This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
File:                     nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json)
Hash identifier:          GUvktIXV3x59porVXQHcbuReh2k4dx83z2pvXQHetLM=
Subject key identifier:   2E:67:58:FD:F9:D7:C8:70:46:E9:87:AE:0B:5F:07:9F:B2:78:EE:38
Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
Certificate issuer:       /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
Manifest number:          015C
Signing time:             Fri 23 Jan 2026 03:14:35 +0000
Manifest this update:     Fri 23 Jan 2026 03:14:34 +0000
Manifest next update:     Fri 30 Jan 2026 03:14:34 +0000
Files and hashes:         1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: n4G4IKB83N9qmheR3eexuK1hosjGV9nqrmvQAXcvu5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
        Validity
            Not Before: Jan 23 03:14:34 2026 GMT
            Not After : Jan 30 03:14:34 2026 GMT
        Subject: CN=6972e79b-1552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:67:17:52:ee:89:03:d9:5e:b6:31:29:31:0a:
                    3f:1e:39:e0:63:b8:3e:be:69:e1:68:98:5d:66:64:
                    01:46:e4:de:63:4a:40:43:e0:1f:dc:91:d0:a0:2a:
                    96:da:8a:31:b0:50:1a:d0:28:d0:d8:df:3c:af:00:
                    ce:b4:71:a4:2a:b9:b3:d5:14:3f:13:3f:f9:d9:da:
                    07:ed:25:9e:dd:c4:98:fe:27:40:df:31:a9:27:9f:
                    2e:2c:6a:d1:f3:db:6b:47:b1:8b:a7:2d:2a:b3:37:
                    9e:b0:34:af:a9:83:ac:df:f5:da:6d:9f:7f:0b:52:
                    8d:bd:c0:a4:24:ce:c5:f6:16:81:08:b2:4c:fe:8e:
                    41:56:cf:d1:5d:ba:96:58:f8:9a:6d:1d:94:35:e1:
                    a9:01:d1:14:92:b0:37:21:dd:e4:f9:60:b5:94:c7:
                    37:82:63:70:fa:26:d9:61:d2:5e:1e:cd:27:bb:86:
                    5b:ef:bf:15:b5:f2:96:74:ca:7a:26:44:37:e8:db:
                    9b:20:1f:55:f1:ae:86:c7:2f:1e:2e:9f:de:6a:be:
                    f2:62:2b:d4:7c:6e:cf:41:f3:8b:0d:32:30:64:a0:
                    c5:fd:99:ea:47:8f:1d:01:10:03:c5:34:2f:41:59:
                    71:e7:5e:84:c3:3b:e1:99:7e:0d:e6:a3:fc:2f:3a:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:67:58:FD:F9:D7:C8:70:46:E9:87:AE:0B:5F:07:9F:B2:78:EE:38
            X509v3 Authority Key Identifier:
                keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:dc:db:ae:2c:0d:54:c6:d5:b6:7c:ea:6f:37:46:7a:d5:4c:
         2d:c2:0e:8e:eb:38:0f:db:fb:aa:a2:e0:1c:00:e9:4a:76:03:
         4c:85:e8:9b:f9:90:f7:ac:e6:a3:cc:76:24:86:c2:97:d4:63:
         12:ca:5a:78:21:ce:57:a5:0d:e8:d4:d7:35:9b:37:fa:bb:e2:
         07:15:d5:b9:57:75:4f:84:4c:0a:89:95:5a:e6:d1:37:53:6d:
         86:ea:63:44:9d:7d:d5:b5:5e:27:db:66:31:78:c9:5c:89:15:
         72:eb:80:19:a3:4a:7e:ec:2c:18:09:2d:01:f3:97:de:09:ea:
         34:ae:8b:60:32:2f:67:d9:6a:91:9c:60:e6:12:4f:22:7c:9f:
         e3:4c:f0:82:eb:e7:6d:55:b3:4c:be:cc:e1:d3:16:f7:4f:f9:
         1f:b8:04:64:22:96:3a:9d:01:3f:25:0c:75:c1:87:45:f1:76:
         91:31:22:ad:be:57:1b:64:ca:7a:cf:95:2b:82:ca:95:d3:d3:
         ef:d9:0a:c0:9a:55:10:bc:e7:96:37:c7:68:11:d4:00:7c:5d:
         ad:45:c1:28:8b:89:9d:81:b1:2a:07:49:81:17:12:33:3c:c9:
         44:df:38:02:78:41:50:1d:ea:25:04:af:b2:8c:7f:9e:2b:89:
         03:47:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:07 2026 by rpki-client