98:c2:31:e3:3c:42:70:c1:bd:60:50:9c:8f:f2:9d:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8E:E5:0B:43:66:0B:25:F5:E3:3F:42:E2:88:FB:45:8A:51:F4:C1
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:77:dd:17:0e:c6:89:20:eb:18:fa:b8:34:88:7d:bd:be:cc:
         47:cc:a1:b5:34:80:a2:7f:48:6e:5f:f3:67:2d:80:6e:06:8c:
         e8:a7:a0:a1:48:21:7e:40:d8:50:52:77:02:34:b9:63:7e:8a:
         47:43:e7:57:56:d7:cb:69:0f:43:63:b9:3f:aa:2b:13:6f:91:
         38:f4:d3:91:6e:97:da:9c:ef:fb:db:9c:0a:4c:7f:22:eb:2a:
         c1:f1:0b:84:7a:3d:9a:e7:8b:ed:2d:64:ea:a9:40:f7:ea:0c:
         1b:6b:f1:64:3c:2d:d5:b6:a0:b7:cb:66:4c:e6:16:cd:aa:c6:
         d7:e2:c6:e1:82:a7:52:67:10:82:82:63:4b:e3:2b:1d:21:ab:
         32:58:e3:54:7d:db:c3:36:c0:3d:3b:7e:be:a4:e8:eb:b4:e9:
         67:97:f4:ac:6f:89:32:48:e1:a6:0c:a0:6e:8a:0e:6d:2c:0f:
         2e:54:52:3a:56:1e:85:62:d7:dc:53:73:6b:a3:50:aa:9b:0f:
         bf:50:e4:43:e4:f1:0b:82:fe:b7:9d:8b:5d:a2:c5:e9:1a:63:
         5c:fd:aa:c3:1b:0e:1f:33:c0:81:15:46:8d:03:71:19:e6:c3:
         24:03:c3:27:8c:21:11:6e:2a:db:77:2d:9d:67:20:97:ba:a3:
         ec:3c:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:45:52 2026 by rpki-client