This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          VBddAbQMvDDTTii3HwZoteXfUQzZr46f5z1n50riRDA=
Subject key identifier:   17:03:14:EC:BC:68:A6:53:5F:4E:E2:C1:3F:EE:D2:F5:17:7E:D3:29
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          63
Signing time:             Fri 23 Jan 2026 06:05:55 +0000
Manifest this update:     Fri 23 Jan 2026 06:05:54 +0000
Manifest next update:     Fri 30 Jan 2026 06:05:54 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: 186oC72GZ1syjq9p4PrkVm18QoZhwIAGuF5JHflIi6o=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Jan 23 06:05:54 2026 GMT
            Not After : Jan 30 06:05:54 2026 GMT
        Subject: CN=69730fc3-8648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:a1:88:e9:84:08:0a:24:c6:06:53:3c:06:
                    5d:8c:b2:b8:6c:7d:a1:56:74:bf:62:b0:5b:7b:34:
                    80:77:62:5c:de:b4:27:08:f2:ca:40:4a:6b:f9:34:
                    59:c5:17:6d:32:d2:eb:6a:1a:32:cf:7a:62:dc:64:
                    1e:d4:49:e0:b3:c8:86:40:28:02:4b:7a:2a:c9:43:
                    1a:73:d1:a0:3c:54:2c:34:31:45:c8:26:a5:7c:ec:
                    43:55:16:d8:fc:6b:ff:b2:a7:77:f9:bc:dd:b6:92:
                    be:d2:20:c7:9f:10:ae:60:f6:47:f4:41:c4:97:2c:
                    98:40:6d:9c:67:a0:39:ae:3f:4b:e5:7d:e8:78:e8:
                    f8:b0:af:1f:a8:b2:03:ec:17:38:f3:5e:79:35:d4:
                    67:57:24:50:81:c3:4b:6b:3d:96:84:a3:47:05:64:
                    35:da:3c:49:43:6d:70:0a:97:b4:b7:b6:a9:ee:ec:
                    87:1d:b2:90:44:aa:3f:c4:13:2b:31:d0:76:11:91:
                    14:ad:be:0b:19:fa:4c:a7:a5:83:69:36:76:58:b9:
                    c1:23:b4:dc:29:bc:81:d7:44:fd:0e:d7:0b:3b:ce:
                    41:2a:7c:9e:67:34:68:78:9a:92:a4:15:41:8c:2f:
                    82:10:63:38:d0:ea:2f:ae:03:49:81:9f:2f:da:c3:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:03:14:EC:BC:68:A6:53:5F:4E:E2:C1:3F:EE:D2:F5:17:7E:D3:29
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c9:c8:15:c6:4b:6d:f9:a7:1d:b8:00:66:05:a0:24:31:f8:
         39:5f:6a:70:48:e1:47:8e:ee:f5:b3:7f:50:32:ad:03:9b:f4:
         72:40:fa:41:fc:c0:93:c5:6b:1d:83:e3:7d:9e:69:0a:b4:a0:
         a3:67:3b:95:f7:10:bb:04:d3:63:fc:3d:ad:4a:e1:81:ba:e9:
         6b:27:d0:40:fe:d4:1c:13:3b:1a:af:92:f1:1d:ec:e1:18:7b:
         4d:32:df:cc:f3:de:7b:d2:b3:9e:a6:f6:03:f7:9d:cb:d2:4c:
         0a:68:0b:c7:9f:b0:b7:c9:04:e3:8f:68:24:29:39:03:7c:03:
         79:af:9f:67:b3:2b:24:94:9a:97:17:fa:9d:99:71:7a:c3:a0:
         f8:09:8a:e1:bf:4f:66:1f:d8:5d:03:71:94:6f:0e:db:47:4d:
         6b:72:1d:6b:36:8f:c2:96:a8:5b:10:05:61:6e:6d:ac:c7:dd:
         68:c8:b9:55:0c:8d:ca:ab:59:0c:6d:f3:91:7c:52:dc:8d:fe:
         1f:83:37:61:39:46:de:d6:c1:05:96:53:71:23:73:8e:c9:a5:
         2e:4d:c3:bd:23:39:e6:0f:f7:f8:55:38:e5:7c:97:2b:fd:b1:
         34:7c:02:02:e2:1f:3d:85:af:c9:49:d7:6d:d2:54:94:ee:29:
         6e:70:a8:f2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjUxNTExMC8GA1UEBRMoMzZEQjQ0RDRDMTU5ODg2NzM4MjE1QTU2MTBCMTEwQzI0
NDg2Q0E1NjAeFw0yNjAxMjMwNjA1NTRaFw0yNjAxMzAwNjA1NTRaMBgxFjAUBgNV
BAMMDTY5NzMwZmMzLTg2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5q6GI6YQICiTGBlM8Bl2MsrhsfaFWdL9isFt7NIB3YlzetCcI8spASmv5NFnF
F20y0utqGjLPemLcZB7USeCzyIZAKAJLeirJQxpz0aA8VCw0MUXIJqV87ENVFtj8
a/+yp3f5vN22kr7SIMefEK5g9kf0QcSXLJhAbZxnoDmuP0vlfeh46Piwrx+osgPs
FzjzXnk11GdXJFCBw0trPZaEo0cFZDXaPElDbXAKl7S3tqnu7IcdspBEqj/EEysx
0HYRkRStvgsZ+kynpYNpNnZYucEjtNwpvIHXRP0O1ws7zkEqfJ5nNGh4mpKkFUGM
L4IQYzjQ6i+uA0mBny/aw8SJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFwMU7Lxo
plNfTuLBP+7S9Rd+0ykwHwYDVR0jBBgwFoAUNttE1MFZiGc4IVpWELEQwkSGylYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTE1Lzg0QzQ2NzRBNjBD
MTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3ls
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTnR0RTFNRlppR2M0SVZwV0VMRVF3a1NHeWxZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
NTE1Lzg0QzQ2NzRBNjBDMTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdj
NElWcFdFTEVRd2tTR3lsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKnJyBXGS235px24AGYFoCQx+DlfanBI4UeO7vWzf1AyrQOb9HJA+kH8
wJPFax2D432eaQq0oKNnO5X3ELsE02P8Pa1K4YG66Wsn0ED+1BwTOxqvkvEd7OEY
e00y38zz3nvSs56m9gP3ncvSTApoC8efsLfJBOOPaCQpOQN8A3mvn2ezKySUmpcX
+p2ZcXrDoPgJiuG/T2Yf2F0DcZRvDttHTWtyHWs2j8KWqFsQBWFubazH3WjIuVUM
jcqrWQxt85F8UtyN/h+DN2E5Rt7WwQWWU3Ejc47JpS5Nw70jOeYP9/hVOOV8lyv9
sTR8AgLiHz2Fr8lJ123SVJTuKW5wqPI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:29 2026 by rpki-client