This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File:                     NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier:          dmNPLFZftBRuNIRWoUYaC1X3TR3pE41HQm8ExLCId/o=
Subject key identifier:   E8:8D:B9:1F:3B:33:77:09:F6:90:66:46:16:A4:F1:3E:17:A4:3C:74
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer:       /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial:       1CD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number:          1CBE
Signing time:             Sat 10 Jan 2026 15:58:24 +0000
Manifest this update:     Sat 10 Jan 2026 15:58:24 +0000
Manifest next update:     Sat 17 Jan 2026 15:58:24 +0000
Files and hashes:         1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: bUxJhCyCYDTCReLvonLdWqDmqQSoIiQm+tr3KRWIUfc=)
                          2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: fMJYRNYu9EHrc5oKc1TxPlzepBubKFgRR2gCF/JM5ZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
                          rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 15:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7383 (0x1cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
        Validity
            Not Before: Jan 10 15:58:24 2026 GMT
            Not After : Jan 17 15:58:24 2026 GMT
        Subject: CN=69627720-7329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:22:bb:1e:39:12:2c:1e:02:32:af:9d:09:
                    a2:1f:23:0b:fb:b4:19:e1:b5:15:70:37:50:5e:15:
                    1e:e3:24:8e:62:c0:f3:6b:cd:2a:29:b3:de:50:e6:
                    7b:6a:11:49:20:aa:5e:6e:b3:1c:87:00:fd:10:a6:
                    40:71:4f:ee:c7:ae:8a:e9:cc:54:96:5a:f3:44:ea:
                    01:3d:6c:5c:16:e9:df:1f:14:e2:b2:eb:f6:98:d4:
                    b9:0a:b6:83:25:63:75:29:16:da:fb:fb:13:3d:99:
                    40:1a:28:f1:50:8b:ca:04:e0:b9:42:e6:da:ff:2e:
                    60:f4:c4:84:1b:78:aa:75:30:21:41:9c:11:81:7d:
                    1c:74:97:2c:41:74:35:9b:d0:9f:43:3d:d7:29:d9:
                    b1:68:a1:11:d6:51:3f:38:b1:61:e8:b7:cd:6b:c2:
                    5b:05:6e:8a:5a:47:2d:bd:83:0c:00:73:7a:30:03:
                    c6:8f:26:db:d6:c0:d5:48:f6:1a:53:39:7f:94:20:
                    e1:c2:e1:80:c1:7b:b6:6c:49:57:67:29:8e:46:63:
                    17:eb:e6:10:ab:70:45:ee:66:a8:ff:99:95:90:ab:
                    bd:97:75:a1:59:a0:9b:e6:15:f1:d6:46:41:2b:26:
                    8c:19:a3:d9:1d:5b:5e:b7:0a:8c:43:95:be:3b:d1:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8D:B9:1F:3B:33:77:09:F6:90:66:46:16:A4:F1:3E:17:A4:3C:74
            X509v3 Authority Key Identifier:
                keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:04:9a:11:32:54:43:2a:85:10:f5:3a:2e:06:a9:96:2c:b0:
         71:e2:41:40:89:29:15:e6:69:bd:7b:68:4d:b4:94:2e:f7:fd:
         f8:e7:1e:c7:35:f9:97:4e:fd:29:c5:15:89:3d:a9:75:2c:c8:
         e7:67:4a:c7:07:9d:b1:6f:e6:59:c7:74:4e:d8:c8:d8:02:73:
         74:d4:6e:c8:7e:8a:87:cf:07:95:84:d1:68:d3:f6:2a:98:9c:
         e2:fd:73:8a:39:1e:55:de:f8:d8:96:cd:0b:a5:70:2a:f5:6d:
         dd:e0:f9:8b:aa:96:65:30:d0:6e:2c:65:12:dd:60:8a:11:08:
         e0:49:78:72:fd:c6:3e:c0:74:f5:e7:48:fa:78:f8:1a:08:56:
         04:8a:2d:0a:12:68:b4:21:47:36:78:e3:c4:86:ea:e3:13:c5:
         73:f5:e8:17:9e:50:58:65:36:03:7e:8f:5d:29:45:ea:1a:46:
         01:44:cc:04:24:51:8a:03:f4:b2:a5:2a:3d:44:aa:1f:43:87:
         95:19:62:79:6e:4b:20:32:aa:5c:a7:2e:e3:ca:94:c8:3c:bf:
         43:e1:03:aa:d1:a6:64:91:a1:e0:09:93:15:d9:68:ab:7e:8b:
         5b:ac:47:70:f1:30:71:bd:2f:b1:9c:df:77:0d:e4:4a:94:45:
         4b:5d:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:29:21 2026 by rpki-client