This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
File:                     _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json)
Hash identifier:          hTv1OfulIBc3bKMRo11Wr6hGDMca+u3RR7AYHLbJLkQ=
Subject key identifier:   3D:59:3C:42:36:E4:D7:D8:FF:80:4C:46:13:B9:6D:66:50:69:8C:6B
Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
Certificate issuer:       /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
Manifest number:          C6
Signing time:             Sun 25 Jan 2026 05:02:42 +0000
Manifest this update:     Sun 25 Jan 2026 05:02:41 +0000
Manifest next update:     Sun 01 Feb 2026 05:02:41 +0000
Files and hashes:         1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: NsXO13A9gkdSwh4/0WP7bte9pEjEZIgKFcDbKE6/4F8=)
                          2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: /lwgtRM6gotLfudn3WIihQdO3Q9EX1aXjWZS5YiBoaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
                          rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
        Validity
            Not Before: Jan 25 05:02:41 2026 GMT
            Not After : Feb  1 05:02:41 2026 GMT
        Subject: CN=6975a3f1-2673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:35:ea:dd:b1:1c:81:b5:ca:48:60:35:cc:
                    89:0d:35:fe:c3:b8:d7:bf:03:b4:16:26:32:8f:94:
                    53:e0:2f:9a:cc:b0:ae:68:10:fb:8a:16:7b:12:a8:
                    82:f4:65:a9:9e:2d:0e:69:5d:ef:b4:3c:61:56:91:
                    fa:c5:b1:fd:cb:b7:34:e2:f0:19:8b:9b:1e:74:41:
                    df:06:88:51:8d:d4:0b:dd:0e:e3:25:ca:34:e9:34:
                    3e:d9:5b:ec:a9:f9:11:cc:67:df:3d:85:c3:d2:57:
                    89:a4:7f:48:97:fc:21:cd:ee:6d:5c:4d:66:06:16:
                    ba:3c:f8:c6:16:22:2d:c0:86:a1:dc:ac:a2:39:c2:
                    2b:5b:ef:40:b7:e1:2c:18:b1:62:e0:36:4d:68:05:
                    6b:4a:42:0f:d8:a4:4c:94:c9:6d:b3:29:13:4e:29:
                    ce:07:1f:0e:ee:9b:22:f5:b2:dc:91:52:69:9d:bc:
                    f1:3e:2d:ea:46:10:26:ae:d5:10:3a:07:34:32:94:
                    93:4e:72:74:22:99:b3:90:34:33:71:f3:7e:73:45:
                    ac:04:94:6e:fb:1f:ba:6f:61:77:5c:1c:0d:a3:b3:
                    50:ac:51:ad:3b:cf:57:65:84:80:8d:48:7e:5f:ec:
                    b1:0a:64:42:e7:42:e7:c9:fb:6f:fa:6f:07:ce:da:
                    c8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:59:3C:42:36:E4:D7:D8:FF:80:4C:46:13:B9:6D:66:50:69:8C:6B
            X509v3 Authority Key Identifier:
                keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:b8:c3:38:c4:ab:05:22:85:05:9d:09:01:5b:3a:ed:bc:
         f1:29:e0:b6:c3:3b:5b:76:36:98:34:ef:6a:99:43:e2:92:99:
         80:c8:a5:af:04:37:98:0d:70:69:e5:6a:8c:ec:dc:ce:39:82:
         fc:fb:d9:fe:cd:2a:39:8c:47:28:09:8c:78:86:de:0a:f8:68:
         b4:8e:69:c7:f2:e1:2e:39:bc:23:41:1d:1d:93:30:54:fa:fe:
         98:1e:80:09:19:96:0f:44:2c:8d:00:f0:7e:6e:cf:ff:0b:ed:
         69:3a:11:7b:e0:f3:94:fc:c1:e0:0e:41:30:62:33:9a:1e:03:
         b3:32:72:7e:a9:b1:06:b2:50:a9:b5:c8:bf:30:50:da:42:6e:
         92:94:7a:7e:eb:d3:db:c5:36:74:9c:b3:a9:7c:a1:c8:cb:95:
         c3:1e:6a:84:65:1a:d8:71:7b:1c:93:83:11:25:ee:9b:5e:97:
         5b:e2:7f:76:ca:79:18:41:1f:22:33:d7:f2:97:e7:25:07:c7:
         6c:9c:fa:98:4a:91:81:5d:2f:c2:ab:65:8d:89:8a:e5:cf:97:
         db:ae:26:f4:8b:3a:1c:9c:cf:c5:4d:de:57:8c:42:28:81:f6:
         46:ba:0c:8e:58:eb:68:52:8b:16:a4:ea:f9:ce:5d:15:82:0e:
         a3:00:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:51:10 2026 by rpki-client