This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
File:                     asoRKbI4x6HxeRt1zUmta9at-nc.mft (raw, json)
Hash identifier:          qDz/7TmiuU3iksLhPZme6hQ/jLRvF3GjsltXLTUV5N0=
Subject key identifier:   84:2A:FA:1D:DA:1D:D5:08:86:70:49:E2:E2:71:A0:DF:01:AF:6B:7B
Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Certificate issuer:       /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
Manifest number:          5A
Signing time:             Fri 23 Jan 2026 06:11:54 +0000
Manifest this update:     Fri 23 Jan 2026 06:11:53 +0000
Manifest next update:     Fri 30 Jan 2026 06:11:53 +0000
Files and hashes:         1: asoRKbI4x6HxeRt1zUmta9at-nc.crl (hash: 4qy2QNHxcpbzku1EkT9QhPeXklXLEXOXskQ+9p1Fitg=)
                          2: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (hash: rZBaMYyqsgdUbj2Kc1VUQWs/4+3J/zfoVLydL5l2mZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
        Validity
            Not Before: Jan 23 06:11:53 2026 GMT
            Not After : Jan 30 06:11:53 2026 GMT
        Subject: CN=6973112a-64f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3b:e1:61:61:f6:de:4d:36:71:41:d0:91:11:
                    eb:3e:de:83:57:bb:61:67:2c:64:12:76:ac:4c:aa:
                    73:af:ae:a8:9a:64:27:82:9f:17:fd:9f:67:32:37:
                    9f:c5:ed:aa:f0:02:e5:4e:b2:6c:22:21:72:53:72:
                    a9:9e:6d:8e:9a:ed:35:bd:79:ca:da:23:8f:50:92:
                    9f:35:17:45:52:6d:4f:30:d6:63:07:81:97:a2:66:
                    a3:ea:20:ec:01:51:af:ef:1d:0a:35:43:9e:73:a4:
                    4f:39:53:ee:ee:12:a9:85:9d:70:d1:72:cf:20:3f:
                    12:05:b0:ff:15:d7:4e:75:53:7c:5e:32:7b:e8:24:
                    21:f7:f1:44:f3:fb:3e:2d:22:32:8e:68:dd:23:ee:
                    c1:fd:44:65:a5:c9:e9:71:42:d3:dd:db:79:d6:45:
                    43:70:f2:a5:bf:99:3c:45:27:d7:24:4a:b9:44:7a:
                    11:ef:64:d9:24:23:a9:30:39:00:7b:c6:fe:e7:99:
                    df:82:8d:a9:71:6d:b4:1d:65:45:50:b2:f6:7e:bb:
                    6b:db:0d:cf:91:e4:4a:1c:d9:c3:bd:20:34:09:51:
                    ca:4e:45:e5:bb:2c:e8:90:5e:64:2d:64:57:1f:e1:
                    8f:4f:c7:6c:e3:36:ef:6b:c4:cd:ae:45:77:99:4b:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2A:FA:1D:DA:1D:D5:08:86:70:49:E2:E2:71:A0:DF:01:AF:6B:7B
            X509v3 Authority Key Identifier:
                keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fa:17:d2:0b:da:cd:06:da:0b:34:23:f8:dc:87:8f:32:f6:
         a8:9b:08:c3:0f:06:35:10:11:ae:8f:7d:07:32:f4:b5:6e:cf:
         29:f3:17:98:be:22:82:d2:85:5f:72:8c:1e:65:14:3c:2c:da:
         7e:fa:42:df:6c:25:f7:4d:8e:ae:ef:e9:11:16:2d:4f:3f:3d:
         a4:76:49:10:4a:40:68:3c:19:bc:c0:92:ea:59:59:8d:37:a8:
         e6:db:17:ef:36:cb:2c:1d:8c:be:f9:9f:bc:f2:43:e6:29:ca:
         f4:ad:6c:fa:bb:9a:f0:dc:91:99:ca:2e:9e:8d:d8:f9:74:7a:
         13:68:f5:3f:27:a7:ee:3d:3c:32:35:90:72:e3:22:6b:4c:80:
         fe:e2:ef:31:69:eb:05:28:7f:14:88:4b:48:74:ec:29:9a:48:
         03:67:26:a0:ce:77:ac:c3:e0:86:35:0e:bb:0a:05:9e:f8:c9:
         52:7a:9b:ec:e1:6d:b7:85:37:b0:3f:8d:58:14:08:70:ef:19:
         b0:f2:b1:58:a1:41:d1:c5:eb:e1:17:8e:36:a9:91:df:3d:7f:
         de:f7:57:cf:00:72:c8:d0:3f:4a:df:32:c7:b2:c6:3a:83:b5:
         d4:9f:a0:61:31:7f:b8:ad:81:6f:80:35:7b:9e:69:ee:2a:5f:
         24:05:aa:61
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NkY1NjExMC8GA1UEBRMoNkFDQTExMjlCMjM4QzdBMUYxNzkxQjc1Q0Q0OUFENkJE
NkFERkE3NzAeFw0yNjAxMjMwNjExNTNaFw0yNjAxMzAwNjExNTNaMBgxFjAUBgNV
BAMMDTY5NzMxMTJhLTY0ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxO+FhYfbeTTZxQdCREes+3oNXu2FnLGQSdqxMqnOvrqiaZCeCnxf9n2cyN5/F
7arwAuVOsmwiIXJTcqmebY6a7TW9ecraI49Qkp81F0VSbU8w1mMHgZeiZqPqIOwB
Ua/vHQo1Q55zpE85U+7uEqmFnXDRcs8gPxIFsP8V1051U3xeMnvoJCH38UTz+z4t
IjKOaN0j7sH9RGWlyelxQtPd23nWRUNw8qW/mTxFJ9ckSrlEehHvZNkkI6kwOQB7
xv7nmd+CjalxbbQdZUVQsvZ+u2vbDc+R5Eoc2cO9IDQJUcpOReW7LOiQXmQtZFcf
4Y9Px2zjNu9rxM2uRXeZS3vjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhCr6Hdod
1QiGcEni4nGg3wGva3swHwYDVR0jBBgwFoAUasoRKbI4x6HxeRt1zUmta9at+ncw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2LzkxM0NBNkU4NkU4
ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZIeGVSdDF6VW10YTlhdC1u
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYXNvUktiSTR4Nkh4ZVJ0MXpVbXRhOWF0LW5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2
RjU2LzkxM0NBNkU4NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZI
eGVSdDF6VW10YTlhdC1uYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKb6F9IL2s0G2gs0I/jch48y9qibCMMPBjUQEa6PfQcy9LVuzynzF5i+
IoLShV9yjB5lFDws2n76Qt9sJfdNjq7v6REWLU8/PaR2SRBKQGg8GbzAkupZWY03
qObbF+82yywdjL75n7zyQ+YpyvStbPq7mvDckZnKLp6N2Pl0ehNo9T8np+49PDI1
kHLjImtMgP7i7zFp6wUofxSIS0h07CmaSANnJqDOd6zD4IY1DrsKBZ74yVJ6m+zh
bbeFN7A/jVgUCHDvGbDysVihQdHF6+EXjjapkd89f973V88AcsjQP0rfMseyxjqD
tdSfoGExf7itgW+ANXueae4qXyQFqmE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:28 2026 by rpki-client