This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File:                     nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier:          bMC/CIhq1KaQaRyGOTSW1FbdvVUH667a8UIKKnN6u6w=
Subject key identifier:   E5:0F:9D:1C:2E:44:2F:37:23:02:4A:04:CB:50:88:47:BB:CB:5F:5B
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       05BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number:          05B1
Signing time:             Sat 10 Jan 2026 22:22:47 +0000
Manifest this update:     Sat 10 Jan 2026 22:22:47 +0000
Manifest next update:     Sat 17 Jan 2026 22:22:47 +0000
Files and hashes:         1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: PJzXjTLcEjQl99Spi0+n7pWUZ4v9z6p9Y663tc9sCHU=)
                          2: 77465F12874511EEBEA58225C4F9AE02.roa (hash: xh9UKJYFp+YhsYj95yxNw0UlkYprDVOg6UWQXH5rOS0=)
                          3: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: q68S8qeaTqWEZ5l+4qz/s/O62R3KsNh3wb76imnXzwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 22:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
        Validity
            Not Before: Jan 10 22:22:47 2026 GMT
            Not After : Jan 17 22:22:47 2026 GMT
        Subject: CN=6962d137-7375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:a2:60:5e:40:1f:7b:f4:35:a1:0f:39:95:
                    7c:5c:a9:b9:d8:ad:c4:a6:88:12:49:bc:3b:f8:e4:
                    09:ef:43:23:d1:70:00:f5:b1:70:0a:02:65:45:1d:
                    53:5b:e9:80:da:35:20:6d:9d:79:d8:ca:b8:bf:57:
                    fe:2a:a0:15:44:b6:90:ed:51:5b:85:a4:95:9f:2e:
                    ab:77:f7:60:e9:82:0a:be:05:b4:61:d5:df:fe:59:
                    4f:34:11:12:a9:4b:88:54:de:90:39:5b:94:06:aa:
                    b7:e0:d0:2b:fe:e3:bc:c3:d0:28:5f:ee:51:de:c0:
                    f8:93:e3:b6:e0:c5:19:fc:78:58:bc:d2:ab:e9:d6:
                    8a:c6:03:f4:46:69:6a:9e:fe:e3:ef:08:72:8e:ef:
                    6f:90:2c:29:1c:14:13:d4:5b:4f:78:4f:19:40:0a:
                    b3:51:3b:ab:a1:4f:37:d9:eb:c4:a1:ab:08:de:66:
                    80:81:01:83:3c:81:78:b8:22:64:b7:01:bf:85:8c:
                    96:92:00:03:ab:a1:70:f4:f1:83:b5:00:de:5a:28:
                    65:00:95:75:3a:18:ab:43:48:2c:4f:6c:e3:66:bd:
                    82:e9:4e:dd:40:dc:a0:87:d7:d7:9e:91:a8:7c:27:
                    1e:9d:6d:ea:18:4b:ba:c5:23:da:0a:b6:e3:a1:e7:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0F:9D:1C:2E:44:2F:37:23:02:4A:04:CB:50:88:47:BB:CB:5F:5B
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:62:a9:31:f8:8a:16:ed:bb:82:8c:45:93:12:7b:fb:5a:25:
         bc:bc:2f:2f:12:89:32:fd:6b:39:d4:eb:d6:43:c0:86:8a:4c:
         12:2c:4c:48:a3:79:72:f9:1e:0f:e0:73:b3:32:26:05:80:d8:
         4d:92:14:e6:fb:bf:43:f3:60:35:3a:a0:98:69:d9:47:74:9b:
         01:89:a1:23:fe:b7:1a:b3:78:fb:a4:81:61:86:38:98:94:c9:
         4e:b8:df:50:62:ac:d8:d1:6b:94:c0:d8:27:f8:29:8e:d6:6f:
         9f:9d:71:26:b7:ce:f2:76:94:2a:36:e8:15:22:b8:1b:71:0d:
         5f:91:fa:94:6a:e8:9e:d3:80:cc:86:d8:9c:e2:1e:69:0a:89:
         03:45:63:8d:de:9f:7e:68:a9:1d:0b:46:84:e3:f2:54:62:e2:
         57:b9:c0:42:d7:91:99:ee:92:5e:31:3b:c1:4e:c9:84:1e:38:
         92:ee:e5:42:ed:de:cd:a7:d8:a3:58:1c:63:83:ec:83:48:e0:
         70:56:47:04:ab:80:aa:7d:08:bd:11:96:c7:3d:d0:db:9f:c2:
         c6:b9:58:d2:c7:54:2f:27:44:d5:d3:e6:cf:26:b8:10:8b:5d:
         fc:58:78:1d:f5:55:09:e2:07:24:28:b7:11:a7:64:05:d6:0d:
         bc:7d:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:23:14 2026 by rpki-client