This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File:                     nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier:          whXl9jaVJbCxiTUU0c4+JuXb/yDsNSHHvpRo5ior1O4=
Subject key identifier:   D1:1F:63:F1:6C:81:F3:8E:83:B0:95:AC:A5:77:9D:16:E6:1E:DA:03
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer:       /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number:          94
Signing time:             Sat 17 Jan 2026 05:33:48 +0000
Manifest this update:     Sat 17 Jan 2026 05:33:48 +0000
Manifest next update:     Sat 24 Jan 2026 05:33:48 +0000
Files and hashes:         1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: NnBqb9GijvFalV3tvoGWACFrhojGuO+WSC00ousA/08=)
                          2: AF75682A101911F09363D44DC4F9AE02.roa (hash: xmriq54EyLF1B3bTExDk9IsDRaD4W5eEAO8AyaCzAaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
        Validity
            Not Before: Jan 17 05:33:48 2026 GMT
            Not After : Jan 24 05:33:48 2026 GMT
        Subject: CN=696b1f3c-75fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:06:86:5b:1d:4b:77:07:1f:93:c1:44:3b:
                    08:ff:55:39:d2:74:37:f4:77:26:d5:8b:59:2c:fa:
                    2a:94:c6:7e:4c:68:2a:6d:09:33:2c:0c:44:af:de:
                    74:14:5f:16:ba:1a:f6:a2:c1:b7:3e:e3:06:40:58:
                    11:2c:b0:de:cb:bc:ff:c3:d3:07:d5:15:61:e6:a7:
                    e7:65:67:d2:fe:09:95:ab:dd:25:a1:51:1a:9a:1e:
                    26:09:fd:63:c5:2c:bd:d7:41:95:b0:51:f1:3a:e7:
                    d9:3c:23:8f:64:04:f7:af:0e:40:c9:ac:01:95:9b:
                    04:b5:36:67:7e:de:5a:2a:80:0e:c8:3a:7d:12:8a:
                    6b:b3:36:7b:44:67:0f:30:17:e8:64:78:e1:5d:cf:
                    9d:5b:e5:09:ea:36:1d:02:ba:9c:2f:98:c1:99:33:
                    89:f0:f0:d1:80:e0:71:09:70:de:c3:20:f2:74:6e:
                    37:0c:1c:b3:f7:f2:85:22:a9:16:0e:55:45:e8:0f:
                    30:d3:21:08:c1:7f:6a:b1:74:18:5d:0b:77:94:29:
                    0f:b4:e6:9d:1b:50:2e:6e:2b:7a:e2:a6:d0:4e:8a:
                    fd:6b:2e:ee:c0:4c:52:9c:fa:7e:7b:17:5f:7b:93:
                    94:c6:d5:5a:91:18:2d:bf:14:1a:bd:d7:60:df:33:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1F:63:F1:6C:81:F3:8E:83:B0:95:AC:A5:77:9D:16:E6:1E:DA:03
            X509v3 Authority Key Identifier:
                keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:33:42:e6:1e:d7:02:5a:5b:3c:f5:60:9f:c2:ae:f6:89:19:
         80:63:6d:bb:ab:67:25:e5:8b:25:a4:2e:c6:8d:b2:08:bf:e6:
         af:f3:88:01:14:4b:9f:11:4a:df:a9:2a:82:98:cc:47:e6:ac:
         83:e1:bd:6f:b7:21:bd:2a:e3:03:f9:6c:85:07:52:40:0c:b5:
         5d:19:a8:33:06:c0:9a:7c:0e:00:2d:e9:c9:41:ea:f3:5d:04:
         c6:92:16:0d:ff:09:1d:c6:8b:37:a7:3a:19:8c:bb:83:6a:7c:
         4c:3c:ee:9b:1d:d8:17:79:ea:4a:9c:2c:2f:ab:96:af:31:fc:
         ed:46:97:5a:6a:3d:c1:fc:06:a3:c2:77:96:8c:ad:aa:b7:1d:
         a2:16:01:08:f3:c4:d5:81:3c:55:f1:15:7c:ac:e1:bb:d7:ae:
         f6:2f:fd:df:02:8e:6d:26:63:b9:4c:15:f9:c6:67:bf:62:06:
         ec:f2:a9:d9:8f:a0:f9:a2:16:e9:b5:3e:8b:1a:c3:e0:9a:d4:
         6a:2a:9a:89:76:a5:47:95:e9:51:2d:8f:2c:03:dc:85:37:c9:
         38:7f:83:55:98:6f:23:8e:15:28:a0:0d:43:8a:ad:c4:c2:ee:
         49:1c:26:e2:df:57:1b:0e:12:f4:a0:c3:8e:da:07:54:df:04:
         cb:f3:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:59 2026 by rpki-client