This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File:                     Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier:          4OOdlUwwuv02LhF7J+c93NDVPqREEf25LuGjfSzoIz8=
Subject key identifier:   8E:31:F4:ED:6C:64:A1:BA:4F:46:06:80:91:18:C3:22:58:2B:AD:F3
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer:       /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number:          BF
Signing time:             Sun 25 Jan 2026 05:12:16 +0000
Manifest this update:     Sun 25 Jan 2026 05:12:15 +0000
Manifest next update:     Sun 01 Feb 2026 05:12:15 +0000
Files and hashes:         1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: AoKv47HTEndAgOGjYZXqzivMqjWlkB+P8g0jdAt4gdY=)
                          2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Um4faPIiYV0iT9wtSPwe9PJLjNj/ZKWxcpuZEn8fwZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
                          rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
        Validity
            Not Before: Jan 25 05:12:15 2026 GMT
            Not After : Feb  1 05:12:15 2026 GMT
        Subject: CN=6975a630-126b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:b8:e0:62:26:a8:23:1a:42:42:77:7d:f3:
                    12:a1:2d:74:b3:7d:ea:00:bd:4a:18:55:e2:90:d0:
                    79:8a:8b:a1:8a:5d:fd:84:4f:27:d7:ea:96:0b:89:
                    cb:b0:7d:84:1f:f1:de:21:df:fc:20:c0:80:65:76:
                    ea:a0:9e:de:0a:7f:64:30:99:e8:1e:fd:c8:6a:4d:
                    b6:01:ec:2f:a5:87:dc:b8:31:52:56:48:05:11:cd:
                    d4:1d:e4:62:74:55:22:42:3d:95:d4:1e:50:ae:a5:
                    07:5a:e4:38:0b:60:05:15:8d:b3:66:15:6a:3c:7d:
                    1d:d0:55:2e:e3:fa:1f:ce:6d:7d:14:9e:a5:4f:92:
                    b1:46:1a:8c:97:de:02:2d:75:fd:88:d1:ce:e5:cd:
                    0e:a3:b3:b6:7f:41:cd:05:a5:2b:5d:79:29:36:2a:
                    eb:bf:7b:6b:90:f4:d0:43:2d:e6:8a:ca:e9:ed:7a:
                    06:00:30:ac:30:e5:5d:4c:85:f7:98:cb:33:83:1b:
                    f1:06:0a:98:72:60:ef:63:3f:30:40:07:1b:94:6d:
                    16:a8:cb:b9:bf:d2:1f:22:81:b0:23:f1:40:90:13:
                    7a:b0:0f:c9:d0:1c:28:c4:0c:04:67:bc:f4:cb:6f:
                    8c:06:ed:75:e6:7e:1d:c8:1b:c7:26:da:a8:ab:23:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:31:F4:ED:6C:64:A1:BA:4F:46:06:80:91:18:C3:22:58:2B:AD:F3
            X509v3 Authority Key Identifier:
                keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:ce:43:31:35:57:d0:61:69:36:1c:5a:84:2c:fb:3b:d4:
         4d:00:26:69:70:fa:26:9f:b9:a8:90:c1:51:f4:7f:52:02:a4:
         cd:0a:ca:d7:8c:be:03:ab:66:b9:e3:11:17:fc:4d:27:0e:66:
         69:37:4c:1d:d5:8e:ca:f8:8b:19:19:16:42:5f:68:c4:0b:04:
         13:ce:ef:83:76:18:3d:68:fd:d2:b6:c9:d7:52:4f:45:40:ec:
         b7:fb:55:b7:d4:c0:e8:8f:b5:b4:b2:22:af:bb:4d:77:a6:d4:
         9c:77:1b:cf:6e:b0:ad:24:7c:fa:db:db:1d:36:53:3e:23:27:
         b9:2e:80:cc:c5:e6:1e:8f:bb:58:59:3c:f3:db:37:85:86:2d:
         d3:63:f9:bb:35:87:f5:c6:7d:85:0b:11:0a:75:bc:b9:e1:5a:
         25:08:bc:79:6e:df:95:97:fa:7d:68:bb:4b:0c:28:2c:ae:35:
         31:34:f6:7d:20:e1:81:22:a3:65:2a:41:b2:fe:da:02:80:53:
         1f:c4:f0:36:10:59:81:57:a1:68:bb:cd:f0:78:38:9e:77:3c:
         e8:5c:05:ef:29:45:8b:57:fe:8f:cb:81:27:a0:f0:42:bc:3d:
         e5:b8:5a:23:d4:6b:6b:c4:87:44:00:1f:a7:03:e4:57:48:ee:
         8d:5d:3f:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzNTcxMTAvBgNVBAUTKDM2MUZBREEyRTBBODhDRjI4N0Y0Q0U2Q0MzQjQ0NjJD
OTEzMzBCRkMwHhcNMjYwMTI1MDUxMjE1WhcNMjYwMjAxMDUxMjE1WjAYMRYwFAYD
VQQDDA02OTc1YTYzMC0xMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQW44GImqCMaQkJ3ffMSoS10s33qAL1KGFXikNB5iouhil39hE8n1+qWC4nL
sH2EH/HeId/8IMCAZXbqoJ7eCn9kMJnoHv3Iak22AewvpYfcuDFSVkgFEc3UHeRi
dFUiQj2V1B5QrqUHWuQ4C2AFFY2zZhVqPH0d0FUu4/ofzm19FJ6lT5KxRhqMl94C
LXX9iNHO5c0Oo7O2f0HNBaUrXXkpNirrv3trkPTQQy3misrp7XoGADCsMOVdTIX3
mMszgxvxBgqYcmDvYz8wQAcblG0WqMu5v9IfIoGwI/FAkBN6sA/J0BwoxAwEZ7z0
y2+MBu115n4dyBvHJtqoqyPISwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4x9O1s
ZKG6T0YGgJEYwyJYK63zMB8GA1UdIwQYMBaAFDYfraLgqIzyh/TObMO0RiyRMwv8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xNEE3OEYyQ0RG
OEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQS0g5TTVzdzdSR0xKRXpD
X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNfdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODM1Ny8xNEE3OEYyQ0RGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQ
S0g5TTVzdzdSR0xKRXpDX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBW85DMTVX0GFpNhxahCz7O9RNACZpcPomn7mokMFR9H9SAqTNCsrX
jL4Dq2a54xEX/E0nDmZpN0wd1Y7K+IsZGRZCX2jECwQTzu+Ddhg9aP3StsnXUk9F
QOy3+1W31MDoj7W0siKvu013ptScdxvPbrCtJHz629sdNlM+Iye5LoDMxeYej7tY
WTzz2zeFhi3TY/m7NYf1xn2FCxEKdby54VolCLx5bt+Vl/p9aLtLDCgsrjUxNPZ9
IOGBIqNlKkGy/toCgFMfxPA2EFmBV6Fou83weDiedzzoXAXvKUWLV/6Py4EnoPBC
vD3luFoj1GtrxIdEAB+nA+RXSO6NXT8d
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:24:45 2026 by rpki-client