This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File:                     ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier:          qyG7l3dEisy/wC7JjK0YdvEe9pbpHukg8CiYdza7GM0=
Subject key identifier:   2C:93:A8:8B:43:7D:D9:0F:80:6F:68:B4:C0:BA:A7:A9:33:C1:B5:DD
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       3773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number:          35F7
Signing time:             Tue 20 Jan 2026 14:44:17 +0000
Manifest this update:     Tue 20 Jan 2026 14:44:17 +0000
Manifest next update:     Tue 27 Jan 2026 14:44:17 +0000
Files and hashes:         1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: lNSglvXQ/25TSHakalZOkLsXiuDOdg8WXDcSv06MjNE=)
                          2: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: 89eEUpRQHSJ8X1lImXGmURAImfIF1FtpfbrbpBLEmDo=)
                          3: 691D0462E6FD11F09102F531686F56BC.roa (hash: ORCzm8lk1uiPL8hBhaKfWr2fmgLgL6/98Mji1a+L420=)
                          4: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: hFXanv2FdjB0oerr/Ni9RmWLKXd7bj75bYHKTp5JZ4U=)
                          5: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: 74RIIXCsVyk2LOqxXGG8myKMnT9xwaL2IEwmBulTtc4=)
                          6: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: EUm4AnmfuJxU75sTZEUXibkajEE5FVqoIFPKGh69ArU=)
                          7: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: hk6nfRNdxkr1KrGE/tfXLkIoFCaShIIlre48Dkw+60k=)
                          8: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: hCAJoif7R0PdtafhhCqVg3AWh/fUgT/PZ22s2qQ33mA=)
                          9: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: UStQZ3E5ENhOJAnKZAoPf8pnLHZK3+vt2+bwJ7bo508=)
                          10: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: VYBHve/PNmOFeIWgiVN/Red7+4ngw1/OUZ+8fRDI5rI=)
                          11: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: idSl8lJvkqdSo60nq2wum68o9p4rKFmDbGlEVDUP4DE=)
                          12: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: C9sOI6EfTgRnMQGNjlrtl3KFe7JPwkVRiva430VVNhg=)
                          13: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: irNVJAgK3pBegIwIYQHvfU2ICa37uezrCrR7Sshxk/Y=)
                          14: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vzBcTdf96+UTQqQZlkeYwtQci7kemGbUS01k0jfvWtI=)
                          15: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: GJ+Ts94sVlUdI4E9xrQTvfVMrj+KCnN2xtF35+3yCvE=)
                          16: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: jlbUlIXnT9veJGusBLS+x09R8IWreW5sDY2cRLkBosA=)
                          17: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: Pysow4ghhE6bNtWAkyi1inOqPNBVAlZxtG0k9FkRDpM=)
                          18: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: twGH4Ti0Hxo3XFvPXLG4LeJ5bIvmDJLFNJkw3EGUZio=)
                          19: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: JRI97yoxRtupHfmn7kbQDCY5sz6BBIJOh/q9HLp8tPI=)
                          20: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: VrbZ7ZecbNcImk9iVkkzXLKwbDb+F2iSfzr14g+V7aQ=)
                          21: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: JqpaA6uavzScEzQE05g7FN0bGDgZqNMIyby4mXtlKkU=)
                          22: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: DUYEU2WPRgGRjSa+GBl8Qamn18toiw7tspgbnam3lYo=)
                          23: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: YIkgFm4YlQ3B4lEIbOf0SksB4/x97E+3vlPXwWTeW9Y=)
