This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File:                     NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier:          nx6HgxShlh9GBdLH682+xbnR04Jfe8tT7nLVyXho78o=
Subject key identifier:   E6:95:CA:5C:FE:24:59:97:44:E1:82:15:3F:79:B4:D0:D3:D6:99:C5
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer:       /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number:          01D9
Signing time:             Sun 25 Jan 2026 02:06:14 +0000
Manifest this update:     Sun 25 Jan 2026 02:06:13 +0000
Manifest next update:     Sun 01 Feb 2026 02:06:13 +0000
Files and hashes:         1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: 0PCxFqulvbx9SaGsfi/mr8TAMguDr+E0fe00LWAI4JE=)
                          2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 8GoJZpCZ9P4ckdBt/ZtHhmXHWFZw1X3kEDMJv2TH3VQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
                          rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
        Validity
            Not Before: Jan 25 02:06:13 2026 GMT
            Not After : Feb  1 02:06:13 2026 GMT
        Subject: CN=69757a95-12e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:8f:d2:2f:3d:aa:7a:17:21:76:89:af:f2:
                    c5:d9:35:7d:df:12:55:44:41:e5:ea:03:83:60:58:
                    12:c4:6f:d9:f4:c8:8a:01:6d:f8:e2:bc:1b:19:4c:
                    93:df:5c:7d:8b:32:1c:36:bc:44:bf:71:71:6f:7c:
                    e0:72:56:45:23:2e:ff:ad:e2:b6:ac:f5:4c:e0:58:
                    90:b2:d9:6c:06:23:4d:b4:30:17:62:78:36:a3:98:
                    06:84:c3:32:d4:13:ee:0d:bb:f4:b5:da:84:77:a1:
                    88:a4:e5:99:cc:18:78:13:a9:ba:26:d7:6a:b0:ec:
                    fd:a1:77:bd:c2:bf:6d:e4:a3:ec:44:db:c1:72:fd:
                    8c:d9:5b:13:d2:8d:27:a9:1d:ea:2d:92:fb:a2:27:
                    f4:83:86:21:1e:9b:11:b9:98:21:68:91:96:46:01:
                    61:92:07:fa:40:ba:d4:79:7c:de:be:a6:f1:6e:37:
                    95:27:be:d2:ef:83:49:2c:81:06:58:c0:e3:81:50:
                    57:4e:55:a3:74:7c:f2:a4:c0:b6:03:35:11:3f:49:
                    4b:97:13:56:2c:e4:f2:9f:24:05:66:ec:04:b9:e9:
                    81:a9:70:eb:7f:dc:51:94:2d:02:a3:2d:d9:20:fa:
                    c2:a8:5a:12:8e:b9:db:58:d1:eb:5d:23:86:1d:dd:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:CA:5C:FE:24:59:97:44:E1:82:15:3F:79:B4:D0:D3:D6:99:C5
            X509v3 Authority Key Identifier:
                keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2e:6c:6f:db:ec:37:32:9a:c3:1f:d4:54:a1:ea:d2:b7:7a:
         b0:54:56:62:72:1c:72:34:ae:c2:8e:09:9f:b6:e1:d4:94:8e:
         64:d6:75:30:ea:c1:e9:10:01:a0:66:22:64:76:5c:bf:39:8f:
         31:b1:da:46:d0:04:1a:c8:b9:9b:3c:de:71:6e:be:46:b7:83:
         1a:4e:84:56:ee:dd:3c:42:ed:89:7c:89:aa:c3:1c:f8:c9:56:
         ac:85:f5:d7:19:f7:93:d0:34:a5:e0:47:40:9b:3e:d1:4b:ba:
         e3:0c:45:5e:a3:f3:2c:72:5c:35:88:38:1e:91:0b:31:c0:26:
         fc:28:92:c5:df:04:75:13:ad:70:85:34:d9:3f:0c:a7:d4:f0:
         1a:d8:19:79:78:3b:08:89:02:68:c0:d6:52:87:2d:f7:c3:31:
         68:aa:a7:ca:b5:5c:6d:6b:a7:0b:c4:2f:a9:2a:49:32:82:58:
         43:ea:f1:1d:25:8b:16:fd:fe:40:8c:a6:5a:1c:57:48:ae:b8:
         1e:a9:23:d2:12:a2:95:d5:bc:62:e5:81:ea:f5:88:b3:4a:8d:
         3d:89:70:87:db:26:f5:09:55:25:14:08:76:7a:09:af:65:e3:
         6a:96:a1:3a:da:73:5f:64:16:2e:61:8c:5c:11:73:3f:b5:30:
         84:38:0b:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD
MDVFRkM0RTEwHhcNMjYwMTI1MDIwNjEzWhcNMjYwMjAxMDIwNjEzWjAYMRYwFAYD
VQQDDA02OTc1N2E5NS0xMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylmP0i89qnoXIXaJr/LF2TV93xJVREHl6gODYFgSxG/Z9MiKAW344rwbGUyT
31x9izIcNrxEv3Fxb3zgclZFIy7/reK2rPVM4FiQstlsBiNNtDAXYng2o5gGhMMy
1BPuDbv0tdqEd6GIpOWZzBh4E6m6JtdqsOz9oXe9wr9t5KPsRNvBcv2M2VsT0o0n
qR3qLZL7oif0g4YhHpsRuZghaJGWRgFhkgf6QLrUeXzevqbxbjeVJ77S74NJLIEG
WMDjgVBXTlWjdHzypMC2AzURP0lLlxNWLOTynyQFZuwEuemBqXDrf9xRlC0Coy3Z
IPrCqFoSjrnbWNHrXSOGHd28zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaVylz+
JFmXROGCFT95tNDT1pnFMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC
OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDczRi8xRDE3RURCNDJCOTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lk
bVR6MjVNQnRZQjNBWHZ4T0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFLmxv2+w3MprDH9RUoerSt3qwVFZichxyNK7CjgmftuHUlI5k1nUw
6sHpEAGgZiJkdly/OY8xsdpG0AQayLmbPN5xbr5Gt4MaToRW7t08Qu2JfImqwxz4
yVashfXXGfeT0DSl4EdAmz7RS7rjDEVeo/Msclw1iDgekQsxwCb8KJLF3wR1E61w
hTTZPwyn1PAa2Bl5eDsIiQJowNZShy33wzFoqqfKtVxta6cLxC+pKkkyglhD6vEd
JYsW/f5AjKZaHFdIrrgeqSPSEqKV1bxi5YHq9YizSo09iXCH2yb1CVUlFAh2egmv
ZeNqlqE62nNfZBYuYYxcEXM/tTCEOAtp
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:44 2026 by rpki-client