This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
File:                     N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json)
Hash identifier:          yCPlY6HM9YEnNSDF2Q0G77kP8pZZFew7WPHj6ONVFPk=
Subject key identifier:   C1:A0:98:ED:17:7B:5F:2C:05:21:EB:C8:35:88:9B:D0:C4:7D:EE:3B
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Certificate issuer:       /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial:       0D03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
Manifest number:          0CED
Signing time:             Fri 02 Jan 2026 17:48:24 +0000
Manifest this update:     Fri 02 Jan 2026 17:48:24 +0000
Manifest next update:     Fri 09 Jan 2026 17:48:24 +0000
Files and hashes:         1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: QxKVRv6a0d2pDIgUzfZ1MAsqFDMcg3ngONsYg3jSeL0=)
                          2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: Q0U9jLmGlDphifIjeRw5dxgCa78hCZrZGnpWBMtnN1E=)
                          3: B647F704090C11EFB666C967C4F9AE02.roa (hash: MfPaEPQ52jdvelQfKc4jbQkppAchA+eVpqN/8W05/oU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
                          rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 17:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3331 (0xd03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
        Validity
            Not Before: Jan  2 17:48:24 2026 GMT
            Not After : Jan  9 17:48:24 2026 GMT
        Subject: CN=695804e8-719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:67:ab:53:cd:86:03:1c:75:47:76:53:b3:
                    8f:27:5f:e7:36:a4:a1:f1:1a:d8:57:ce:11:18:2f:
                    a1:e3:5e:5a:9a:ef:4d:f4:c0:7d:d7:15:f6:88:37:
                    a5:24:30:3d:78:5b:87:34:c9:80:ce:e7:d2:b4:8e:
                    a3:f8:46:af:79:c3:91:f6:a5:06:19:4d:de:b0:0c:
                    43:b1:c2:e5:25:eb:60:ea:56:36:ed:fd:8b:75:4e:
                    09:17:f5:0f:79:16:3f:72:c5:dd:93:ed:98:2f:33:
                    01:67:bf:e8:f5:3c:fd:20:71:28:4c:56:91:56:3e:
                    94:3b:7e:08:58:6e:43:2b:af:98:ca:fb:b6:91:26:
                    24:20:49:11:29:b3:59:f4:01:20:c6:13:1f:ba:09:
                    00:aa:8a:87:c7:bc:f3:06:11:59:9f:bc:17:5f:38:
                    68:c6:61:84:6f:47:1c:66:8b:bb:fd:1c:aa:9f:94:
                    b4:f6:74:a5:31:ab:35:c8:8a:16:0d:50:1e:e9:2a:
                    6f:d3:fb:04:ae:ee:04:c9:fe:9d:20:93:77:d1:e8:
                    ec:44:0e:2f:b3:d8:d7:42:47:5c:04:49:10:4e:98:
                    0a:36:d5:b8:d5:30:a9:21:f6:cb:dd:60:7d:68:f7:
                    1a:4b:be:ac:66:59:1c:cc:c8:50:1c:9f:c6:d0:b6:
                    58:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:98:ED:17:7B:5F:2C:05:21:EB:C8:35:88:9B:D0:C4:7D:EE:3B
            X509v3 Authority Key Identifier:
                keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a5:f0:91:d3:59:65:05:20:ac:06:f2:f7:64:68:f9:1b:88:
         7f:4d:99:75:7f:ac:73:7d:06:19:35:7e:6b:fc:f2:ed:53:2c:
         60:01:98:ea:b0:f5:fb:28:64:91:1c:6d:4c:dd:7b:b7:02:8b:
         09:06:c6:18:07:3d:36:94:cc:ab:96:d1:f8:8a:d5:64:59:63:
         1a:7c:68:07:17:52:14:6c:93:b5:c1:ab:fb:d8:7c:25:1f:6f:
         a5:a6:8d:73:ac:68:bc:76:02:1b:fe:d6:86:ee:f0:09:88:7c:
         94:74:c7:73:33:39:a6:67:f7:e3:2f:73:cb:d2:cd:bb:a7:d1:
         43:62:58:d7:62:a5:e5:a8:01:fc:7b:85:eb:51:64:0c:a1:c1:
         1c:c9:d7:f9:61:cc:d5:04:9f:38:c1:52:27:c6:9e:c3:d2:72:
         ba:a5:8b:78:a8:97:55:79:50:1a:9b:07:15:aa:a6:47:83:d5:
         26:0e:48:35:10:46:1e:9c:94:b6:43:a9:52:77:09:e8:d4:c0:
         0e:96:f7:61:d0:23:64:ab:bf:52:68:6c:1e:1e:70:7d:81:30:
         97:f4:79:8a:d3:bb:46:56:45:3b:a9:1d:67:2f:91:5b:2b:5c:
         29:07:6d:e6:1e:5f:12:1d:de:12:6e:bd:c3:be:26:c0:52:e8:
         c5:d3:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 21:45:19 2026 by rpki-client