This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File:                     Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier:          L06NqLD/xhVaQhXuYVIarQd50ycQcJ3qk17RGgkGwO8=
Subject key identifier:   4F:0E:F6:D2:2D:9F:16:B2:48:20:66:07:8F:2E:C9:24:70:80:92:F6
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer:       /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial:       0CA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number:          0CA0
Signing time:             Sat 24 Jan 2026 18:01:53 +0000
Manifest this update:     Sat 24 Jan 2026 18:01:52 +0000
Manifest next update:     Sat 31 Jan 2026 18:01:52 +0000
Files and hashes:         1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: bwLI0QJCePil5FnggauexxpbsnMlVrNo8Sx/QCou0rw=)
                          2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: rGvn+Xb9+6pa0bOx7i6L0AMIOcUgqgdGFWif5XQ+yTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3241 (0xca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
        Validity
            Not Before: Jan 24 18:01:52 2026 GMT
            Not After : Jan 31 18:01:52 2026 GMT
        Subject: CN=69750911-021f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:65:5d:7a:51:31:9c:2a:6a:54:4d:b4:83:
                    47:0a:21:2a:d4:d2:b0:94:5d:0f:a9:79:8a:b2:e0:
                    e7:bb:6e:b4:a1:f6:76:70:7f:59:37:e8:d1:17:3e:
                    97:16:05:21:06:f5:db:f0:22:e6:4e:5e:45:2d:dc:
                    b3:ee:49:04:a5:57:b0:b1:e4:c6:36:3b:79:82:3e:
                    b7:07:53:95:9a:79:6a:99:1b:dc:7f:cf:ba:32:7b:
                    84:17:f1:f8:c3:a3:41:4c:74:b7:23:ad:30:e7:94:
                    06:66:50:30:f4:2f:08:63:6a:f4:23:7b:c7:4d:93:
                    42:33:90:48:59:96:a4:ab:33:0d:7b:00:db:cd:1d:
                    6b:1c:fc:ba:84:f8:0d:62:73:2b:90:de:01:23:84:
                    78:74:9e:d2:33:9a:fb:6c:7b:fb:46:5d:5b:9d:58:
                    69:4e:0f:1c:12:b9:11:c8:8b:8c:53:86:18:06:bd:
                    a0:1a:20:95:65:5b:b1:21:85:30:35:d8:4b:95:f8:
                    27:2d:9e:4c:cc:17:a4:9c:09:a1:ea:8a:51:48:68:
                    25:d1:75:34:32:45:cc:0b:e0:35:5f:e4:30:e2:34:
                    35:f7:e9:23:9e:39:14:d9:d1:18:85:86:a4:8a:d4:
                    51:03:62:c9:d8:42:1d:6b:bf:53:5a:2d:ed:93:9e:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:F6:D2:2D:9F:16:B2:48:20:66:07:8F:2E:C9:24:70:80:92:F6
            X509v3 Authority Key Identifier:
                keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:01:1c:63:8f:1b:e1:f8:ed:41:0c:44:7a:6a:66:43:2b:11:
         ea:d2:ac:d7:6f:a5:ba:7e:4d:fc:46:99:bc:a0:0c:c0:66:10:
         9e:d6:ac:75:6e:70:1e:32:66:2d:32:9f:e9:76:12:e4:ae:4e:
         e9:08:2e:4e:17:7e:7f:0c:79:e7:9b:1b:1a:da:db:c8:6a:fe:
         6b:62:aa:39:f4:0b:f3:2e:7f:c6:df:df:3c:35:d0:69:d5:4d:
         10:b6:91:f5:77:9d:47:13:cb:86:19:ef:61:47:3d:e4:16:67:
         32:57:41:18:1e:32:d0:0e:d8:dd:59:d3:c1:9a:39:a6:e9:d9:
         b4:0e:ec:d0:da:88:1b:6b:bb:34:b3:cb:73:3d:3c:f3:bb:27:
         f7:ab:9c:f1:ca:ed:2a:65:d9:d6:ab:fa:0c:90:e2:7c:5a:74:
         fa:d6:19:74:fc:71:fb:db:f9:2d:ea:a9:81:37:ad:83:82:6f:
         b4:2e:a4:ea:19:0b:03:a0:3f:63:b9:1e:17:ee:3d:bf:f4:41:
         fc:48:06:d9:84:7d:30:bf:07:21:c3:5c:04:99:c8:f0:20:d0:
         72:4d:ea:16:3b:b8:df:9a:9b:b3:1b:d6:ae:7e:b0:2b:8e:c1:
         56:ed:0d:e0:ad:ff:1e:28:f1:d7:eb:56:ff:a3:21:37:e5:40:
         00:9a:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:39:04 2026 by rpki-client