This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File:                     6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier:          QN1dv13wK97ALhUorYgK3BbEqzyhS1Gpo5ZjkA2x9zU=
Subject key identifier:   49:8D:6D:32:17:65:A0:6E:81:DE:61:2A:EE:0B:37:F7:97:EE:A0:8A
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2AB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number:          2A8C
Signing time:             Sat 24 Jan 2026 15:26:33 +0000
Manifest this update:     Sat 24 Jan 2026 15:26:32 +0000
Manifest next update:     Sat 31 Jan 2026 15:26:32 +0000
Files and hashes:         1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: BRmqRALTKAEYHOQOVnzcoGjEQe+Ai8T0x1bR5GI/f0c=)
                          2: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: xkr6cXGQ/p7K1jYKezf1z+xt8LJrbP87Z5GaO3mC9Iw=)
                          3: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: nsCF4rGbw9XGs9CgJZKLcahJ7vZuzL6jjWzwGBe2QfI=)
                          4: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dA0s4TToOxTxCGWPhL3CMsQZBEq0Isrnu6dBhBWPJ8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10930 (0x2ab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: Jan 24 15:26:32 2026 GMT
            Not After : Jan 31 15:26:32 2026 GMT
        Subject: CN=6974e4a8-2c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:2d:ac:81:6f:09:9c:ce:c8:03:2e:d6:a7:
                    69:db:9d:c2:29:95:24:ac:7d:ca:95:8c:20:c3:24:
                    12:66:90:1a:80:9b:5f:b2:1b:0a:86:66:fa:12:fb:
                    7f:f4:7b:a4:10:c3:e5:4a:d8:61:20:8f:a9:58:7b:
                    ca:ee:b1:87:22:12:d6:65:f0:af:e7:18:5a:3b:34:
                    2f:1c:5f:e5:fe:4d:bc:89:72:1d:84:39:8c:38:41:
                    7f:a7:d2:86:16:d1:87:38:2f:28:49:90:7f:21:a5:
                    29:21:0e:ea:4f:60:45:a1:61:b4:fb:36:4b:1a:ef:
                    c2:a4:66:eb:68:9a:70:e1:4d:66:fc:fc:29:ed:07:
                    4c:b5:d4:b8:da:4c:36:e8:de:3d:47:80:95:35:17:
                    b1:42:0f:1f:ec:fb:35:23:6f:5e:98:9e:ad:9e:17:
                    1e:05:d0:3f:87:2f:34:50:09:9b:6c:3e:55:63:8a:
                    f8:e4:74:66:1a:1b:e4:98:2c:a8:60:d5:87:a6:b1:
                    81:07:0e:f8:86:93:cc:15:3b:1d:0d:b7:0c:80:39:
                    33:36:8e:ab:1a:9d:fd:8e:cc:fb:7d:a4:b3:99:04:
                    71:64:ba:3b:1a:10:b3:ad:5c:07:ba:72:c8:ba:06:
                    44:b1:8c:8b:5c:e5:15:d6:29:00:6e:61:bb:d3:e2:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:6D:32:17:65:A0:6E:81:DE:61:2A:EE:0B:37:F7:97:EE:A0:8A
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7b:36:67:03:78:72:e6:e0:6f:ae:49:33:a0:7d:b6:7a:3c:
         7f:2f:55:ea:a5:4a:1e:b3:d9:65:86:96:3b:d4:4d:18:40:e6:
         9e:2d:4b:7d:82:24:1c:94:45:71:8b:68:2e:69:8c:96:4f:6b:
         23:f6:5a:86:8b:94:c5:9c:ae:91:a0:27:47:3a:88:18:84:65:
         cd:53:88:fb:78:b1:44:49:8a:24:36:e0:72:f3:13:d6:b3:4d:
         de:64:66:8c:dd:9c:3c:a7:1a:27:4e:86:34:87:91:ba:17:5c:
         f1:58:b9:2e:9a:88:3e:9a:f2:29:9d:80:dc:3e:46:7e:71:6f:
         81:cf:fe:04:f8:92:79:79:95:8c:6e:b2:63:b6:e5:56:8f:bd:
         a3:94:79:c9:5e:0d:c5:10:2c:8e:c9:84:88:f2:de:22:98:2b:
         0b:91:0a:fa:5f:f6:e6:7a:fe:6c:42:81:b7:57:49:78:89:cf:
         ca:8b:47:dc:fe:02:04:99:5b:a7:66:dd:f1:d9:21:a5:08:93:
         b3:91:59:a4:44:6c:17:1e:66:d7:b4:26:47:70:14:4a:3e:bb:
         28:5a:ae:24:b3:62:fe:b4:a9:ac:0f:5d:1b:b8:66:5f:6a:b0:
         91:12:37:91:da:92:19:a5:12:25:1e:e4:69:92:7c:bf:d9:ed:
         1e:34:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:02 2026 by rpki-client