This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File:                     nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier:          7NvkQL836oarr8R8EYctX/kk2a0mtKgqQN0mQuaNhkY=
Subject key identifier:   B6:76:F3:A9:3D:8E:36:74:37:9A:02:12:C2:5C:25:9E:42:5D:10:CC
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer:       /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial:       175B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number:          174E
Signing time:             Sat 24 Jan 2026 16:22:08 +0000
Manifest this update:     Sat 24 Jan 2026 16:22:08 +0000
Manifest next update:     Sat 31 Jan 2026 16:22:08 +0000
Files and hashes:         1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: fUIg7nQvS2VAUE8fKKFlCgDxYfm4jzI56XBWCapx70o=)
                          2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
                          rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5979 (0x175b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
        Validity
            Not Before: Jan 24 16:22:08 2026 GMT
            Not After : Jan 31 16:22:08 2026 GMT
        Subject: CN=6974f1b0-8418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7b:05:ce:71:3e:40:7c:49:83:e2:0d:38:4e:
                    3f:59:94:da:16:b9:d1:cc:19:cc:8c:b9:da:5a:d9:
                    74:14:a8:82:ef:6f:f3:2a:82:42:82:00:f5:24:42:
                    b5:d0:ac:ee:85:b6:9d:77:a8:af:11:ef:c8:80:ac:
                    b9:e0:e8:d2:98:c9:90:32:78:af:18:59:29:f4:a4:
                    da:b1:6d:23:56:ba:33:6d:9c:4e:94:22:71:56:6a:
                    dc:ac:08:70:b3:8e:31:5c:72:df:be:13:d3:58:83:
                    c3:45:13:78:82:61:1b:54:c1:9e:3a:b5:16:ad:b9:
                    68:40:e8:3f:27:99:24:b5:21:bd:12:12:39:08:1a:
                    ee:aa:87:74:00:98:47:c1:4b:a6:e8:d9:f9:f8:8d:
                    32:80:bb:58:c3:03:6e:40:ee:87:1b:93:fe:a4:68:
                    ef:d7:12:06:03:00:cb:60:8c:8f:92:6d:91:88:b6:
                    50:eb:04:e6:b1:6f:9a:57:79:92:f2:c7:be:0f:7b:
                    b4:f6:15:b7:67:e3:20:00:8a:4d:6a:49:b7:f2:a3:
                    17:e1:fe:4d:46:22:47:b4:47:73:f4:68:92:59:22:
                    f6:62:91:27:2a:a6:8e:8f:31:ad:65:82:66:67:91:
                    bc:8c:b8:79:1a:44:57:1a:31:03:de:16:18:22:46:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:76:F3:A9:3D:8E:36:74:37:9A:02:12:C2:5C:25:9E:42:5D:10:CC
            X509v3 Authority Key Identifier:
                keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b3:c0:0f:5e:7f:23:1c:f1:b5:55:17:a5:46:e1:92:7f:5b:
         1f:a9:8f:4c:52:7e:88:aa:79:28:4e:1f:5b:49:42:c3:fa:8b:
         9f:fc:0f:fd:69:00:e1:70:96:18:28:e0:65:26:05:cc:1b:38:
         fb:d9:30:e5:f8:5c:52:c2:36:51:a3:dc:2a:e2:d6:63:e8:82:
         11:f1:a5:50:6a:4c:66:0c:b6:c9:0a:05:05:f6:f5:a3:a7:bd:
         d3:8d:d2:5d:c6:e8:78:fd:43:20:aa:00:17:e0:b4:d6:51:51:
         00:34:98:5b:f8:ac:1e:01:ba:75:81:bc:19:1b:82:e2:84:28:
         e8:77:72:18:8d:49:bf:10:db:32:14:c7:1a:96:84:15:56:f4:
         a0:fd:e0:e1:80:c8:91:ee:6d:78:25:2a:87:d5:1d:99:c3:c7:
         3d:88:f0:08:e5:a5:f5:de:b2:cd:25:82:b3:91:00:80:2d:8a:
         1b:df:51:27:14:95:49:92:d8:a5:16:59:2d:72:ee:3b:d0:35:
         66:5f:a7:7f:6e:bb:16:9f:e5:17:c3:83:35:59:3e:fc:36:8f:
         97:39:b0:b7:84:18:95:bc:9d:08:73:84:30:77:28:9a:cd:75:
         ef:8a:6f:0d:83:e4:38:6a:20:ba:f1:01:ec:88:83:b4:16:d5:
         0a:79:9b:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx
NTkwNUNBMkMwHhcNMjYwMTI0MTYyMjA4WhcNMjYwMTMxMTYyMjA4WjAYMRYwFAYD
VQQDDA02OTc0ZjFiMC04NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA73sFznE+QHxJg+INOE4/WZTaFrnRzBnMjLnaWtl0FKiC72/zKoJCggD1JEK1
0Kzuhbadd6ivEe/IgKy54OjSmMmQMnivGFkp9KTasW0jVrozbZxOlCJxVmrcrAhw
s44xXHLfvhPTWIPDRRN4gmEbVMGeOrUWrbloQOg/J5kktSG9EhI5CBruqod0AJhH
wUum6Nn5+I0ygLtYwwNuQO6HG5P+pGjv1xIGAwDLYIyPkm2RiLZQ6wTmsW+aV3mS
8se+D3u09hW3Z+MgAIpNakm38qMX4f5NRiJHtEdz9GiSWSL2YpEnKqaOjzGtZYJm
Z5G8jLh5GkRXGjED3hYYIkYhYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ286k9
jjZ0N5oCEsJcJZ5CXRDMMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz
QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl
MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzs8APXn8jHPG1VRelRuGSf1sfqY9MUn6IqnkoTh9bSULD+ouf/A/9
aQDhcJYYKOBlJgXMGzj72TDl+FxSwjZRo9wq4tZj6IIR8aVQakxmDLbJCgUF9vWj
p73TjdJdxuh4/UMgqgAX4LTWUVEANJhb+KweAbp1gbwZG4LihCjod3IYjUm/ENsy
FMcaloQVVvSg/eDhgMiR7m14JSqH1R2Zw8c9iPAI5aX13rLNJYKzkQCALYob31En
FJVJktilFlktcu470DVmX6d/brsWn+UXw4M1WT78No+XObC3hBiVvJ0Ic4Qwdyia
zXXvim8Ng+Q4aiC68QHsiIO0FtUKeZvA
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:25 2026 by rpki-client