This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
File:                     nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json)
Hash identifier:          QscC/ctrqsInRjlcRoYsORuDD4sgma0NsBMgF/gAvMA=
Subject key identifier:   40:AE:97:C5:4E:31:90:4D:D1:DB:80:BD:26:0E:DE:81:C0:4E:14:09
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Certificate issuer:       /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial:       3537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
Manifest number:          3522
Signing time:             Sat 24 Jan 2026 14:39:31 +0000
Manifest this update:     Sat 24 Jan 2026 14:39:31 +0000
Manifest next update:     Sat 31 Jan 2026 14:39:31 +0000
Files and hashes:         1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: W5/nNjt80O0MbJJWiqORj20/zs27azQGWxeTQYmY0r4=)
                          2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: mBi2xBGJz7ABmwG7Kd/FaX5nMMQUKh+oy7XK2XR044o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
                          rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13623 (0x3537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
        Validity
            Not Before: Jan 24 14:39:31 2026 GMT
            Not After : Jan 31 14:39:31 2026 GMT
        Subject: CN=6974d9a3-2c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ae:b7:7d:25:fc:78:fb:82:0f:e4:b1:28:63:
                    8c:8f:59:5b:69:af:a5:a3:e2:6b:a3:6c:57:70:a1:
                    85:02:5e:91:33:67:6c:0c:f0:c1:0e:eb:8b:b0:0d:
                    b5:81:08:18:96:4f:6d:fa:a4:d1:ab:a3:fd:f0:7d:
                    9d:37:07:e8:e4:0c:48:87:d7:a2:f6:38:ae:59:3e:
                    40:0a:df:5f:d2:ba:94:a7:c2:13:d2:4b:e4:c1:8b:
                    f0:a4:a5:97:76:06:89:33:46:a4:0e:1c:36:e3:e4:
                    ee:97:f2:0d:f6:3b:d2:8a:99:c7:bb:2e:7d:de:cb:
                    f4:e2:9a:b4:75:f1:64:59:28:fa:bc:d5:82:48:e1:
                    42:29:86:2a:95:5e:10:8e:2c:fa:07:0a:94:a9:ab:
                    5b:65:98:9b:11:2e:f1:f6:63:f0:c3:be:de:20:db:
                    2c:d6:1f:d1:e5:d4:1c:98:2b:37:31:d0:12:3e:6a:
                    bd:8e:ef:32:79:62:64:cf:8e:b7:de:fc:ab:11:a0:
                    03:05:f7:b7:75:fc:ea:65:e0:45:bc:d2:0e:bd:4c:
                    a8:61:f5:e0:7a:30:23:24:15:c1:b2:02:11:ce:d6:
                    83:55:18:fa:1b:de:03:0c:79:f6:cb:36:2f:9e:c1:
                    fb:ca:e6:36:6d:ca:16:8e:b8:42:b9:e7:fb:c6:59:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AE:97:C5:4E:31:90:4D:D1:DB:80:BD:26:0E:DE:81:C0:4E:14:09
            X509v3 Authority Key Identifier:
                keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ae:50:10:2c:45:4a:11:cc:d0:58:6a:ec:81:ff:7c:6f:74:
         51:ef:10:fc:b8:93:ff:ee:14:fc:b5:0e:f3:d1:36:00:80:ea:
         aa:0c:19:53:72:09:01:e5:8f:db:38:e7:b9:67:8e:39:41:9c:
         f8:03:fd:7d:24:74:09:47:62:50:e4:b9:b3:29:cd:d1:78:65:
         02:b5:6e:59:b9:16:5b:c4:4b:be:e9:ed:b5:33:34:e1:f6:25:
         b2:e2:5c:55:11:24:98:3c:60:8e:bf:cd:c9:44:dc:69:0f:6d:
         b3:d1:94:f8:59:18:2f:ef:84:0b:47:43:19:52:47:89:52:17:
         4b:e2:38:20:15:dc:8f:40:12:58:c7:57:5c:a2:bd:f4:ba:98:
         ff:f5:e9:f0:f0:0b:49:c4:bd:8b:db:4b:97:df:1c:fd:94:85:
         bb:f1:5c:3e:41:7f:d0:2d:52:be:63:65:7c:66:fe:eb:99:cd:
         6a:b4:46:5f:1d:c2:73:45:79:16:11:3d:a6:db:9b:1f:50:e8:
         a8:34:81:55:06:bd:30:82:d6:4b:f9:3e:32:10:01:61:86:fe:
         6d:bd:a1:a1:a5:69:87:49:a7:b8:35:fb:be:26:76:11:a5:44:
         67:68:f8:36:50:10:dd:1d:3c:52:75:96:8a:04:92:3e:fd:da:
         ef:8e:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:26:57 2026 by rpki-client