This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft
File:                     nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json)
Hash identifier:          OkVNvrX8jcM14lnITjWxT2tZ9sh9A6C+8RSWG8XwQm8=
Subject key identifier:   1B:23:EE:01:4F:36:43:80:6C:8D:92:0E:FE:FA:EA:91:E2:20:CB:55
Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F
Certificate issuer:       /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft
Manifest number:          01B9
Signing time:             Sun 25 Jan 2026 02:27:54 +0000
Manifest this update:     Sun 25 Jan 2026 02:27:54 +0000
Manifest next update:     Sun 01 Feb 2026 02:27:54 +0000
Files and hashes:         1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: Kon1AkGztdHqO1x8SFbtv348SkCFhigRvw8tUhieukw=)
                          2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: Yi/JWAwchMRWPqpLJdHipgAcW0bADt8JjtD1zk/5zPg=)
                          3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: 6zc+rZhJnF4vpcd6GmjdYSDq7wBWKRzyhnCBcHAGEEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl
                          rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F
        Validity
            Not Before: Jan 25 02:27:54 2026 GMT
            Not After : Feb  1 02:27:54 2026 GMT
        Subject: CN=69757faa-a3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:91:13:9e:82:22:de:f8:ac:c8:91:6d:f1:
                    0b:72:ba:c6:b4:38:0d:7d:cd:40:54:55:40:36:c0:
                    d9:30:85:a9:d8:14:fe:21:bf:a7:06:40:78:f1:d5:
                    94:86:c8:96:b2:2a:88:20:12:0b:79:26:cd:26:12:
                    e4:d1:b6:f2:33:65:35:52:f1:8c:8a:9a:b5:80:cc:
                    1c:03:45:3e:ce:0c:6f:d7:3d:29:84:94:0a:bb:e6:
                    ce:1d:42:3c:4e:98:03:98:2f:cd:9f:24:73:f6:93:
                    eb:3b:b5:f0:04:93:06:0c:a7:d4:05:1e:16:3a:e1:
                    34:aa:20:21:6a:e4:9f:13:7d:48:03:79:cf:fe:2f:
                    51:1b:11:cb:9a:96:cb:5e:69:52:27:c5:73:9c:f6:
                    25:9d:2a:20:9a:c1:f1:68:a5:80:37:4a:a9:e0:04:
                    f7:d6:b4:e7:fd:6c:45:c2:0b:ce:8a:d9:7e:29:d7:
                    1d:98:66:67:22:bb:a9:22:c1:64:d9:b2:48:62:fb:
                    66:e9:27:76:dd:7c:85:bf:3a:90:3d:ff:de:e8:ee:
                    84:38:53:ec:22:6d:73:8a:2b:d3:31:b6:5a:ef:0e:
                    9f:c0:f3:8a:af:52:88:8d:31:f5:d4:05:8b:12:2a:
                    83:fc:9e:52:ab:49:22:e7:ce:e7:da:b3:d9:90:9f:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:23:EE:01:4F:36:43:80:6C:8D:92:0E:FE:FA:EA:91:E2:20:CB:55
            X509v3 Authority Key Identifier:
                keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:99:87:2e:21:06:6b:fe:32:6d:5d:b6:66:65:05:a1:43:f0:
         a9:25:57:40:53:f9:0b:c3:d2:8f:5a:0f:c7:65:3e:0c:a3:50:
         17:ab:04:ce:ca:3f:38:07:da:38:b7:ae:b4:16:e2:34:bc:37:
         3f:26:b8:f3:4b:66:f1:90:c5:a1:6e:0b:ea:fb:a7:88:c1:a6:
         0e:1b:21:c6:25:6d:b0:f7:fa:22:18:e6:27:fc:7c:d2:7e:e8:
         04:5e:03:12:f1:49:39:42:4f:75:bd:9e:d6:c2:d0:f3:ab:ae:
         d5:a5:cf:ee:67:30:49:cc:f9:d0:dc:03:53:e5:70:4c:17:4d:
         9c:f2:ce:fe:06:2e:ec:5b:f1:fd:c1:04:81:de:07:ae:27:ff:
         e6:01:45:f6:29:91:49:95:35:0c:1b:de:07:a8:2f:7a:20:6a:
         cb:ca:25:46:ff:c3:53:95:7b:74:6e:17:84:01:7e:ba:92:bf:
         aa:7e:3e:ba:ae:0f:2a:73:69:ac:bd:c8:89:b6:da:e0:6b:08:
         bd:65:04:e0:73:5c:9c:39:06:fb:4a:d4:64:5c:67:6e:37:4c:
         20:40:f2:e2:c3:92:a2:15:9b:33:fa:52:51:b4:c0:8a:6a:81:
         ee:62:c4:bd:6f:91:18:19:59:fa:3b:f4:fe:c1:53:c4:d7:b2:
         d4:61:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:35:21 2026 by rpki-client