This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File:                     nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier:          Pw59RbyM4xJcmadp5N0p0cmSKqMyIJFjriLIp77bwTk=
Subject key identifier:   4D:9B:37:F8:19:C7:50:1A:3B:37:ED:AC:AE:52:B1:3B:D4:17:CA:CA
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer:       /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial:       07AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number:          1B37
Signing time:             Sat 10 Jan 2026 16:42:26 +0000
Manifest this update:     Sat 10 Jan 2026 16:42:26 +0000
Manifest next update:     Sat 17 Jan 2026 16:42:26 +0000
Files and hashes:         1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: GfH1DFoAJwLAx8FnzgExFX62JvLNZIF9rSC1H3dHwP0=)
                          2: C56AF018E98B11F0A24D3E834F6F56BC.roa (hash: yZ2jVE40yA33X871A/zydQhRX13sbn7OZAORMUr4j0Y=)
                          3: C6BB442CE98B11F0A24D3E834F6F56BC.roa (hash: zHyllHcu9StS82n7csujHfiId/g/hBgvUho1HL7ubMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
        Validity
            Not Before: Jan 10 16:42:26 2026 GMT
            Not After : Jan 17 16:42:26 2026 GMT
        Subject: CN=69628172-e602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:0a:16:28:9f:e6:88:d5:18:6a:70:70:e5:
                    6f:63:47:80:b5:fe:16:7b:99:32:b7:c7:f0:37:15:
                    44:d7:ff:5b:4c:93:68:2e:20:b8:da:1f:0e:be:1d:
                    d9:b1:c6:28:89:94:22:cb:21:52:71:89:a4:c5:71:
                    1b:a5:2d:eb:23:57:b6:c2:e5:7a:75:8c:8b:45:00:
                    ad:9d:72:fd:ad:6b:27:e6:d4:48:52:8f:57:17:61:
                    93:57:41:d9:7e:bd:6e:29:38:53:fb:f1:58:76:98:
                    3b:a4:27:98:27:1e:cf:34:60:cc:a0:e6:76:ea:e3:
                    1a:a8:eb:f9:e1:2a:f9:8c:80:df:fb:ae:63:d1:fa:
                    40:a7:68:09:1c:17:57:95:ac:29:6f:b4:3c:35:2f:
                    31:14:00:e8:aa:f3:9a:e4:97:15:8f:c1:02:e7:2e:
                    50:8f:18:6b:c7:64:ab:5b:a3:dc:56:9a:d5:8d:dc:
                    db:33:c4:59:eb:15:0f:a9:5a:ba:db:c5:a3:8e:70:
                    fe:f3:14:b3:04:a9:f2:f9:dc:12:e4:3e:d4:2a:72:
                    e8:f9:a1:49:b6:17:b5:dc:94:9d:e9:34:55:c7:5b:
                    f8:92:16:d9:8b:b7:9f:f4:de:79:35:5d:60:d3:44:
                    89:1e:b2:4b:97:ec:36:49:d8:d3:c2:29:fd:a6:1c:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9B:37:F8:19:C7:50:1A:3B:37:ED:AC:AE:52:B1:3B:D4:17:CA:CA
            X509v3 Authority Key Identifier:
                keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:76:a5:39:cc:91:5e:53:72:21:ea:b3:b1:5c:bb:a6:62:
         0d:9e:30:5d:c7:5a:0a:91:44:60:e9:a5:24:6f:36:d7:ba:9f:
         cd:5c:3a:76:03:e1:9b:66:b2:a1:29:2c:ce:4c:4b:7e:d2:ab:
         35:fc:d3:6e:b2:13:da:4a:0b:e2:6f:d4:1f:11:0c:94:50:c2:
         dd:fb:d6:87:c8:7e:fc:65:90:0d:4e:66:c4:b8:b9:06:e7:c4:
         5e:bd:a4:db:4c:a3:b4:e5:13:24:d4:a3:68:56:f6:53:69:21:
         dc:77:a1:25:23:68:b4:6d:a5:a0:95:9e:e8:9f:b4:96:c7:db:
         d1:7e:4f:ff:53:64:6d:c4:f8:62:8c:20:95:ac:f3:f2:10:e7:
         b4:ce:37:d7:bb:2e:6a:3b:21:5e:88:d3:5e:4b:76:1c:29:0d:
         cb:ca:9b:5f:94:f9:6a:78:a7:a1:7a:63:7b:18:0b:19:0a:c2:
         5f:b8:95:a9:dd:c3:a4:ac:c4:c9:cb:bf:b9:52:cd:f5:15:f9:
         d8:3b:3e:31:bb:fe:4c:12:74:0a:8c:dc:18:a4:44:62:f2:fe:
         20:3e:88:0e:aa:63:fc:8f:74:3d:eb:23:ad:c1:a1:b6:0f:2c:
         0f:fe:ca:b9:05:11:12:4e:e2:9a:9f:be:b6:2a:16:1d:d6:d3:
         4e:b6:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:19:19 2026 by rpki-client