This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
File:                     N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json)
Hash identifier:          wCBHhZtQPqw8rnkLWI/t9SAKwDR9MavLqBctaIliY/k=
Subject key identifier:   8C:A3:D1:63:03:E9:A2:4A:01:92:38:A7:F8:FC:13:63:D6:B9:AA:04
Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61
Certificate issuer:       /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61
Certificate serial:       17EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
Manifest number:          53FC
Signing time:             Sat 24 Jan 2026 14:58:19 +0000
Manifest this update:     Sat 24 Jan 2026 14:58:18 +0000
Manifest next update:     Sat 31 Jan 2026 14:58:18 +0000
Files and hashes:         1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: MQGSrvvFrdRQBhonG1kcMz5P0K4tGwKQKKjE6RlI3/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl
                          rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6122 (0x17ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B42CA, serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61
        Validity
            Not Before: Jan 24 14:58:18 2026 GMT
            Not After : Jan 31 14:58:18 2026 GMT
        Subject: CN=6974de0b-5808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:55:21:c4:6b:61:5d:bf:24:15:23:05:c7:
                    b5:6e:60:80:f5:21:1c:cf:f3:e2:3d:ac:be:2e:70:
                    ce:41:49:33:c8:b6:bd:94:a5:e1:84:f8:8e:52:db:
                    db:1c:ec:99:34:07:57:87:61:25:0b:66:88:b4:45:
                    c8:d9:f0:ed:59:04:87:84:1f:d9:06:37:fd:95:47:
                    fc:4d:c7:11:17:b0:6a:fe:9b:3a:10:51:a1:a2:1f:
                    86:ae:d2:a5:40:69:41:e9:a4:cb:13:2b:36:d9:b7:
                    f2:52:99:38:45:f2:ec:b3:fe:f6:eb:a8:1b:70:20:
                    76:a3:b8:e4:6b:71:9c:10:a5:b7:59:4f:e0:ba:56:
                    8d:b4:48:f8:61:24:11:ae:2d:1f:0d:88:3b:ac:bb:
                    dd:83:7b:32:67:dd:84:f2:7b:76:d6:1f:a2:a5:82:
                    af:42:b9:83:de:17:7a:24:e5:04:94:ba:00:40:24:
                    93:ea:7f:70:56:77:45:d4:d4:97:3c:64:15:5a:75:
                    f5:04:0c:44:54:d1:66:3f:81:dd:98:eb:99:a9:f8:
                    00:87:11:d1:4e:97:ee:76:97:59:e9:79:13:df:32:
                    e8:b3:48:ee:17:9f:35:d5:e5:31:31:89:16:09:eb:
                    e4:96:22:fc:f0:08:ae:db:99:82:dc:b4:50:4a:e1:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A3:D1:63:03:E9:A2:4A:01:92:38:A7:F8:FC:13:63:D6:B9:AA:04
            X509v3 Authority Key Identifier:
                keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c2:8f:64:43:3b:cd:1c:cd:5e:e2:9c:35:84:e3:01:3d:64:
         2d:97:f6:73:e7:14:48:b7:8d:f6:91:21:33:e2:8b:db:53:a6:
         1d:3d:f4:a8:1f:57:fe:47:91:a9:54:d7:43:8a:77:c8:8a:90:
         2d:f4:b7:36:76:cb:05:d9:04:d6:e3:92:e3:48:ca:6a:04:71:
         c5:cc:4c:92:ce:61:96:6d:82:a8:e3:e2:14:b4:c8:31:c2:41:
         09:05:0b:62:51:d0:e5:51:0a:8f:4c:1b:12:b9:95:1c:a1:20:
         af:68:44:80:12:45:60:32:ac:31:28:6b:4d:2a:18:4b:54:b0:
         0f:91:0b:5f:de:08:dc:db:b8:54:00:0a:47:d5:b4:78:99:6e:
         ad:37:11:0d:c5:f4:d6:3d:8f:db:fc:07:1f:71:b6:44:97:44:
         71:ce:2a:5e:96:5c:ba:f4:5e:98:e5:72:4a:9b:9a:a9:9d:61:
         43:74:38:2a:01:23:e4:be:81:b6:ab:2c:33:d1:ff:39:d5:09:
         4c:a5:e4:1e:45:4a:8c:b1:f4:51:cb:f1:69:a5:21:f6:87:9f:
         d8:4e:ed:ef:c3:28:54:63:4f:50:fa:c1:5b:79:59:a8:f9:fd:
         de:93:34:54:f7:65:db:ad:90:fb:cb:f9:62:63:20:92:d6:bb:
         68:be:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:27 2026 by rpki-client