                          24: 35E95924844811EAB301615FC4F9AE02.roa (hash: LgoFbTvnCYGxtb9l3zKpoNxXJ+KSjB/JRV9oy3sEYvk=)
                          25: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: ukv1HUDNVDJbCJlkSDyGbdgGzyB74+5Ji2qFWgrv0gw=)
                          26: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: /p/aYFDXmU+p5r2x/x59lnZ8e1gVGwdb3q9zI0rbkwk=)
                          27: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: jV1pO0tJQkm8tDF//+xAb/Vr8QQlVyReb+p4WbFsB4g=)
                          28: 35575C68844811EAB301615FC4F9AE02.roa (hash: IpJzY/E3RfTD/Jty42OF5cBR7XD15VMXMCEpMRRL3LU=)
                          29: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: va72E7xgUhipybtVeUXFFu66WOtMudWBDnK3BZLcOzk=)
                          30: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: Qoz5g9368HMZWctAVVNXY9CZ9LyOlyI2/eGHTTT7kQw=)
                          31: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: RZHpITklMqhnuO90bEeP3i7RWRtO5TJRoQwAU5BGgUs=)
                          32: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: Tvw2f69b+5p+ID20B8iBZZ0yBfURv9eNZRD114TIL4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14195 (0x3773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Jan 20 14:44:17 2026 GMT
            Not After : Jan 27 14:44:17 2026 GMT
        Subject: CN=696f94c1-5043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:97:a3:aa:cb:6e:11:b6:55:88:b1:d1:83:
                    ea:cd:97:a6:f3:a1:d9:ad:7a:ab:05:98:8f:61:9b:
                    b3:c2:bb:8e:10:37:3f:db:53:fc:41:08:59:d1:d3:
                    4e:d0:71:3c:ce:ef:f3:dd:e6:37:d1:2b:92:71:9b:
                    dd:c9:fa:d7:93:81:e3:04:f7:4a:f7:46:9e:56:b7:
                    cd:cf:aa:98:90:df:a2:8d:20:d5:8e:f3:c9:38:d8:
                    1b:9d:f0:71:6e:57:df:9f:5f:1c:9e:2d:03:80:d1:
                    78:55:aa:0d:e8:b9:98:21:8d:27:55:88:2e:c1:4e:
                    71:3a:58:59:d0:f6:7a:f2:f0:9a:c0:3c:3b:55:3d:
                    82:fe:88:5b:6c:88:de:56:72:51:b5:52:2d:0b:6b:
                    28:3c:c3:24:43:6d:f6:fb:9a:91:4e:42:57:22:c3:
                    45:6e:a2:09:a9:1d:6b:f5:28:ae:63:23:a3:0b:3b:
                    e6:b5:b9:41:68:33:22:79:79:56:4b:df:cc:aa:38:
                    54:b0:79:12:8d:32:99:f5:87:fc:6a:76:db:28:32:
                    20:f5:10:36:80:09:07:7a:f8:cd:c3:39:c6:e6:fa:
                    81:85:4e:07:10:34:96:e1:f7:b4:43:43:fb:42:e3:
                    32:a2:3a:82:f8:fe:88:5c:ff:bb:6a:eb:69:3c:e7:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:A8:8B:43:7D:D9:0F:80:6F:68:B4:C0:BA:A7:A9:33:C1:B5:DD
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e7:c4:c1:0b:3e:0d:3a:73:cf:0d:b3:33:b8:ee:5d:2d:b4:
         7e:d9:af:a4:94:c3:f1:e5:2b:f8:9d:c1:3a:ee:23:35:82:91:
         75:44:33:45:f4:90:9f:ac:49:b8:38:5b:80:d3:7d:cc:53:5d:
         60:7e:5c:bd:5b:d9:9b:9a:8b:31:f6:93:d1:46:44:71:5a:62:
         93:a6:0e:6d:48:c5:80:75:0f:4c:1c:c4:08:7d:cd:74:1c:6e:
         7e:5b:0e:7d:d9:71:8e:d5:b3:3a:3d:7a:fa:63:a5:0d:5e:61:
         8b:04:1e:29:8c:cb:a0:69:16:54:3a:28:66:b3:9d:83:57:4b:
         ee:e3:fa:cd:72:19:8c:e7:c6:c0:88:cc:5e:5d:b7:71:cd:ab:
         83:04:d8:6d:03:87:5d:91:c2:64:5a:f7:f8:a9:a5:82:f1:e7:
         dc:5d:b3:07:88:ad:aa:b7:5a:f2:64:b9:81:e7:db:53:52:a5:
         ff:15:a6:70:c9:76:34:6a:f6:0a:0a:3a:7a:ba:3c:66:e0:9a:
         41:1d:01:5a:88:ab:b0:95:55:9a:fe:da:c6:4f:a7:aa:e2:d6:
         09:a1:d8:83:0b:a4:fc:cb:4b:1f:1b:28:98:37:3c:31:9f:85:
         15:55:5e:63:c4:b9:b0:23:85:c1:6b:ea:c6:c5:e7:09:5c:db:
         00:e0:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 02:19:00 2026 by rpki-client