This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
File:                     NAYp5_yg0jJa2fswVWg0aO8t0MM.mft (raw, json)
Hash identifier:          dWDQOwjvW2XeHgv98nl1u5GdpgPR9a3JXh+MK9UqFv0=
Subject key identifier:   CD:D3:01:BA:82:93:4B:8C:AE:9B:F5:41:DC:0D:A4:2E:EA:6E:82:28
Authority key identifier: 34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
Certificate issuer:       /CN=A91B9477/serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
Manifest number:          06
Signing time:             Tue 27 Jan 2026 07:21:21 +0000
Manifest this update:     Tue 27 Jan 2026 07:21:21 +0000
Manifest next update:     Tue 03 Feb 2026 07:21:21 +0000
Files and hashes:         1: NAYp5_yg0jJa2fswVWg0aO8t0MM.crl (hash: vARSJLn3o+HrbcPvT4HY1QxmUy/UqZRShKZbErGK1tQ=)
                          2: 6A1304F0F4DD11F09B4FF218486F56BC.roa (hash: WQxgZGoAJ6MfGyuUmAdgcDMMV751BdaXK9vKNZTensM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
                          rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 07:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9477, serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
        Validity
            Not Before: Jan 27 07:21:21 2026 GMT
            Not After : Feb  3 07:21:21 2026 GMT
        Subject: CN=69786771-4983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:d8:b7:36:54:df:28:f0:f3:1d:dd:e4:9e:
                    70:fd:97:69:09:26:ea:88:aa:f4:8c:9c:c1:c3:bc:
                    45:f2:07:79:6d:03:ce:d4:c0:aa:c2:53:bc:5e:3f:
                    15:32:df:92:e2:06:ac:fa:a3:69:ad:3a:35:9c:24:
                    ce:5c:06:38:8e:10:4a:05:a1:dd:74:40:25:cc:41:
                    c0:9f:99:a3:88:19:b2:e5:e0:09:f6:e0:a9:21:10:
                    66:94:b5:c3:9c:bc:74:2f:15:b9:48:fe:0b:1a:52:
                    d5:59:62:cd:4b:90:9a:5e:a8:16:f1:80:09:ae:c3:
                    b3:64:da:1f:60:4a:c4:9f:72:3e:b7:58:a9:52:39:
                    b7:3f:05:41:18:c3:01:55:bc:8c:ea:f1:da:54:af:
                    f1:1b:84:e2:41:85:42:be:cd:90:87:10:95:12:43:
                    07:38:65:7c:19:12:9e:18:8d:92:92:66:5a:01:8e:
                    00:ea:0c:ce:f2:9b:60:0b:1b:55:8e:42:33:56:85:
                    8f:e7:76:15:d2:3b:9e:20:75:50:57:d2:b1:2f:f4:
                    31:9d:b1:51:7e:ff:56:62:b4:83:ac:e8:c1:74:75:
                    9e:d2:00:7e:a4:b7:2f:2a:1b:da:f3:4a:c1:32:92:
                    6e:cc:02:19:86:3b:65:05:24:99:37:a5:2d:2b:78:
                    77:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D3:01:BA:82:93:4B:8C:AE:9B:F5:41:DC:0D:A4:2E:EA:6E:82:28
            X509v3 Authority Key Identifier:
                keyid:34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:5e:3d:b7:49:f4:52:dc:14:27:3c:87:52:08:e0:d6:b5:d6:
         ca:b8:05:90:3b:14:ee:97:5c:af:b9:77:fb:4e:30:6c:f5:bd:
         e9:78:97:2b:23:33:5d:1b:70:69:03:e7:5a:8f:af:68:81:1e:
         64:dc:be:d9:86:3d:e6:9b:9d:57:2b:1b:8c:1e:d5:3a:69:6c:
         a3:9c:92:f0:fb:a5:15:be:b4:19:06:95:59:73:cb:bf:c0:c1:
         bb:20:63:0b:cb:35:bb:17:4e:b1:57:d7:8a:5e:65:17:14:3d:
         69:81:cc:60:a5:79:2c:d1:50:90:1d:32:9f:a5:7d:56:46:b9:
         4d:04:8b:ff:5e:05:59:03:b2:a9:c4:da:b2:fc:1f:25:46:bd:
         97:3d:c7:5d:0c:7b:29:63:75:f1:9b:f2:1d:99:ba:79:23:33:
         06:16:de:9f:cf:6d:a2:fe:7b:a4:fd:d4:80:94:29:cb:13:45:
         e2:0f:7a:3f:0f:e7:34:9e:9f:4e:9a:d2:31:88:f8:90:9c:d9:
         30:d5:b9:1d:86:57:78:ed:63:2b:5b:a2:29:35:2a:c1:49:25:
         3a:b4:53:39:73:62:5e:d3:a1:38:3a:6d:d9:77:9b:b3:0b:b7:
         d8:5a:67:5d:68:f2:f2:cd:62:03:82:0b:ac:13:7f:e1:06:7a:
         a6:4b:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 19:34:45 2026 by rpki-client