This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File:                     NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier:          Hssk5lIQwf+bmWm/QPFmP7Y70CDhHGdmUf2OO5Q2z1k=
Subject key identifier:   80:40:A7:92:C4:FF:22:C2:85:0C:F5:81:D4:68:87:BD:A1:2A:50:D4
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer:       /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial:       07A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number:          0775
Signing time:             Sat 24 Jan 2026 21:03:36 +0000
Manifest this update:     Sat 24 Jan 2026 21:03:35 +0000
Manifest next update:     Sat 31 Jan 2026 21:03:35 +0000
Files and hashes:         1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: EIqbN026gpGOX46eG6mSqSDFPmdZ/PgpGgksTABqsjs=)
                          2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 9Q6UVfld/+rzBWvRbqts4WlKXGhealsLgosXkfmaleY=)
                          3: 9E0384D2D4AE11F0B3093770C4F9AE02.roa (hash: v9CiHNMRCrRNTUccG0SyqMKRfuFAi8FsxcmJZoqH2g8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
                          rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1956 (0x7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
        Validity
            Not Before: Jan 24 21:03:35 2026 GMT
            Not After : Jan 31 21:03:35 2026 GMT
        Subject: CN=697533a7-7723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:9f:d9:02:42:51:83:8d:88:9a:44:9b:6e:
                    a9:81:e6:05:18:5a:f6:0d:5d:2e:4a:8b:ae:75:b6:
                    75:04:5b:f2:a4:be:fc:45:ef:55:8d:2c:9a:b7:c7:
                    2a:1e:32:74:54:58:ba:12:c4:a2:2a:48:a8:40:c2:
                    60:75:6c:71:7b:53:ae:ff:88:13:ec:99:e0:44:81:
                    a1:28:6b:29:b3:f6:60:3f:eb:0c:bd:39:7b:65:95:
                    1c:4a:bc:c8:4b:35:4c:2b:c0:1b:33:46:d8:4f:87:
                    b6:63:6e:d2:7f:03:f0:cb:07:e9:63:be:6b:c6:bd:
                    6b:0d:4d:eb:e9:ed:8e:9a:6c:10:6d:5f:d0:f6:c2:
                    95:21:74:cb:d0:10:a5:e2:57:c6:d4:33:1a:61:02:
                    16:01:ac:c9:3e:10:a7:c0:0b:54:33:02:32:31:f9:
                    80:b2:53:85:aa:26:a5:f6:65:fc:bf:72:03:24:f9:
                    a6:6f:cf:19:0b:40:56:78:88:6b:3f:89:a8:b6:91:
                    d3:ef:04:7d:bd:cc:a5:a0:5c:56:92:71:9b:8c:dc:
                    f8:4d:31:0f:3e:32:f0:14:b6:95:ec:bd:b7:50:58:
                    31:da:26:70:9a:a9:66:9c:23:af:89:68:c4:c2:d9:
                    6a:de:d3:5f:85:4e:03:a0:22:21:49:5e:f7:5d:f3:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:40:A7:92:C4:FF:22:C2:85:0C:F5:81:D4:68:87:BD:A1:2A:50:D4
            X509v3 Authority Key Identifier:
                keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:47:d4:65:15:09:20:d1:be:9f:96:ce:dd:c2:44:38:13:80:
         6c:a9:7c:c6:67:88:dc:9c:c7:9b:06:b4:e7:9f:5b:95:cf:18:
         17:83:f9:93:f0:93:b3:1b:d5:d8:ad:b8:17:ff:2a:9a:b8:77:
         25:9e:94:7d:50:3a:3e:ea:de:7f:8c:a4:6c:23:16:7f:5c:76:
         bf:ec:c1:ec:ac:2c:67:a6:7b:84:48:87:9d:12:05:7d:05:a8:
         6a:35:66:fa:f4:e5:41:ff:0d:17:78:15:67:33:67:f7:7f:64:
         c2:8d:0e:f3:14:e2:aa:eb:53:d5:35:71:ef:2a:d7:58:63:e9:
         72:16:b3:18:61:05:b0:ab:f6:c0:61:f2:0a:2c:36:1d:ad:48:
         5f:fb:27:86:d6:df:0f:55:30:e3:89:85:b0:96:24:d7:02:bb:
         63:66:f3:c2:1a:10:d6:73:f1:0d:98:49:a6:9b:92:b0:17:fd:
         38:e6:be:0e:08:ef:33:bc:e5:0d:78:3a:1a:6b:e5:94:e4:bc:
         86:17:07:e0:1c:f6:0b:84:d6:65:21:58:75:3d:b8:05:36:94:
         9e:dc:1f:3e:8e:ae:06:62:40:c1:6c:c4:ed:30:05:9d:60:c1:
         bd:94:d8:44:d4:47:a9:f3:bd:61:f7:e1:f6:15:c8:a8:ff:77:
         d7:14:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:50 2026 by rpki-client