This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
File:                     Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json)
Hash identifier:          3YK1tspYJRDzbiyafKpXI+rHVhS+aFNlSYfDwu/OLok=
Subject key identifier:   F0:A7:51:45:E2:57:1B:5C:A2:95:26:C6:88:9F:B8:AE:E8:43:A6:A2
Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78
Certificate issuer:       /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
Manifest number:          01C4
Signing time:             Fri 23 Jan 2026 02:10:04 +0000
Manifest this update:     Fri 23 Jan 2026 02:10:04 +0000
Manifest next update:     Fri 30 Jan 2026 02:10:04 +0000
Files and hashes:         1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: odSejaBKIK41p92YmvrQ213/gz6tfKMiZEgBznUHg5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl
                          rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC636, serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178
        Validity
            Not Before: Jan 23 02:10:04 2026 GMT
            Not After : Jan 30 02:10:04 2026 GMT
        Subject: CN=6972d87c-f2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:19:0f:d7:c5:59:8d:80:c0:57:52:da:9a:
                    d0:7b:76:29:7b:4e:be:c4:7a:4e:71:1b:95:90:b1:
                    cd:4a:59:ab:21:90:e7:21:ec:78:63:22:01:60:08:
                    1d:95:4a:9f:5d:7b:71:54:68:f6:ec:c2:5f:1e:6c:
                    8d:ec:27:f0:46:ff:77:14:99:ff:76:82:68:9b:4d:
                    20:a6:19:dc:a8:84:0c:17:68:fb:5a:a5:6e:af:be:
                    03:5c:cf:a2:e5:93:82:fc:7f:ce:0e:c2:37:4c:d0:
                    35:73:23:41:a9:31:2a:54:4b:1a:e6:75:b3:28:b6:
                    ad:89:12:db:62:35:72:3e:8c:65:e0:ae:83:7b:9b:
                    3b:ff:0a:5e:9f:8d:e4:f4:a5:17:30:10:67:16:0f:
                    77:75:ad:73:77:ab:44:bf:ac:ed:75:ce:4c:24:75:
                    8f:58:a4:5b:18:53:13:2b:ee:43:c6:34:ee:a3:67:
                    78:7c:2f:3b:ff:b0:42:19:7b:f7:65:ec:59:9c:c9:
                    6b:26:1e:e5:85:5c:37:15:4a:3d:82:0c:00:fb:ba:
                    2a:4b:3d:68:71:7a:14:71:e1:25:3b:f9:a5:9e:da:
                    c8:c0:f5:57:7b:94:9c:55:76:87:ba:ab:26:67:be:
                    2a:72:a7:08:71:cc:66:c5:b5:28:57:9c:8c:b3:72:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:51:45:E2:57:1B:5C:A2:95:26:C6:88:9F:B8:AE:E8:43:A6:A2
            X509v3 Authority Key Identifier:
                keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:67:5a:8e:74:10:87:ea:26:d1:7e:d4:95:d1:a6:95:7f:
         c8:06:da:96:59:b7:e4:6a:c6:4d:ec:49:70:f5:5e:07:d3:55:
         34:bf:8f:4f:a9:2b:1e:ed:33:fc:e1:13:5e:a4:e5:78:53:59:
         84:10:5c:80:d5:96:df:75:54:2c:de:58:f1:b5:71:44:ae:24:
         63:8f:ed:bc:4a:a4:10:2b:af:bc:b3:40:35:93:75:c3:e4:a7:
         f9:25:6e:0c:ab:63:e1:dc:13:2d:75:88:a3:f5:21:53:9d:c6:
         91:bb:31:c9:c4:41:bc:91:f2:54:74:e1:d8:85:7e:1b:ee:0a:
         1f:6c:b9:21:8f:2f:c6:31:12:63:e8:d1:36:95:eb:b8:23:f5:
         25:2d:7f:d9:02:31:d9:d0:ba:26:8c:71:6f:40:1e:08:c4:32:
         0d:17:69:cd:25:84:32:e0:4c:7d:23:0f:63:60:9f:90:2e:7b:
         a9:20:ff:14:85:fc:61:6f:e9:85:b6:ec:fc:da:81:d3:89:08:
         c5:20:b9:60:6c:e6:a3:31:30:86:10:b3:9b:4f:b7:2f:a5:92:
         6b:c0:47:4f:78:45:ee:d9:7a:f7:5b:0c:3a:39:ec:db:80:fb:
         2e:07:66:b0:8f:e0:51:d5:8b:83:50:ca:12:16:ba:d5:4b:14:
         04:cc:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:17 2026 by rpki-client