This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File:                     nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier:          aW80pXKa3hE8eKD4BgXy8h08KxiZ/zpDjjDmo05Sx18=
Subject key identifier:   89:A2:CF:C8:F5:DE:12:58:35:AF:BD:97:17:2A:21:18:5C:68:37:30
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer:       /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number:          0165
Signing time:             Sun 25 Jan 2026 03:33:14 +0000
Manifest this update:     Sun 25 Jan 2026 03:33:14 +0000
Manifest next update:     Sun 01 Feb 2026 03:33:14 +0000
Files and hashes:         1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: +hsIIBA4y3i4P48urLYjix2E7GnW+CZ/15Js76Z+ON4=)
                          2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: CmgxaioZaqBmTAKdrvrQvMBUPzNHQbmNsCbdVyQjo74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
        Validity
            Not Before: Jan 25 03:33:14 2026 GMT
            Not After : Feb  1 03:33:14 2026 GMT
        Subject: CN=69758efa-553e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:68:bd:fd:f1:d4:4f:e4:ad:00:bd:aa:7a:
                    6f:20:bb:46:12:70:37:62:7d:38:b2:c9:c3:90:87:
                    3f:1c:69:00:33:85:dd:39:52:b8:68:b7:d3:35:4a:
                    c1:96:b0:d2:53:91:f1:7b:57:23:3f:45:7d:77:02:
                    8a:c0:ed:f4:65:c5:29:95:23:98:e4:26:58:32:53:
                    c9:97:8a:38:97:d3:8d:3a:dc:9e:82:6c:a2:2a:2f:
                    5a:6e:f5:3d:c2:2f:fb:85:f3:8a:28:2f:d4:10:68:
                    ef:c8:84:0f:ea:19:6e:81:df:d0:ca:1f:85:fd:0b:
                    61:53:01:5a:3d:83:a9:f3:91:18:49:38:28:d6:d3:
                    63:5e:c3:ec:10:3d:c4:0b:50:97:74:e2:3e:58:a5:
                    44:ea:ea:d8:71:8e:55:8f:fe:67:22:2f:84:70:84:
                    e2:41:0d:18:73:9b:a1:83:f4:f8:51:78:2a:0c:3d:
                    8e:95:51:63:f2:ca:a1:be:0d:9a:37:bd:45:ec:68:
                    e5:f6:1a:69:21:40:9a:5a:8f:04:8b:41:4e:e6:dc:
                    21:ab:f9:87:cd:e5:71:f3:12:8c:40:1f:c1:30:c2:
                    95:3c:b5:39:42:00:9d:83:6e:6e:79:44:91:ec:6b:
                    c9:8b:3a:c3:2b:b6:ca:61:2f:a2:2c:4f:79:de:aa:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A2:CF:C8:F5:DE:12:58:35:AF:BD:97:17:2A:21:18:5C:68:37:30
            X509v3 Authority Key Identifier:
                keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:6f:84:08:5a:d4:ff:f4:2e:a1:98:cd:26:0c:f5:2e:d1:
         3c:f9:be:6a:9d:f4:59:3e:82:0e:40:92:c7:69:8b:da:db:e1:
         03:15:c6:8f:e4:02:cf:0c:98:ec:17:f1:f5:ad:5d:93:b8:ad:
         20:04:5e:26:80:5f:5b:a5:dc:ef:46:2c:dd:c6:55:44:35:e4:
         20:76:16:ab:70:41:32:12:af:e1:8d:b1:c4:08:55:ca:21:eb:
         da:8b:90:47:b7:62:16:d3:28:43:00:50:0d:28:bc:32:22:13:
         c2:16:64:ad:1d:5d:3d:f9:cb:a4:a2:f9:e8:6e:c6:09:9f:1b:
         d3:31:82:5a:e5:5e:9e:13:09:14:2d:8a:6c:a6:8e:fc:75:b3:
         47:5f:72:a2:f1:16:7f:5d:84:47:91:d6:6c:64:bd:96:fd:d1:
         64:d7:ed:5e:26:92:d0:22:a5:67:07:9e:09:43:67:b5:f7:ac:
         d0:93:a7:57:0b:a8:34:4e:cb:c1:e2:49:73:b2:a6:30:d1:5e:
         b2:98:c3:f1:a9:88:8c:92:66:a1:5f:54:29:03:26:db:4a:2c:
         c7:4c:39:10:2d:f6:64:7b:26:5e:4e:c4:19:cb:40:f0:cc:7a:
         87:f8:52:ad:ee:13:d3:16:54:d7:19:1e:ed:14:0d:f7:08:08:
         00:b4:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:14 2026 by rpki-client